Analysis

  • geolocation tags

    eueuropelondonukunited-kingdom
  • user interaction
    yes
  • max time kernel
    368s
  • max time network
    371s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/09/2026, 23:02

General

  • Target
    https://consumerdebtnegotiation.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.webp
  • Sample260930-2z89fstthz
Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs
  • Suspicious use of FindShellTrayWindow 50 IoCs
  • Suspicious use of SendNotifyMessage 40 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://consumerdebtnegotiation.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.webp
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1844
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ffeb03fc188,0x7ffeb03fc194,0x7ffeb03fc1a0
      2⤵
        PID:5916
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,7150972209991482088,1526486690761256664,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:4672
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1808,i,4791305664793468634,18220112592706587443,262144 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:2
        2⤵
          PID:4960
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,6971919481796801871,14491042415403778478,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
          2⤵
            PID:3116
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,450186966411080434,16283865769631584603,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
            2⤵
              PID:4740
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3284,i,4720289675486966151,17155327409812256890,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
              2⤵
                PID:5984
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4932,i,14706963205080714245,5073937178896122781,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:1
                2⤵
                  PID:3668
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,16001292232482499844,18336176536387142624,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
                  2⤵
                    PID:4328
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3768,i,9990558823564536452,14277142303070306460,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
                    2⤵
                      PID:5848
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,13362358028189112965,3808767611071594099,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
                      2⤵
                        PID:3724
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,13362358028189112965,3808767611071594099,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
                        2⤵
                          PID:3808
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6136,i,11834599920078841649,7805840388557658748,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:1
                          2⤵
                            PID:1808
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6232,i,11893743333541217282,485804271204553532,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
                            2⤵
                              PID:5452
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6368,i,11142853428621584819,13182218152125843414,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
                              2⤵
                                PID:5900
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6436,i,16826135722136951529,14118052769522539901,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:1
                                2⤵
                                  PID:3248
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,9670658083784030990,13018348293531961218,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
                                  2⤵
                                    PID:5440
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,4176709182121023135,1123611907432204536,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
                                    2⤵
                                      PID:5668
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,7957140609745720052,18119555624062730317,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
                                      2⤵
                                        PID:3496
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,4650757932465622150,3984080471114857481,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8
                                        2⤵
                                          PID:4884
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5340,i,13566335527259432950,6661904283721654657,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
                                          2⤵
                                            PID:5636
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5408,i,6357248528246701003,10808137034036945846,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:1
                                            2⤵
                                              PID:736
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6728,i,13480092101490839053,16506116916839469529,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:8
                                              2⤵
                                                PID:2468
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7140,i,127780456677565398,15765477997846844199,262144 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
                                                2⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:5468
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7248,i,17185623872622250479,3845977975898654562,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
                                                2⤵
                                                  PID:5296
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5244,i,8805896743556865778,2329059682106209237,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
                                                  2⤵
                                                    PID:3024
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5308,i,585599963381961617,15644406283963512263,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:1
                                                    2⤵
                                                      PID:5360
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,12568628214364155632,8056359195474780240,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
                                                      2⤵
                                                        PID:4944
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5536,i,14417828604771852117,3568793028327771313,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:1
                                                        2⤵
                                                          PID:3236
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7472,i,10174792884504901388,8607166132827581714,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
                                                          2⤵
                                                            PID:2640
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7496,i,15195975582990823368,16886422117332136378,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
                                                            2⤵
                                                              PID:744
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5420,i,9771811870702702618,4548455969778460866,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7364 /prefetch:1
                                                              2⤵
                                                                PID:4980
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7420,i,5347523368311669783,10577793487351735692,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:1
                                                                2⤵
                                                                  PID:2364
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7736,i,4149616121525689646,14883340609403266695,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
                                                                  2⤵
                                                                    PID:1608
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7512,i,2022120276738402875,6047536556748471335,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:1
                                                                    2⤵
                                                                      PID:3008
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7028,i,7600847259822191262,12092071830721680594,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
                                                                      2⤵
                                                                        PID:1148
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6168,i,13605024262420824375,17536845313014632249,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:1
                                                                        2⤵
                                                                          PID:5276
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=3548,i,8463229783130069089,7036589681268913556,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
                                                                          2⤵
                                                                            PID:5668
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6136,i,2560919577879281988,11587306715643376462,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:1
                                                                            2⤵
                                                                              PID:3600
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5248,i,5975327842563445805,13011437446070674850,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
                                                                              2⤵
                                                                                PID:5464
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7356,i,7219359324039583948,9972593950529534053,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
                                                                                2⤵
                                                                                  PID:4612
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7044,i,5543245342657818668,3747521381502701653,524288 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:8
                                                                                  2⤵
                                                                                    PID:1776
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=6196,i,7133123198875676165,13939400534534887288,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=8056 /prefetch:1
                                                                                    2⤵
                                                                                      PID:6068
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=3692,i,2529213524185789558,15338504400087620772,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
                                                                                      2⤵
                                                                                        PID:4848
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=3636,i,13256699660800112855,8638548319269228672,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5272
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8380,i,1241223014082220765,16256122474931890836,2097152 --field-trial-handle=2548,i,10547957684793621242,8990213770628406148,262144 --variations-seed-version --mojo-platform-channel-handle=8128 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4236
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                          1⤵
                                                                                            PID:640
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                            1⤵
                                                                                              PID:4668

                                                                                            Network

                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                  Replay Monitor

                                                                                                  Loading Replay Monitor...

                                                                                                  Downloads

                                                                                                  settings.dat

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                  • Size 280B
                                                                                                  • SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  settings.dat

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                  • Size 280B
                                                                                                  • SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  LOG.old

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                  • Size 331B
                                                                                                  • SHA256 7a8c13f5466fd2df1fbe234f0955bc1111c91401d78f9f1f2f1806fe0984706c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  LOG.old

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                  • Size 331B
                                                                                                  • SHA256 47a830410aca82e6bff3dea21d243b3319852322b975083a218f1617748f9938
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  BookmarkMergedSurfaceOrdering

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                  • Size 6B
                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  BrowsingTopicsState

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                                                  • Size 649B
                                                                                                  • SHA256 359fad4a17a4d1ae61312e299025fddb5c1eb4a536fbf8b216c9d179326eab40
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  f_000051

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
                                                                                                  • Size 22KB
                                                                                                  • SHA256 a926528575f55ef72cea9566255d2b09812d7d7766d1d228434f283579cb8269
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000056

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
                                                                                                  • Size 23KB
                                                                                                  • SHA256 1cae5bad340b07ad22b610e9718e260dc1f7731244d80b17ccca29e5a1c83f31
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000059

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
                                                                                                  • Size 23KB
                                                                                                  • SHA256 df73e8dbb41e065e23250b2dd69a25cefe7930a10c07fe84f725db05c2428fee
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00005c

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                                                                                  • Size 73KB
                                                                                                  • SHA256 49a03740a4e90cc48b80dfd321acedcb4f185737b0db715b9c457e166ec228c1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00005e

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                                                                  • Size 47KB
                                                                                                  • SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00007f

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                                                                                  • Size 135KB
                                                                                                  • SHA256 54f270c8b71d024387d988dd11c6109f9bfa45dcb92e8b50ee7e9d483a4c3779
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000080

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                                                  • Size 26KB
                                                                                                  • SHA256 85337ea547e087f11716940e5708d35d17b8439d1e39a14395f1caba204396c1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000084

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                                                  • Size 346KB
                                                                                                  • SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_0000ec

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ec
                                                                                                  • Size 159KB
                                                                                                  • SHA256 707ea3d5b24f0abf5472c431ff3bb80e7b2abe7a8783a42c95328ebfefd0eed8
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_0000f2

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f2
                                                                                                  • Size 212KB
                                                                                                  • SHA256 8f50a54173184e384cb267826b92ebae0a128cd413996e93e3d9deda0c2b6def
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_0000f3

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f3
                                                                                                  • Size 25KB
                                                                                                  • SHA256 ff6b7601dd70091a1beda6b478b0e4badcbb4d75a4ae344275b3170e68c7af62
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_0000f7

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f7
                                                                                                  • Size 24KB
                                                                                                  • SHA256 2a60b4520d97ccff8c0eaac856ec96a220ae121e025080fc8360995740ff6fcf
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_0000ff

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ff
                                                                                                  • Size 62KB
                                                                                                  • SHA256 a91ef436af66efe7bb20e988c5a4a0706b720fef08ae063e6e7dcfdb1c618652
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000101

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101
                                                                                                  • Size 21KB
                                                                                                  • SHA256 f58057664c0b52a2651be77978995feadcdb919703dd4727b3c321d8f18701a0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000102

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
                                                                                                  • Size 21KB
                                                                                                  • SHA256 535026ac1f01db42ff57eb18cb6c17dadf2c9e5852114a3fd2b568f5d4557107
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000104

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000104
                                                                                                  • Size 31KB
                                                                                                  • SHA256 778049aa58e82be408431e754ff9419a35a22ecf87f3053a2e1698c2b89e6bea
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000108

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000108
                                                                                                  • Size 22KB
                                                                                                  • SHA256 7ee2b232de66f7530be28964818bc8a813e62553138e48bffd917e95b19bd7fa
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_00011c

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011c
                                                                                                  • Size 47KB
                                                                                                  • SHA256 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000123

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000123
                                                                                                  • Size 23KB
                                                                                                  • SHA256 2326b68a516618dfd0e8fcbfe8aca9d60ac7b66a13296fbd820d042f76f473d1
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f_000124

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000124
                                                                                                  • Size 21KB
                                                                                                  • SHA256 5db61fb734da4c38695f4fa032682bb57103509e00204785229e5fccdf143bc2
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  081d47d69b6f732d_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\081d47d69b6f732d_0
                                                                                                  • Size 316B
                                                                                                  • SHA256 c39e92163c89338114f2f2bd85716d2186093c76c262b22717f589393e6d1350
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  0b6731862e7f3dba_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0b6731862e7f3dba_0
                                                                                                  • Size 2KB
                                                                                                  • SHA256 d3b211c6792ae06e309b6ca165a928faa69f796a694883879ee0d202b7dac8b7
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  1495a36c450152ee_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1495a36c450152ee_0
                                                                                                  • Size 3KB
                                                                                                  • SHA256 187549283cc07e0734d3fcc558daf67955cbe0d48d24872ac494f57bf63a44ad
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  28354c2757985f88_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\28354c2757985f88_0
                                                                                                  • Size 303B
                                                                                                  • SHA256 9e36e5fefc916ab7ee4be431bb1cfe92eb687db59d47ffc3692598023c8da06c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  336a68eaaf209f48_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0
                                                                                                  • Size 309B
                                                                                                  • SHA256 13912dd043017bb3cd5f7eade569aa376c1411a7a41df83e99aecd1d6383646b
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  42644d35b8e11547_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\42644d35b8e11547_0
                                                                                                  • Size 328B
                                                                                                  • SHA256 0b0cf8e31788361fc0fb69ed7c78be0a1e9f717f82c5ae8f3b49b038046dd056
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  4a8f70f9c66a0674_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4a8f70f9c66a0674_0
                                                                                                  • Size 236B
                                                                                                  • SHA256 af7ffbf39c34717bd543d7cd3c3b48a3c01886e35bfa557d0b0c13d645dd0903
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  5308b52911d7e411_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5308b52911d7e411_0
                                                                                                  • Size 437KB
                                                                                                  • SHA256 65e3794c53309242425f4a11d87fddafe09893fc0c657082f893608445cff6c5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  5622ef4f6a72ab19_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5622ef4f6a72ab19_0
                                                                                                  • Size 231B
                                                                                                  • SHA256 ae3b235de5bcba6c3b1a26f33d4fd82511de0c89fb8a444c5469c66251a37877
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  84b75009f59d07af_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\84b75009f59d07af_0
                                                                                                  • Size 298B
                                                                                                  • SHA256 8a0f0a1321724d9b0ac2538c2fa37d1e7164022c5b036391a7178ec627d824f8
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  8c1595656429c342_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8c1595656429c342_0
                                                                                                  • Size 31KB
                                                                                                  • SHA256 80bbb9ada7867ab4a08eb240df2579dbc02d85b2a2eb44fa7400144b774fd11a
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  94831991f5157c18_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94831991f5157c18_0
                                                                                                  • Size 2KB
                                                                                                  • SHA256 60d5eafaf55cd22d89ea5ddd031dda432e157a817d2ac735bfd6163c36ab1972
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  9f0beb7d0f369d7c_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9f0beb7d0f369d7c_0
                                                                                                  • Size 62KB
                                                                                                  • SHA256 1c0390252515f61c5c64de0e0b172fe07b4e4072f6bd58d80eef5cc775210593
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  aab8dd94d9200b6f_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aab8dd94d9200b6f_0
                                                                                                  • Size 81KB
                                                                                                  • SHA256 77f770c7a854b649fdff1ec8b2351cbd315d4f195b96b81da2fc64c751180898
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  aaea11cb4250e688_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aaea11cb4250e688_0
                                                                                                  • Size 32KB
                                                                                                  • SHA256 bc6bfe4a2b22f91142670c5b558db66f18f8cae0cc6be21bea13ec85a4d96596
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  cf1c8b90781d616a_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cf1c8b90781d616a_0
                                                                                                  • Size 240B
                                                                                                  • SHA256 3bc1f0f324479f82e7c6f9838dacd9391e9d61b447b9e5f76c3f72bccdfa8e30
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  e0007c8844104f23_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e0007c8844104f23_0
                                                                                                  • Size 62KB
                                                                                                  • SHA256 fbfe4676f69f0e9a146210e7d0a30699d2ff3cae033014f4cde2acc084f8c60e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  f74311a0a3787189_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f74311a0a3787189_0
                                                                                                  • Size 241B
                                                                                                  • SHA256 56edf28b6609862f236f9fb9255df483f9c4d783fb8216e753502e1208a70c67
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  temp-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                  • Size 9KB
                                                                                                  • SHA256 15833d64445f95033881c53b994f1ded201f16a3a40ea5cafa1f3f94f79d7fdc
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                  • Size 3KB
                                                                                                  • SHA256 33a9c97bf1d6010238cb92a8c24025aedf5ba78cb1d120f47e09f82ef5461f95
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                  • Size 4KB
                                                                                                  • SHA256 a72ad8587004d6bafbfcb2994d803068d4259269f373f78ff94ae185eaa0ac63
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  the-real-index~RFe5936f4.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5936f4.TMP
                                                                                                  • Size 2KB
                                                                                                  • SHA256 e99511c415df00753a36636b827dc3bbfbc2fcd8ae7e1c7c53e90efa4550ab55
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  SiteList-Enterprise.json

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                  • Size 2B
                                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  MANIFEST-000001

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_metasolitare.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                  • Size 23B
                                                                                                  • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  Network Persistent State

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                  • Size 14KB
                                                                                                  • SHA256 9d3c585ae3085e64112488cfb58c5f757eed0306b12f935aa3cb5a6499f026de
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Network Persistent State

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                  • Size 64KB
                                                                                                  • SHA256 bd8d1b7738aba55f8972b10e9671cdb91f0c0bfa60fb5eacfb637c8f399b4e9f
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  SCT Auditing Pending Reports

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                  • Size 2B
                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  Sdch Dictionaries

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                  • Size 40B
                                                                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 12KB
                                                                                                  • SHA256 27f7f693b189f46e3c891962d14338b118e97da25ebf84ba00c68d8b22d950d5
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 12KB
                                                                                                  • SHA256 ada1a233d0b0b3dcaf762893249e78e8c682bb6d3e0deaf01018e6a74b6de1c7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 12KB
                                                                                                  • SHA256 db7ff190df0e1055c029ba438c8eb7f072c8d2f7e766aaa21b43f3350cc219a0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 12KB
                                                                                                  • SHA256 0a0c1244a22f0b0e1039326d26fab35401a3f13c55b523bfb0c9c2e50a983733
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 12KB
                                                                                                  • SHA256 82f2cc3ac8162fcd97e2b378880ac6b0867985054061f7601f221e38808102c0
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 13KB
                                                                                                  • SHA256 65e65cca6e76be79c730710a94daad0ab96a3f7a843b885ff2a55919160c5db9
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 28KB
                                                                                                  • SHA256 8220fa3bd701b184a83e09a9461a012638e3e14dc56339e46628963e08c0ed37
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 28KB
                                                                                                  • SHA256 fdc2048d5d3127ac198009c690b09ef6921fc5796888e51e303661f4ec2af516
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 12KB
                                                                                                  • SHA256 9067ab214f71dfd71b8867fa20152e30aaebabb221ce736eb2d06ee8842f79c7
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                  • Size 12KB
                                                                                                  • SHA256 55aa1176e26cceecc6e4580a077b540ee5a4a83a836dda5bf6bfcc95c3a0baec
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Secure Preferences

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                  • Size 27KB
                                                                                                  • SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bc31a830-000b-4049-be98-aef87d53cd1c\index-dir\the-real-index
                                                                                                  • Size 552B
                                                                                                  • SHA256 d32357cdc868f1605ab2c7ae05a149f7e0d6f25cc245b7c108f04fc2d5e91100
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index~RFe5d4345.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bc31a830-000b-4049-be98-aef87d53cd1c\index-dir\the-real-index~RFe5d4345.TMP
                                                                                                  • Size 552B
                                                                                                  • SHA256 78f6fea3f9da0b7198d7c9fa6ab09215080a425ecde9e1bfc33484629d45f1da
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  index.txt

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                  • Size 371B
                                                                                                  • SHA256 96e4ac14fe41abe379f28d6e4f4e2a2ac49771592f15263347498e5c6c8b5cae
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\0872ebdc-d120-4763-878b-0cb9c851596a\index-dir\the-real-index
                                                                                                  • Size 192B
                                                                                                  • SHA256 22557d2558a5fa87890e0c7137f095b195a687002d20d74602c7d2ae851d50f4
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index~RFe5dec76.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\0872ebdc-d120-4763-878b-0cb9c851596a\index-dir\the-real-index~RFe5dec76.TMP
                                                                                                  • Size 48B
                                                                                                  • SHA256 a7da579d2e08276586760b35c6d05f5be4dfd5bf0af44f5823f2291974718e6e
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\3ef5c9ac-49eb-47bf-a872-05858d0efa0a\index-dir\the-real-index
                                                                                                  • Size 144B
                                                                                                  • SHA256 8074f1b2d2b0562a64e9b62c9d7b3f0108dcb7ca5e26e57234d3ae2d48618ed1
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index~RFe5dec57.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\3ef5c9ac-49eb-47bf-a872-05858d0efa0a\index-dir\the-real-index~RFe5dec57.TMP
                                                                                                  • Size 48B
                                                                                                  • SHA256 9c50daabf9810d38a8c81788ccaf59177b68963cc37f92cef415e6d575708f00
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  0d5022396ad25b97_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\0d5022396ad25b97_0
                                                                                                  • Size 6KB
                                                                                                  • SHA256 28669b669384e233500089d3f7807b5cb6c9df232da851ac5275f2bd5797359d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  3b7f94c060e6d6a5_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\3b7f94c060e6d6a5_0
                                                                                                  • Size 3KB
                                                                                                  • SHA256 9e5b60fb0091ca1f43ed3d67a2613aac04b5b5fd3cc92ef7ff08a0cbdc405bd7
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  65181846f73b556a_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\65181846f73b556a_0
                                                                                                  • Size 174KB
                                                                                                  • SHA256 bb33f5369a7e6c86c7fcf4aa1baff908a389730e16e33dffcc18829ddbe4ac89
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  7a24dc529522ba67_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\7a24dc529522ba67_0
                                                                                                  • Size 5KB
                                                                                                  • SHA256 83bda16defce31d752123a0fd9d8b7954afc26d2a0a0bfa821bc9989d7995a5d
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  7d5e58a6944c177f_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\7d5e58a6944c177f_0
                                                                                                  • Size 14KB
                                                                                                  • SHA256 64d485e5ef37fcc6aa87d8ec6da69372a8326e3392b783e7f50f3f7105edec53
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  96a9e5ff07d6eb26_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\96a9e5ff07d6eb26_0
                                                                                                  • Size 118KB
                                                                                                  • SHA256 66fd4e7d0f6459898f0172a52fc19119bdbf52aa9141de191e9e7e313a9656bd
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  9a1c1bd58974d0a4_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\9a1c1bd58974d0a4_0
                                                                                                  • Size 33KB
                                                                                                  • SHA256 80f68ced6ac2fbe1314d7ec25de9b05d1c4005194b6d1cc9cf0fc643d0ba8f4b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\index-dir\the-real-index
                                                                                                  • Size 1KB
                                                                                                  • SHA256 00f7079abaa948488c44d56c5ddf4fda8cea6e38842ebb6fc8ec84108ad3a46c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index~RFe5de5bf.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\417e4785-72bf-466b-9f9d-038cc4c37c01\index-dir\the-real-index~RFe5de5bf.TMP
                                                                                                  • Size 48B
                                                                                                  • SHA256 d8e7379c9ab825008989042d26393e394ab29c941965ec6f3f5df2a016e78b6f
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  index.txt

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\index.txt
                                                                                                  • Size 466B
                                                                                                  • SHA256 a3c5bbcc684171767fc1283e9172e8e85544566927217cf8d066fd976a094917
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  index.txt

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\index.txt
                                                                                                  • Size 360B
                                                                                                  • SHA256 53476ff48a80c73386f8c33bf12140fadfbb05dc23b5f2526ba43adfae70eadb
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  index.txt

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\index.txt
                                                                                                  • Size 464B
                                                                                                  • SHA256 0934cc189e07fde760d324f682689b1bb0aa2fa2e61523117e455813287dd99c
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  index.txt~RFe5d9676.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e0b60b74152191ec590839d2990869183b6713e0\index.txt~RFe5d9676.TMP
                                                                                                  • Size 251B
                                                                                                  • SHA256 7421cd4977ecd2e17986679f88f136086bdded2a20ed27b4bf5e033624c478c7
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                  • Size 72B
                                                                                                  • SHA256 0a3c115ec5bacd67ad4e33f049964d85b84c38eb9b9e50ed5e1c58c38e4fc096
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                  • Size 96B
                                                                                                  • SHA256 1e025b2855e0cd09a0f24fa7d6ddadee184928987fa52a84abea8e542d3a1499
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                  • Size 144B
                                                                                                  • SHA256 4773029f016d4d39fceb1a3f47d3238748051e681a7362a041f4d3b38ee4fb5a
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index~RFe590c99.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590c99.TMP
                                                                                                  • Size 48B
                                                                                                  • SHA256 a8d083f4134e883ee678e15d6ae56a1571c7338d6d4608d9378faf364192da79
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  0bb2a252096346b7_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\0bb2a252096346b7_0
                                                                                                  • Size 63KB
                                                                                                  • SHA256 0b5b6b497793c676f25249d9352ffcde4cffec41a2d4b5f8e0d6394683282d3b
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  3719f0371d582d14_0

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\3719f0371d582d14_0
                                                                                                  • Size 63KB
                                                                                                  • SHA256 0cdd86af3679c8ec2f1058ea14c3c0d1a5b477e9dc16371936222580166b7142
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                  • Size 96B
                                                                                                  • SHA256 bbcd23622d5f5b120ebffe28ef116f17f0d02c00b625ceac84d9a4c1a4a11de8
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  the-real-index

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                  • Size 72B
                                                                                                  • SHA256 6e4a3186bf0a4af4a9d8e802ba60f829fc0a5e6770068f7408a0823d2e123f1e
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  sync_diagnostic.log

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                  • Size 23KB
                                                                                                  • SHA256 9873b3085a4a7d7c03b943adfbe18012d63168ca7a4c32384e1ddcc162e8fd3e
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  CURRENT

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                                                  • Size 16B
                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  MANIFEST-000001

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                                                  • Size 41B
                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  Local State

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                  • Size 25KB
                                                                                                  • SHA256 3f08106acdf4eb2a5fdbd39d2890354b4f5132e6a1333ef9937fd9dbdd1d4031
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Local State

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                  • Size 26KB
                                                                                                  • SHA256 e1eaa044ce9ac874b0f50c924e57fb8bfa700d694c2ee84f9c88c5a821004587
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Local State

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                  • Size 25KB
                                                                                                  • SHA256 8c843cbd23687c933777bd6448a6c654a65f41e6d392cc8c6a420f490c34b2fd
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  Local State

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                  • Size 31KB
                                                                                                  • SHA256 912abaa88ddb115deb6edba8a56370a94144ce349361cfbbc83dd2b7e1f99441
                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 4d909ca1b50b9b1aac4b762cd353440f8b4046c855e33b76c560d22acb3e6a61
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 06805f5eb42077f334a0f4f8653145a116c06f5336c18ada558c6a9db5ba26c9
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 03964945e07975748e5edd8209c861c0bbff57d82d707f8457469288940b44d3
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 3d018dee1d89a07d8a0ce34a01ed370d7d4a5091a8000ac4c72800166b1f35f0
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 ae7e29ff7ad3f257301acf9ff4d5c795396e4b2c7f1c6329466cfe8075404b35
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 3c36e1e7c94b3c3dc5b68c4366f07a238ea22e948e1d2b685ee6aff08246c0a8
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 273d13444994f40e9041aa6da3116e089b9bf831683918fd9c4f8397638e0d94
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  RevisitationBloomfilter

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                  • Size 392B
                                                                                                  • SHA256 f322fdb0f6990ddf13441df97dfd67390ae4a4f3bb7d2839cd8d4bbf921d2fcf
                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                  RevisitationBloomfilter~RFe5b3ebb.TMP

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b3ebb.TMP
                                                                                                  • Size 392B
                                                                                                  • SHA256 90b8b1bb97c9774d8c8964cc6d30ee43ce2fcf5da5df23ab9ef060ee1df44d72
                                                                                                  • MD5 SHA1 SHA512

                                                                                                  5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                  • Size 2KB
                                                                                                  • SHA256 2e987688e6a78ef663a05b246402f2e01ed343dd333529c9a51cbabb35e90a00
                                                                                                  • MD5 SHA1 SHA512 TLSH