Analysis

  • user interaction
    yes
  • max time kernel
    92s
  • max time network
    90s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    06/07/2026, 09:38

General

  • Target
    https://emmvee-my.sharepoint.com/:f:/g/personal/rahemat_m_emmvee_in/IgADhBGw3HTSRpJjZd5iVBeiAWbCtci5ohQRMtN41QfNdCs?e=q8Kh4o
  • Sample260706-ll6cmsg19p
Score
7/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: [email protected]
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 29 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://emmvee-my.sharepoint.com/:f:/g/personal/rahemat_m_emmvee_in/IgADhBGw3HTSRpJjZd5iVBeiAWbCtci5ohQRMtN41QfNdCs?e=q8Kh4o
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1672
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb70f2c188,0x7ffb70f2c194,0x7ffb70f2c1a0
      2⤵
        PID:4696
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,8086567645778325296,11018726498858718061,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4232
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,4849413714871817643,8763032664977755815,262144 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:3160
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,17444574932458151879,6816747801387772700,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
          2⤵
            PID:3368
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,8803660103967420498,9433812975940381976,2097152 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
            2⤵
              PID:668
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,15201145349046456927,7032583331598548455,2097152 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
              2⤵
                PID:3836
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,1802706895174549832,17101053668765913930,2097152 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
                2⤵
                  PID:2976
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,17452680009806755219,2534801021711498486,2097152 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
                  2⤵
                    PID:3484
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,4978932125875203798,3929526357647563527,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
                    2⤵
                      PID:964
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3808,i,14785949152524296421,17236327824995952473,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
                      2⤵
                        PID:5076
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,6238140812118018665,6566592524649665657,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
                        2⤵
                          PID:4188
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,6238140812118018665,6566592524649665657,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
                          2⤵
                            PID:3336
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,9238469745222666029,417915546107142367,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
                            2⤵
                              PID:4528
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,16447776949764467860,8119761671002513471,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
                              2⤵
                                PID:4024
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,5506288903283059286,7672809810326533545,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
                                2⤵
                                  PID:2596
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,3189385626218317458,11706999704014566360,524288 --field-trial-handle=2272,i,2245704383313192099,10891967406173064637,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
                                  2⤵
                                    PID:2664
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                  1⤵
                                    PID:1240

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                        • Size 280B
                                        • SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
                                        • MD5 SHA1 SHA512 TLSH

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                        • Size 280B
                                        • SHA256 ec09ba5da501666cac506a8e17a37a0b19f2d9712ad11c5ba4ad14b3ce62e7db
                                        • MD5 SHA1 SHA512 TLSH

                                        90aed121-fa54-4731-8dc7-b2df9c40e3f6.tmp

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90aed121-fa54-4731-8dc7-b2df9c40e3f6.tmp
                                        • Size 6B
                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                        • MD5 SHA1 SHA512

                                        f_00007b

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
                                        • Size 48KB
                                        • SHA256 713b42f8d043a6601099a91d640ed61fbd9f4b242c7d65b01fb30d2714406926
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00007c

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                        • Size 41KB
                                        • SHA256 e2ab1f66ed623243ef9a15bcfe03f54639a501ccb32ae12193cb76d08ea0d2bf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00007d

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                        • Size 22KB
                                        • SHA256 ecbaec83e127bc72a1d633fb0f1ae0282d3762a0c3f863a47a912ab78bbc15fe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00007e

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                        • Size 16KB
                                        • SHA256 c4bd048826fdaa8cdb4f05bbb0621d79a95e46894db87a3d949759fc8929380c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_000083

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                        • Size 48KB
                                        • SHA256 16a3a8a1c6d4510f47e1f3cbf12bb95a739a18e785bf2e9559a2f8772f5f3e3b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_000086

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                        • Size 51KB
                                        • SHA256 4f9a55ca4d5a5a2c78e86f7687e741bb748cd2365da8e4985e0a73e13128e25f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_000089

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                        • Size 27KB
                                        • SHA256 643419859585cbbc302e462c447060343aa9eed4563b58fc55a13fb861c74004
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00008e

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                        • Size 20KB
                                        • SHA256 5cbed04ad637c341cbf45d933a271fa8c9a9f4b5dc49b46dc664276a5f628869
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000a6

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                        • Size 49KB
                                        • SHA256 ddd5ab819cb0bec856901606bbfac29d64a82b19f400a36dc68e8ca83c87c2cd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000a7

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                        • Size 44KB
                                        • SHA256 8260755123ace2a40e226a1068fc4623c191665ad50ad42317d18fc23759ae0e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000a8

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                        • Size 17KB
                                        • SHA256 b30c3078d5d8efea6740541ea8ff30d4dc999fc499c66e96d4026e602492225e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000a9

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                        • Size 16KB
                                        • SHA256 98aceac979e7943ca3cd352501c73a7ba297d4db87d7392e2945db3ce29b33fe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000aa

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
                                        • Size 16KB
                                        • SHA256 1f7216458568f394c796e011cb5da2285c6d9c919e3d7c224cfd09df6197ac50
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000ab

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
                                        • Size 17KB
                                        • SHA256 7d733601e4b8e0cd33e0b0147b53c67a79d63feae377df06b8d9fddfba8c1062
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000ac

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                        • Size 17KB
                                        • SHA256 d5a73c4c8205f5c8fdae9018d01b597f1827316dc5ab9d0ec9747cda2853cfd0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000ad

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                        • Size 17KB
                                        • SHA256 67daacb863882f1d7f87a5174b29a7ff8b0a719c6e46babd207f2379a0d99f83
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000ae

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                        • Size 35KB
                                        • SHA256 11980ecd03e02439a6300eeff5dbf9a48bd52eebf14bbcc246752b0ce5baf223
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000af

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                        • Size 35KB
                                        • SHA256 a8283e1b2cabd16be04a6cb0a292e532d5b74520123e09c2cd9deb9eccf2d1eb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                        • Size 170KB
                                        • SHA256 f64ddbb70f682e3d5cff038f60645c65a5f12fc6540c5847e8820874bdd5dc2a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                        • Size 159KB
                                        • SHA256 36b658e80d8825f6b43ff8f67ef5fec88412ca10f9d2663453ad6ff0984b9d7b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b2

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                        • Size 33KB
                                        • SHA256 bfe9f48b1c1c0a4d93329f3399f4de41ae5ca780ce4e5fca7be168cafee394e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b3

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                        • Size 30KB
                                        • SHA256 49549a16f46767fa5c801de6e26a1c45112b83653f048bc9a78ba7210f8a14a8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b4

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                        • Size 21KB
                                        • SHA256 6dbe807b8da91d549a49beec3330d795601ec0f272ea232e91121f3ed703dfe4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b5

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
                                        • Size 25KB
                                        • SHA256 dba7c93d3cf4806133d8fe211dce32aa12041fb82acc4591f464052714878fb8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b6

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                        • Size 41KB
                                        • SHA256 3fc627e56349201333e6c39a44036b5cf09ad9378e46782098505edb037ba104
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b7

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                        • Size 46KB
                                        • SHA256 e91fee23bcfae78b7296d495abf0358581632b33658231546c952a78547c3c08
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b8

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                        • Size 22KB
                                        • SHA256 f1841ff185a4f43bf0184c828da1647c0ddfbebb6bb763cd10789f9eb6a4a306
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b9

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
                                        • Size 21KB
                                        • SHA256 c958fec1beb0ad85c367cc63c7baa2138789061a7fecf4af0902bb8dd7c51701
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000ba

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                        • Size 53KB
                                        • SHA256 4232d0eeacaac408998ece1c08515aa0b0aeae19d0d8939b3f08c31a10731d2f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000c5

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                        • Size 161KB
                                        • SHA256 3e160cb3515c186cc52dc404697ed3d9833d2da56206072d3027f3e2d3568fe9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 4KB
                                        • SHA256 872d124a58c96eccd34f5ab1a99d834afa14e6dbd68c79ffa45a3e26f30bc185
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index~RFe59143a.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59143a.TMP
                                        • Size 3KB
                                        • SHA256 a9cf9858b78423261c6eb3345ffeeaeb0aec75d93dc9d9ba82edc66ea482e3a1
                                        • MD5 SHA1 SHA512 TLSH

                                        SiteList-Enterprise.json

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                        • Size 2B
                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        • MD5 SHA1 SHA512

                                        Edge Profile.ico

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                        • Size 70KB
                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        HubApps

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                        • Size 106KB
                                        • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        44

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.blob\7\00\44
                                        • Size 169KB
                                        • SHA256 58a81a431db0919c29a5a46aee8676a1b860e56cc724f586257d439afb103e3d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000004.log

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\000004.log
                                        • Size 1.4MB
                                        • SHA256 257353e077717d30b4d827b92fd0239e7bc33ec7235952b62d6bcb4ac87ebb32
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000005.ldb

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\000005.ldb
                                        • Size 1.5MB
                                        • SHA256 11e336e37217bfba54a7460861709410a4c1bd844d79a661669b61c6ad955b1e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000006.log

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\000006.log
                                        • Size 1.1MB
                                        • SHA256 5cda4e274aea7ee1a7d4f0244c1c917abf381445317ed53dca860335740f855d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000008.ldb

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\000008.ldb
                                        • Size 1.8MB
                                        • SHA256 0dbe120bbd9c681f5572a242a239afce21283d92e3f1b89199197fc6bc6b7ab1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        CURRENT

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512

                                        LOG

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\LOG
                                        • Size 1KB
                                        • SHA256 5ab295bead03c4b9146b1444218bc00a579c3f1f261be21b1783dd92f6e6d807
                                        • MD5 SHA1 SHA512 TLSH

                                        LOG

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\LOG
                                        • Size 533B
                                        • SHA256 daeeddc4a879c96f1359abd8d427cf727a22be8ffcd7dae2af39d063112d6301
                                        • MD5 SHA1 SHA512 TLSH

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\MANIFEST-000001
                                        • Size 23B
                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                        • MD5 SHA1 SHA512

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\MANIFEST-000001
                                        • Size 285B
                                        • SHA256 4e56b11e454aeffe71b94a848f331f5458477c840573fdbcdc4dc16bb6493f80
                                        • MD5 SHA1 SHA512 TLSH

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_emmvee-my.sharepoint.com_0.indexeddb.leveldb\MANIFEST-000001
                                        • Size 109B
                                        • SHA256 7658207100e5843cae857e2bff690917b8a34e9cd2cc2671919fda24db28905e
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                        • Size 3KB
                                        • SHA256 9a7e8e484452991f315e0e8659b807e4450fb4a30b2f8c2b42cbbe932767d29f
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                        • Size 111B
                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                        • MD5 SHA1 SHA512 TLSH

                                        SCT Auditing Pending Reports

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 13KB
                                        • SHA256 edb8c63c4ec0ae09afaa85bb278ee0b1d5e2cf915f08e7cc43aaefbd410d5a85
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Secure Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                        • Size 30KB
                                        • SHA256 d085572e2358a142bc3fb94e646232bb4cf1abc298f65309ffd8ee16b25d442e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        a4e5036f58e9d133_0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\35a01e1c-1140-45f7-a9b1-9ea88c4f7b98\a4e5036f58e9d133_0
                                        • Size 77KB
                                        • SHA256 af18e1bafad9a88e5eceaffc9437e709034dce454186ac6b5f5332cf289d42ca
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        a4e5036f58e9d133_1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\35a01e1c-1140-45f7-a9b1-9ea88c4f7b98\a4e5036f58e9d133_1
                                        • Size 194KB
                                        • SHA256 1eceac3189dddd83e39c0ec9cbd51692f74746686591f2a5cddef25db00a55cb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eac20401e41a96fb_0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\35a01e1c-1140-45f7-a9b1-9ea88c4f7b98\eac20401e41a96fb_0
                                        • Size 157KB
                                        • SHA256 07cc1f3208e812555dd8517b03a2a81440cca5211ae6bc08c5eeaff715f95993
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eac20401e41a96fb_1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\35a01e1c-1140-45f7-a9b1-9ea88c4f7b98\eac20401e41a96fb_1
                                        • Size 342KB
                                        • SHA256 7150c244a5e320f0f871a58319c665153e64c90e31e9f59456ec158a24480078
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\35a01e1c-1140-45f7-a9b1-9ea88c4f7b98\index-dir\the-real-index
                                        • Size 120B
                                        • SHA256 40285f5b166695424b27722b955189eeef627da491467fd53d536f8b0a125aac
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe58ca31.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\35a01e1c-1140-45f7-a9b1-9ea88c4f7b98\index-dir\the-real-index~RFe58ca31.TMP
                                        • Size 48B
                                        • SHA256 89e007f594879f0a99dc30a4c5edc693348d5a7c0475f17d4dc55febaf2046a4
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\5963151f-bc2e-47fe-9ed6-78cac7fbd12c\index-dir\the-real-index
                                        • Size 816B
                                        • SHA256 0cb7322e4ca1b73b3546d385eba77bd40f817c41ec23fc2893cc77c55d69116f
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe58cb2b.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\5963151f-bc2e-47fe-9ed6-78cac7fbd12c\index-dir\the-real-index~RFe58cb2b.TMP
                                        • Size 48B
                                        • SHA256 823816587cd2e19fd59c4c67a2c890c025ff6b448fc8607ad9b2bd76de561cb4
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\8a67fe78-07bc-495c-b504-b2c8ff6d662a\index-dir\the-real-index
                                        • Size 1KB
                                        • SHA256 1ee1dcd507f24851aff72c858d7ecb046ac734dc6d3dd2f2be15057e1eec0d74
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe58c9f2.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\8a67fe78-07bc-495c-b504-b2c8ff6d662a\index-dir\the-real-index~RFe58c9f2.TMP
                                        • Size 48B
                                        • SHA256 a7d0b86db3ee02219173d86ecccd193329f4a981e2f34c5928b8200f77d7ce9b
                                        • MD5 SHA1 SHA512

                                        11b06e2e22c6c0f4_1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\d3628c9a-5896-45c4-a4fe-9c07a5de88e5\11b06e2e22c6c0f4_1
                                        • Size 1KB
                                        • SHA256 0560f5e848d3b370ed5f36155f340c226c5415d5e74c2a1c7e801c5466f30f90
                                        • MD5 SHA1 SHA512 TLSH

                                        index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\d3628c9a-5896-45c4-a4fe-9c07a5de88e5\index
                                        • Size 24B
                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\d3628c9a-5896-45c4-a4fe-9c07a5de88e5\index-dir\the-real-index
                                        • Size 6KB
                                        • SHA256 5a41a8090781ae8a0ecaf4d6e35d6984d89673be40f6595f8bff8e4707f3daac
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index~RFe5939e2.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\d3628c9a-5896-45c4-a4fe-9c07a5de88e5\index-dir\the-real-index~RFe5939e2.TMP
                                        • Size 48B
                                        • SHA256 eb72b7156e036ccacc7cfbd1257cd8ff09b56d5ba6a27d0f6faacc7c205d7bc8
                                        • MD5 SHA1 SHA512

                                        4065d33758049891_0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\f44cea37-440b-4d38-afd2-936e679f0104\4065d33758049891_0
                                        • Size 18KB
                                        • SHA256 797b3ad25e6d77fc99d911bd4c01e720f78dfa1765490d9c76a8cf90a9c7554c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        882257c548c01e61_0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\f44cea37-440b-4d38-afd2-936e679f0104\882257c548c01e61_0
                                        • Size 13KB
                                        • SHA256 d6fe8ce8decf75e2015678dc7902e268a3a3ed75cc9f28627ab8c5191bc25fbf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        c68c991238f782e5_0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\f44cea37-440b-4d38-afd2-936e679f0104\c68c991238f782e5_0
                                        • Size 17KB
                                        • SHA256 300fa923f63ad5620ca62c7ea9b97f0d76db369cb53a2d226b2be626f949ecbb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\f44cea37-440b-4d38-afd2-936e679f0104\index-dir\the-real-index
                                        • Size 22KB
                                        • SHA256 e8ce2a5b5aaabd1f419a435503aa6b913f8213ac5f082784a733e4ee57563e57
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index~RFe591fa4.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\f44cea37-440b-4d38-afd2-936e679f0104\index-dir\the-real-index~RFe591fa4.TMP
                                        • Size 48B
                                        • SHA256 9d27f0dcc9706d8a6f1ed70ebab515e3280fa0ec70f1d813bffae37f0a513f27
                                        • MD5 SHA1 SHA512

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\index.txt
                                        • Size 439B
                                        • SHA256 41632665e91ce44232ca31add36071153f935d61ee78a000c9d16bc695b51011
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\index.txt
                                        • Size 643B
                                        • SHA256 256dbddac2ff961ea168e62f172b7bd8204cc3755fba9b807a709af7db43d9ad
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\index.txt
                                        • Size 588B
                                        • SHA256 75e14fea5150e569066dd354de86d5462f7d2c5cc9f9267151bfd7905b2eb9d8
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\index.txt
                                        • Size 744B
                                        • SHA256 8a1f0a8e7185a26adb15f948705a2a3e2bed2465155a52e386914c711dcbc39a
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\index.txt
                                        • Size 341B
                                        • SHA256 cc4311599ef8cd7f066589b234dee19491cc1330248790745045a5f88bfe73e6
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt~RFe5872f9.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\73285a24a7ac57b812d71afaa400b777fbdda7af\index.txt~RFe5872f9.TMP
                                        • Size 191B
                                        • SHA256 a9a89443cff0bb6661d00139ce7b13171e63c0580407368b0b5bbb5372e75238
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 96B
                                        • SHA256 9472c6f0a040b510a6913fb38fe2811fcca53d4e83900c40b15de8e5eff0abf0
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe58b716.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b716.TMP
                                        • Size 48B
                                        • SHA256 998ad54cd5ae532fa9265f129a7e61010daf97d551ddeaff1ccddec1f9eb7e10
                                        • MD5 SHA1 SHA512

                                        sync_diagnostic.log

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                        • Size 5KB
                                        • SHA256 6ca56630cded74e40e38bffde1c4bb31d3da8f5e048466269b0077140d38d663
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        OperationConfig

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                        • Size 22KB
                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        OperationConfig~RFe594368.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594368.TMP
                                        • Size 3KB
                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                        • MD5 SHA1 SHA512 TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 27KB
                                        • SHA256 eebc14d8bd18fb25877c49763ef06d0e716400efcda3a3d311a148767c23caa5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 8KB
                                        • SHA256 7ad8d7273949d1793685f5f8b6251798ef8be1d134c6cc92347a4a6c74be4952
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 19KB
                                        • SHA256 f58b748d6cd44d8c78b861cca66adf4084838286378f37ee2bec047a4f357275
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 8KB
                                        • SHA256 d5db6261d996f9182548a6f7246112befc2a513f8c12f64bf00bd4f391fa2c1a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 19KB
                                        • SHA256 c2062635daf8e3707a589eed53d4b54c210a31227b46178046b4fd7b18329a9c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        RevisitationBloomfilter

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                        • Size 392B
                                        • SHA256 dfddbee78704b0f1f1dbd7160e2dbc63a3ab2e10552354c04d79473928650eac
                                        • MD5 SHA1 SHA512 TLSH

                                        RevisitationBloomfilter~RFe59afaf.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59afaf.TMP
                                        • Size 392B
                                        • SHA256 963715dcd041615cc79be0b9f02049e6a30e0a3e24ef2347e196ed18812a5b4d
                                        • MD5 SHA1 SHA512

                                        d282aa0c-8b0d-421a-ac96-37a1455cc76b.tmp

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d282aa0c-8b0d-421a-ac96-37a1455cc76b.tmp
                                        • Size 13B
                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                        • MD5 SHA1 SHA512

                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                        • Size 2KB
                                        • SHA256 1c3e8d20d589161cac1758adbfa53c8da25b3531558574c2b7c6d5e9f3330feb
                                        • MD5 SHA1 SHA512 TLSH