Analysis

  • user interaction
    yes
  • max time kernel
    644s
  • max time network
    647s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 17:10

General

  • Target
    Impact FN.exe
  • Size 3.7MB
  • Sample260809-vpsemavygy
  • SHA256 6b606ad4e7c5d8972155964a298672474be926e704e24225e0bc8932a4f1f51c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Impact FN.exe
    "C:\Users\Admin\AppData\Local\Temp\Impact FN.exe"
    1⤵
      PID:4432
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\StepSave.mhtml
      1⤵
      • Loads dropped DLL
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3736
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ffc618bc188,0x7ffc618bc194,0x7ffc618bc1a0
        2⤵
          PID:2088
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,8210782018523531122,13590099528844351378,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:11
          2⤵
          • System Time Discovery
          PID:5064
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1936,i,14994385814633710264,6027455025903230370,262144 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
          2⤵
            PID:552
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2640,i,4113822983557165280,1246960238110186522,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:13
            2⤵
              PID:5404
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,15867432772442502344,5484991303596142646,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:1
              2⤵
                PID:1668
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,8819956188850341869,13844735767263014430,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:1
                2⤵
                  PID:3512
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,15745279635454529788,3441568580022266129,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
                  2⤵
                    PID:5524
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,17125718409911491753,12475685019710031792,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:9
                    2⤵
                      PID:3452
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3940,i,18109525381044744191,2371755484521240211,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
                      2⤵
                        PID:3716
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4028,i,11972657358731279784,15628096145920151255,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4036 /prefetch:14
                        2⤵
                          PID:2712
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,6320018553370673491,14597528836056076756,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
                          2⤵
                            PID:1528
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3960,i,4749213099089545874,14909512703340018352,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4056 /prefetch:14
                            2⤵
                              PID:5812
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,807806998152996499,8610744197529817152,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
                              2⤵
                                PID:4568
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,807806998152996499,8610744197529817152,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
                                2⤵
                                  PID:4204
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,1150100440716073571,4602354842028336792,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
                                  2⤵
                                    PID:5088
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,16516100401007497189,15863257734128172488,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
                                    2⤵
                                      PID:5104
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,14772978947902149016,10537841735758853458,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:14
                                      2⤵
                                        PID:4652
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,4891247957686585680,13362705993675447865,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
                                        2⤵
                                          PID:2316
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,2756098507336766719,16884869089753639483,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
                                          2⤵
                                            PID:2884
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5984,i,9573698018367522980,16362732620210217278,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:1
                                            2⤵
                                              PID:2020
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4860,i,2753504706147489524,15389850385889575404,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
                                              2⤵
                                                PID:5576
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1396,i,12554402425064794854,1940529895002286534,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=1380 /prefetch:14
                                                2⤵
                                                  PID:5928
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1408,i,11139498993565039562,12597790919401923141,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:14
                                                  2⤵
                                                    PID:5376
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1416,i,12052524008897438935,18400265445336987431,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
                                                    2⤵
                                                      PID:1976
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1396,i,1092994184094302589,5954180983770796474,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
                                                      2⤵
                                                        PID:3504
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=3888,i,6879087141668782953,15249933311183569886,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:1
                                                        2⤵
                                                          PID:4164
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7144,i,9340959001165743215,2403100166247552280,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:1
                                                          2⤵
                                                            PID:2436
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=4384,i,13511632490374107528,11886316182649956070,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:1
                                                            2⤵
                                                              PID:1932
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7336,i,605740264077301215,16213430227752731396,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:12
                                                              2⤵
                                                                PID:3764
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7496,i,6494231401878509686,9723721246970201481,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:14
                                                                2⤵
                                                                • Modifies registry class
                                                                PID:3660
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7692,i,1379647200801068032,2146071535860841996,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:14
                                                                2⤵
                                                                  PID:6652
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,2185533210690322483,1276048352096164091,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=1260 /prefetch:14
                                                                  2⤵
                                                                    PID:7148
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,2416027775895239939,574230635861285479,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
                                                                    2⤵
                                                                      PID:3920
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5376,i,7319824997175478702,6637313092226619880,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:1
                                                                      2⤵
                                                                        PID:4612
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6996,i,12480639359616147958,17843802899275916785,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
                                                                        2⤵
                                                                          PID:1996
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7920,i,11638930976482911013,5832070972069529628,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:1
                                                                          2⤵
                                                                            PID:1976
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7012,i,13958991228420014121,12483779265567927466,262144 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8152 /prefetch:10
                                                                            2⤵
                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                            PID:4348
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8164,i,18299014605645901949,1349304333882125521,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8128 /prefetch:14
                                                                            2⤵
                                                                              PID:2872
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,5489405888936030373,15184586666625290788,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:14
                                                                              2⤵
                                                                                PID:5344
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,10998127593274781904,16892402173742513208,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
                                                                                2⤵
                                                                                  PID:4880
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,16027346392552682959,9086565841174477212,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
                                                                                  2⤵
                                                                                    PID:1312
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3892,i,1684383288903507388,12931425096651747082,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4044 /prefetch:14
                                                                                    2⤵
                                                                                      PID:6368
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=920,i,4532643049349692735,3709768570843848208,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
                                                                                      2⤵
                                                                                        PID:6152
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3988,i,6346855737391282919,6286216463481038690,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:14
                                                                                        2⤵
                                                                                          PID:6564
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=3540,i,12662126770208274059,12823804817381545049,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
                                                                                          2⤵
                                                                                            PID:2420
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=6984,i,14635920395163825521,14440045338506837938,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
                                                                                            2⤵
                                                                                              PID:5980
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7012,i,12561022943193461529,17488778025037218632,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:1
                                                                                              2⤵
                                                                                                PID:4132
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=5592,i,14134974954245096171,8705831604602069925,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:7036
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1096,i,645807368858305470,10200887910149073646,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=1268 /prefetch:14
                                                                                                  2⤵
                                                                                                    PID:2344
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=7012,i,16259833393958217467,13393937963574261506,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8144 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:2600
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=5616,i,16889644512586063078,8883504436779208028,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5248
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8500,i,4832438024737925787,13626828780351109910,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:2376
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8452,i,18308750704287676714,8844031267545761171,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8664 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:4124
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8336,i,17946056997295201548,9733449190894897507,2097152 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8840 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:6080
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8608,i,5300301015600819405,17803772940275797128,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:14
                                                                                                              2⤵
                                                                                                                PID:1752
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8564,i,4836765400627579569,3441758567664396509,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:14
                                                                                                                2⤵
                                                                                                                  PID:4840
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8716,i,17467333810593232057,16026024160953483067,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:14
                                                                                                                  2⤵
                                                                                                                    PID:2424
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8464,i,8853505529035261065,13642643803578916607,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:14
                                                                                                                    2⤵
                                                                                                                      PID:6532
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,708828772227183036,16394062348260228528,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8976 /prefetch:14
                                                                                                                      2⤵
                                                                                                                        PID:1512
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8528,i,3750211445793642285,4229219308747842944,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8664 /prefetch:14
                                                                                                                        2⤵
                                                                                                                          PID:4924
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,16405720574755895185,4512331773661181672,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:14
                                                                                                                          2⤵
                                                                                                                            PID:6820
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8948,i,4789163469752915620,8648353482659234578,524288 --field-trial-handle=2388,i,17527582517914586498,5669580501636238379,262144 --variations-seed-version --mojo-platform-channel-handle=8572 /prefetch:14
                                                                                                                            2⤵
                                                                                                                              PID:4076
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                            1⤵
                                                                                                                              PID:1436
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                              1⤵
                                                                                                                                PID:5248
                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                1⤵
                                                                                                                                  PID:1640
                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                  1⤵
                                                                                                                                    PID:4876
                                                                                                                                  • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                    \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                    1⤵
                                                                                                                                      PID:3420

                                                                                                                                    Network

                                                                                                                                          MITRE ATT&CK Enterprise v16

                                                                                                                                          Replay Monitor

                                                                                                                                          Loading Replay Monitor...

                                                                                                                                          Downloads

                                                                                                                                          settings.dat

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          settings.dat

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          LOG.old

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                          • Size 334B
                                                                                                                                          • SHA256 43854113760ff0ce6d02763db6f090369f5bf8bf98c3d0e845d270d1011fb81b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          LOG.old

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                          • Size 334B
                                                                                                                                          • SHA256 1928ec5844f1f1009294100b060180b701c9144d39d3a3c9cb89997dde4771ea
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          LOG.old

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                          • Size 331B
                                                                                                                                          • SHA256 0225e66e13994e2cf32c52926e92c377c35c207daca0d07620e1305a8be65daa
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          BookmarkMergedSurfaceOrdering

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                          • Size 6B
                                                                                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          f_00003e

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003e
                                                                                                                                          • Size 66KB
                                                                                                                                          • SHA256 77df21477abc909a61db33e0f54965cdb1588e475d46dee935168b4721f73152
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_00003f

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f
                                                                                                                                          • Size 61KB
                                                                                                                                          • SHA256 300ab06fa3ab93bf62406e4c6f56950cbfe38716910a90e8d68a05daad52c6e2
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000040

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000040
                                                                                                                                          • Size 68KB
                                                                                                                                          • SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000041

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000041
                                                                                                                                          • Size 19KB
                                                                                                                                          • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000042

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000042
                                                                                                                                          • Size 63KB
                                                                                                                                          • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000043

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000043
                                                                                                                                          • Size 38KB
                                                                                                                                          • SHA256 49e64d3ed6fa7cd75bd9e1d68a4a6db1667e4706f6354a97bf562dced5c78464
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000045

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000045
                                                                                                                                          • Size 27KB
                                                                                                                                          • SHA256 a532ad904c3fec0d0f77cd275dce6fb52e352c68cfb8415b14534e9002c6cc71
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000046

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046
                                                                                                                                          • Size 18KB
                                                                                                                                          • SHA256 0b0b6b9a609ad590b762f5387b6fe738f088f6de44958a2c18e83c4c77b2c293
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000047

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000047
                                                                                                                                          • Size 24KB
                                                                                                                                          • SHA256 c7f1ab381d3c6f0c52968d2d14278c0b107b53a5e154b7381d2a46590e7d33f0
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_00004e

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
                                                                                                                                          • Size 56KB
                                                                                                                                          • SHA256 5de5b36c5940f7cbb68fdd5d003142ce3cf15cced79e3548cb5f5fdeeedc6f8d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_00004f

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
                                                                                                                                          • Size 672KB
                                                                                                                                          • SHA256 666946f7d7d6351c55feb8c1e6bc3da39fc19dae9691c59cceb38753b6d56986
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000050

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                                                                                          • Size 22KB
                                                                                                                                          • SHA256 689c7438b6f665862d1f93d807c202ae38f8a398e4fd15445ef9965104053596
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000051

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
                                                                                                                                          • Size 34KB
                                                                                                                                          • SHA256 34b51e64f00aa054a3eaa8d8a5cbc8e9d549b972fb62a1828f2f6af0ffac2d79
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000053

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
                                                                                                                                          • Size 283KB
                                                                                                                                          • SHA256 a6e883efa9d52ebb136f3f8d0e9738e165bb8a9456079df43585d69df69f814c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000056

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
                                                                                                                                          • Size 68KB
                                                                                                                                          • SHA256 096265551a5ee356be7ccefaa40a7de3929105288e029cda15c965cb65b55eaa
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000057

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
                                                                                                                                          • Size 406KB
                                                                                                                                          • SHA256 c9ec15f6b284850a9e9c19a7e64a22154929e0f9e15a44f9f7e394111739fb9d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_000074

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                                                                                                                          • Size 25KB
                                                                                                                                          • SHA256 801bf74d19393cfb9fd6b3a5e5316031ca8fe5961946c2186260bf7eeb45d59d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          f_00008a

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                                                                                          • Size 204KB
                                                                                                                                          • SHA256 4916aba931b5ff564855399fbc4439ca3ecee1536f0b2c32a884027a1892207b
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          temp-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 83f2cfa6117bf49e41b4745377047e9d8756d480d9c7c29be32114b0b0a46d2a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          temp-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 c47416bb6dacdda6a2b69ffb71c2dee1da6ce32ee67ff7e20dc620b841dfdd28
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 d965bf3d5490aee74c011cf6f90f89ad7eb3246bd9b890fddb05febd179bf857
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 c202717fabe52ccc181d7b592d151cccb77759e519936ca0ef66325a5e6dfd53
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 190468d409c88a19c4b66e2529c3207aeb6a097c99444f9478c7d7b9ca80e9ea
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          the-real-index~RFe5aefef.TMP

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5aefef.TMP
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 1b026d710e3e920ac84b7dbaf11f7e9963f0902ac34dbf2ca5b9ac09bb4d7acc
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          SiteList-Enterprise.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                          • Size 2B
                                                                                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          Edge Profile.ico

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                          • Size 70KB
                                                                                                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          000003.log

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                                                          • Size 107KB
                                                                                                                                          • SHA256 857dabe5bd3e5617ec808167abaf303f4d728c1a9ae7cb438e82b55cf3d1dd05
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          000014.ldb

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
                                                                                                                                          • Size 42KB
                                                                                                                                          • SHA256 01019d7d697a68017948ef79370681067855deadb1eab9c323b066a815efeb21
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          000016.ldb

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000016.ldb
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 b65c2b9a4f95f60e13ada008d179141099bb1cea6c47380a9acf17a7591e369f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          000017.ldb

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
                                                                                                                                          • Size 25KB
                                                                                                                                          • SHA256 4b0d8aae34bb6b88a24a9dabef3b4354a0a2c6dfca9f6b2abaa2c76f19002c90
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          000018.log

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000018.log
                                                                                                                                          • Size 21KB
                                                                                                                                          • SHA256 d2adada2b3acbfce4b28e5b9f9a4648ce88b2539c0200f4ef194d4091bf90913
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          000019.ldb

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000019.ldb
                                                                                                                                          • Size 5KB
                                                                                                                                          • SHA256 849fcb996ff31e58c2f41081fa6e35bf807538bbcae7111ba6d132d6bb8f6285
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          000020.ldb

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000020.ldb
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 921961d0c9588ec7eaa8d4a11ef483e1b12d75654335edd54ac8886794995975
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          LOG

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 8e5c3c88c12dccd42d6364e495e795e1690345ee749d5b0e6ceb627452e72f4d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          LOG

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                                          • Size 351B
                                                                                                                                          • SHA256 d5abb180b75ea7b5249d1e1e0740a997e8466b4917fb7c8c6bcadfe175a314d3
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          MANIFEST-000001

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 54fd21c6d4f1965a1b256467765c174c7da5eb765e224bbdcf864c496bc7f9f7
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          MANIFEST-000001

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                          • Size 23B
                                                                                                                                          • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          Network Persistent State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                          • Size 7KB
                                                                                                                                          • SHA256 c4fda19b35992a73032659f246635a46a371913b51fe4c0b4869321b6b58ff2d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Network Persistent State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                          • Size 19KB
                                                                                                                                          • SHA256 44c04878174f38139277845179b94039416c77ffa0916c62f04ea1e9d7c64b7f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Network Persistent State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                          • Size 11KB
                                                                                                                                          • SHA256 e4ad2247dc0ea5431150ea883b3bcec1f5ac9053a7edaab2ac42351083767e84
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Network Persistent State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 f5ef7c41d98974ece6b704bd11e18df752575f9107ba03d856bf4520f39e4ff2
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          SCT Auditing Pending Reports

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                          • Size 2B
                                                                                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          Sdch Dictionaries

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                          • Size 211B
                                                                                                                                          • SHA256 5e13e24702771a64a88192bd0b196e280317dc4c8d85b9855469e8be9cbb6d66
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Sdch Dictionaries

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                          • Size 211B
                                                                                                                                          • SHA256 61ff39b025790c25d1ead8f9d4d8712e373e8ddf6c5356b19783caaa888482b5
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Sdch Dictionaries

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                          • Size 211B
                                                                                                                                          • SHA256 d3d4d8154c3b7a177de9aa28b9232d9596de8cc72f8dd9036d0a1fd7a401286e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Sdch Dictionaries

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                          • Size 40B
                                                                                                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          Sdch Dictionaries

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                          • Size 211B
                                                                                                                                          • SHA256 b2bebd392d1055a4f19f5f810a4dbab03f58e45b69507ff055ef94a62b1dd413
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          CURRENT

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\CURRENT
                                                                                                                                          • Size 16B
                                                                                                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 11KB
                                                                                                                                          • SHA256 c7cad373aaa75fdc00c92129d60608280fc9e90b6a7fbd3981aa8bb287556a0d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 20KB
                                                                                                                                          • SHA256 32d7c52aa8e6c27abe313a2d598d6a65a65d782be2e565869a6a56d0e2899273
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 20KB
                                                                                                                                          • SHA256 7442e44307cf9da5bba1fbacedc2e00c6c6900f933dae960c6452d745b2a2674
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 21KB
                                                                                                                                          • SHA256 50bbec9c81ab11807584b0476335922e1ddca7d4c90f5f74683d552633322e85
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 24KB
                                                                                                                                          • SHA256 14324b973d42973917842e51698358160227c9187423004680e913c1446602f7
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 40KB
                                                                                                                                          • SHA256 b17fbd11d30c6fcfb819eae59e137af8efae4f83928fbc9ecd464c7e85f1ae4d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 40KB
                                                                                                                                          • SHA256 5852d7715dc8f1f19add2c8fe70201aec36bb90560f35dc7ccf31dbcfd40d22f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 14KB
                                                                                                                                          • SHA256 f8a2412a55bed27f703e1c07377f0fbe37fa67c5fadcd15ccc92e99126e0de62
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                          • Size 24KB
                                                                                                                                          • SHA256 53f8167d1c9474d59c8e6095d6eec6a08563297a6208bf4298a98143198d2bc2
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Secure Preferences

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                          • Size 29KB
                                                                                                                                          • SHA256 8d75512c22254122a3104be416cc0a1be9a0d1995b570fe5df229df2ff5105a4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f0b082d-6817-4961-bb11-abe4c27df852\index
                                                                                                                                          • Size 24B
                                                                                                                                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f0b082d-6817-4961-bb11-abe4c27df852\index-dir\the-real-index
                                                                                                                                          • Size 576B
                                                                                                                                          • SHA256 3627d34fc61020e175e145a2dae3edfe828f77c8f871325ec72a2b76b4f88b98
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index~RFe5ae521.TMP

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f0b082d-6817-4961-bb11-abe4c27df852\index-dir\the-real-index~RFe5ae521.TMP
                                                                                                                                          • Size 48B
                                                                                                                                          • SHA256 1acb9dabc5dcec0594d1985c325984cf42fffb913a75ccadf96c01209e3a9e0f
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8c4918d-ddbf-46b4-93de-8e8d01427c66\index-dir\the-real-index
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 9d3220c3882c380f45c4d749ad13152b44d1b831523070f14eb911ddcefe85a8
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8c4918d-ddbf-46b4-93de-8e8d01427c66\index-dir\the-real-index
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 0f8a7cb4092dfec4f3de7a6c4b1332ffe23bca206f10ee189af8e55292f36dfa
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index~RFe5a85ac.TMP

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8c4918d-ddbf-46b4-93de-8e8d01427c66\index-dir\the-real-index~RFe5a85ac.TMP
                                                                                                                                          • Size 48B
                                                                                                                                          • SHA256 a2f205b341b13ec6d6a9cdf9ccf668c25b281a403258f7b113883fcbd6829e3b
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                          • Size 214B
                                                                                                                                          • SHA256 deb489d5e67e8ed3fe29cb49eb475becc89decf0900a9816850bcfee8054aec3
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                          • Size 130B
                                                                                                                                          • SHA256 41b132d256be88d316937f7818efffb73985db69e59497188052f82889712202
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                          • Size 216B
                                                                                                                                          • SHA256 87b628f26379645d244e5f8e815b37179c330782bfaa00ad3d82ffaa49e8b00b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                          • Size 132B
                                                                                                                                          • SHA256 adca9eee7aa95aecd2d8be64088aaa5a6d9a2d2df0f6c59b1de2a4515bf72128
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                          • Size 239B
                                                                                                                                          • SHA256 4919f67a0386b2a1ae3e0c8b9df9b5cc0a874a1c3a4f4ae28ea8e8cb1d629aa4
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                          • Size 243B
                                                                                                                                          • SHA256 bbc44884f56adfe281d224dd54d0f4ae0688f405ae29b8464062da77c8750578
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt~RFe5a5d44.TMP

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5a5d44.TMP
                                                                                                                                          • Size 137B
                                                                                                                                          • SHA256 2f72802bcd6f25ae198804441a78b8df1378aa2e640b6a2563d47910cc789b7e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\24810682-e1a0-4aa0-b315-09d593d8b5d1\index-dir\the-real-index
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 b5eeee85dadb0111366818a2bbfd2b0567d19e1e073b89d656376e3478e69797
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index~RFe5bbf16.TMP

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\24810682-e1a0-4aa0-b315-09d593d8b5d1\index-dir\the-real-index~RFe5bbf16.TMP
                                                                                                                                          • Size 48B
                                                                                                                                          • SHA256 ffd5e1fa4dd5582b389bb50ccdd855a26cd211c4a8aea7ebfeab02f72139820e
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          623cd082b6202da0_0

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\390aaa5d-a763-466b-9df6-a761f70cffee\623cd082b6202da0_0
                                                                                                                                          • Size 61KB
                                                                                                                                          • SHA256 17cd939e61ce8bb762beefce58045d776588f448da9ed3a98dc6938fce85be29
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\390aaa5d-a763-466b-9df6-a761f70cffee\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 ec608a05fadbd051b8ceafd62be9990f79779c480d172337623f1b43aa4af6c7
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\390aaa5d-a763-466b-9df6-a761f70cffee\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 8df3ed9be8bf118e1115812274b6e2c1d10dc11467daf37942b705c2584c4472
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bd795db6-704c-4086-a14a-ed8633b721c0\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 da85ec1dfa421658c9d51f2abb53c1af33414157217b961b1bdf3ebfa8f5d4aa
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index~RFe5dd45a.TMP

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bd795db6-704c-4086-a14a-ed8633b721c0\index-dir\the-real-index~RFe5dd45a.TMP
                                                                                                                                          • Size 48B
                                                                                                                                          • SHA256 b37c8bc7423bf673d0c92e6d5039053778ad9f5974bc98551ddd99de229d685d
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c6bba336-1f6f-4c02-828c-4838eafabf8a\index-dir\the-real-index
                                                                                                                                          • Size 72B
                                                                                                                                          • SHA256 3feaa3d1c6c0733085665f3bad98d586234980b327a39f39c1e22336f9770a1c
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 481B
                                                                                                                                          • SHA256 d12280efbfa2559787dd15079ff86a35de738e6ff50f73f84ddbed9e1ec69592
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 476B
                                                                                                                                          • SHA256 73c76d130f13ef7fadb97bd64a200bb10a7dd7013a9f1cdd2d263155d18159a8
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 375B
                                                                                                                                          • SHA256 90c8a282c4c746c4dbb7b16d5cadc43f3a937a8e97ccbbc3ebab0f68d6990469
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          index.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                          • Size 371B
                                                                                                                                          • SHA256 9f9729620a86953d8121b17d96750636c5b09ba3f6786ff70d2f7c7ae8242e5f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                          • Size 120B
                                                                                                                                          • SHA256 d21b95f25a05d84695587e0920d8ae62caa4cbf7d4057fc0449cb3efd835e27f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                          • Size 96B
                                                                                                                                          • SHA256 fc9202145c1d7ab8a842169d3ca922aec48d3a4398335bf56efcb9b9a7509626
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          sync_diagnostic.log

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 be47f56e5ac18baf1ccf118ec0bf4e95c5dc2c82754e9d9879ab26c5acc8a042
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          domain_actions.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                                                                          • Size 83KB
                                                                                                                                          • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          0000b329-d13f-49c9-a690-58b3d4c4567b.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0000b329-d13f-49c9-a690-58b3d4c4567b.tmp
                                                                                                                                          • Size 22KB
                                                                                                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Local State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 36KB
                                                                                                                                          • SHA256 ba15d836fa88203ef72d603db79088fd7ab1539a9243cdb56865b4b5ccc2ca09
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Local State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 38KB
                                                                                                                                          • SHA256 64fd7cd8c33912d8d67b75a3f89ac48c14e40d4c1afe995ee97b93b4cc0476aa
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Local State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 39KB
                                                                                                                                          • SHA256 329d3903a655387ab70dac544c39bb775cc7e410d5b9980be4a26580f4ff58d6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Local State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 44KB
                                                                                                                                          • SHA256 de7b270d4c4a2b04e1e4d6255215327f5abc90f33c397e9a22f8cc39d06258be
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Local State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 41KB
                                                                                                                                          • SHA256 6d57d77f686b997b94cefe604c062bf36ff5e0b6650dbb33513e2b386eff2ffa
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Local State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 45KB
                                                                                                                                          • SHA256 2c506a3b6ca141c5a0758d9a376d5268b9ac921614c9bc45437eab5bc5ea0b03
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Local State

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                          • Size 45KB
                                                                                                                                          • SHA256 15ab0ffa977159a3eaf2dc7fabe2633926e1e121d14f106e36d30639f8bb05a1
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          RevisitationBloomfilter

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                          • Size 392B
                                                                                                                                          • SHA256 0c6d4c5a8db40bfe35649d2d1e470b62fb81962439e719c1e4e8d8441dffcde5
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          RevisitationBloomfilter

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                          • Size 392B
                                                                                                                                          • SHA256 944565d03cf7557e642fd9fc99019dda9ab2695f620426332d76268f94c5fe70
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          RevisitationBloomfilter

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                          • Size 392B
                                                                                                                                          • SHA256 58dd133709cafeacf7286c9d61cbc7c8d24f034ca47931413f7c89dbe09f5771
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          RevisitationBloomfilter

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                          • Size 392B
                                                                                                                                          • SHA256 9757f97d13821cfaa7d806c839e54c8515405a9490e384bbc2b0ef6c6cc9e8c6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          RevisitationBloomfilter

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                          • Size 392B
                                                                                                                                          • SHA256 239526d477c7107cb88ba45ac467aba8db5b460a860a66f95241612cd9bd9042
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          RevisitationBloomfilter

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                          • Size 392B
                                                                                                                                          • SHA256 c111b51f96f3ac045ecbaa9d6f80914a4757ae46194e3551cfd876949582929a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          RevisitationBloomfilter~RFe5a67f3.TMP

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a67f3.TMP
                                                                                                                                          • Size 392B
                                                                                                                                          • SHA256 1561bd8a88878922bcd5bb9a440e12bab945b98c19fe36148444084adaa8aa15
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 132B
                                                                                                                                          • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 372B
                                                                                                                                          • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 612B
                                                                                                                                          • SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 852B
                                                                                                                                          • SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 37c048a562e4043a29c3f83d159ad7445fbc40a866a01fbcbf1a1108e874b0b6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 252B
                                                                                                                                          • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 492B
                                                                                                                                          • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 732B
                                                                                                                                          • SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 68dd4a6a0b1711003690c2995fd0b77ba3c9ae6c27dd853ff492b52bd7701bc5
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 0e2427c94f170f6dda5a9a85ddaaa0dc0088899c19efbb73c05e3598cb541423
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 972B
                                                                                                                                          • SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 0dcbd641392011e3042d4affe27de6b54e3bfe1fed2f238c1326586e38dbfb80
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                                                                                                          • Size 153KB
                                                                                                                                          • SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                          • Size 132B
                                                                                                                                          • SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          metadata.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                          • Size 13B
                                                                                                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          788842e9-7657-420a-a91b-b6cf8ba61fa9.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\788842e9-7657-420a-a91b-b6cf8ba61fa9.tmp
                                                                                                                                          • Size 1B
                                                                                                                                          • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          content_new.js

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3736_1722535043\CRX_INSTALL\content_new.js
                                                                                                                                          • Size 10KB
                                                                                                                                          • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ccba5a5986c77e43.customDestinations-ms

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                          • Size 11KB
                                                                                                                                          • SHA256 e4804c5675d65076a422e38081dcc5c6577e33d22207efe391bd5354933da994
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ccba5a5986c77e43.customDestinations-ms

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                          • Size 10KB
                                                                                                                                          • SHA256 337b4340e275cf03d2461b7b908e4792f9195b46fd1c406f61c68891ede5f307
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          LICENSE

                                                                                                                                          • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3736_981786640\LICENSE
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH