Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    901s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 01:57

General

  • Target
    viewbot/0x21 viewbot.exe
  • Size 9.5MB
  • Sample260722-cdd4rahf39
  • SHA256 056411a3ef1c584491bca1cc670b0218a91b1312676f2931f8d10532141cfdcd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Drops file in Windows directory 5 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 25 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\viewbot\0x21 viewbot.exe
    "C:\Users\Admin\AppData\Local\Temp\viewbot\0x21 viewbot.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2820
    • C:\Windows\system32\cmd.exe
      cmd /c cls
      2⤵
      • Executes a command shell one-liner
      PID:1588
    • C:\Windows\system32\cmd.exe
      cmd /c cls
      2⤵
      • Executes a command shell one-liner
      PID:5392
  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3144
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      2⤵
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3744
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1960 -prefsLen 27097 -prefMapHandle 1964 -prefMapSize 270279 -ipcHandle 2036 -initialChannelId {fd21b179-3716-4b5f-b5fe-179e3dac2edf} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:4364
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27133 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2196 -initialChannelId {e4f00343-e85b-4188-81a9-af19697f3771} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
          • Checks processor information in registry
          PID:3324
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3800 -prefsLen 27323 -prefMapHandle 3804 -prefMapSize 270279 -jsInitHandle 3808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3816 -initialChannelId {2488d8db-3533-45f1-93de-6968218b5582} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
          3⤵
          • Checks processor information in registry
          PID:5608
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3964 -prefsLen 27323 -prefMapHandle 3968 -prefMapSize 270279 -ipcHandle 4044 -initialChannelId {5411624d-1176-4c4a-a454-bf8bb8e32364} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
          3⤵
            PID:1196
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4492 -prefsLen 34822 -prefMapHandle 4496 -prefMapSize 270279 -jsInitHandle 4500 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2944 -initialChannelId {22811b07-6b75-43cc-ad99-c2f4b48df181} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
            3⤵
            • Checks processor information in registry
            PID:2000
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5060 -prefsLen 35010 -prefMapHandle 5064 -prefMapSize 270279 -ipcHandle 5068 -initialChannelId {b43bc43d-d559-4442-9906-2d2e65619008} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
            3⤵
            • Checks processor information in registry
            PID:948
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5640 -prefsLen 33031 -prefMapHandle 5644 -prefMapSize 270279 -jsInitHandle 5648 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5656 -initialChannelId {e1d5d898-6c3b-455a-a4fa-3ea38299912a} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
            3⤵
            • Checks processor information in registry
            PID:4780
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5844 -prefsLen 33031 -prefMapHandle 5872 -prefMapSize 270279 -jsInitHandle 5876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5884 -initialChannelId {ccfb8e27-7199-48f9-929e-770a068fde77} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
            3⤵
            • Checks processor information in registry
            PID:548
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6076 -prefsLen 33031 -prefMapHandle 6080 -prefMapSize 270279 -jsInitHandle 6084 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6092 -initialChannelId {d0e06655-b3ff-48a1-85b7-7f12ad4bdb87} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
            3⤵
            • Checks processor information in registry
            PID:5648
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6356 -prefsLen 33071 -prefMapHandle 6360 -prefMapSize 270279 -jsInitHandle 6364 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6336 -initialChannelId {a0fa2d1b-6711-4069-99a9-a6a660c43e60} -parentPid 3744 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3744" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
            3⤵
            • Checks processor information in registry
            PID:3704
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        1⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4424
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c8,0x2f4,0x2f8,0x2c4,0x300,0x7ffe51eec188,0x7ffe51eec194,0x7ffe51eec1a0
          2⤵
            PID:5888
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2160,i,7936979143010973214,12724457759363468434,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:11
            2⤵
            • System Time Discovery
            PID:4296
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,12986662296810437218,2489867259195130186,262144 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
            2⤵
              PID:1140
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,3351063374525894310,10695009618626770068,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:13
              2⤵
                PID:6036
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,10723038655289458134,9825970515918235935,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:1
                2⤵
                  PID:2808
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,1758132986767391349,10560582167677974643,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:1
                  2⤵
                    PID:1176
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,16144256674414020285,2585950453048418995,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
                    2⤵
                      PID:4872
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4388,i,800585766221200457,5161010797121043688,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:9
                      2⤵
                        PID:588
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,7191772682945235568,15871372913289845335,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
                        2⤵
                          PID:4732
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,13823614844356920914,17314486724048591921,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
                          2⤵
                            PID:4432
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,9626092608827394059,4791273943622976472,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
                            2⤵
                              PID:1096
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,9786481090960848250,18193764263061049016,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:14
                              2⤵
                                PID:4644
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,9786481090960848250,18193764263061049016,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:14
                                2⤵
                                  PID:1824
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6660,i,7155199624731791585,1875605714342391713,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
                                  2⤵
                                    PID:4512
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6976,i,9653066585076817486,1642712705599547373,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:14
                                    2⤵
                                      PID:2084
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7192,i,6832911505900702553,4824785702137084941,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7208 /prefetch:14
                                      2⤵
                                        PID:296
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6864,i,15164262273829053544,2005776283783466944,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:1
                                        2⤵
                                          PID:1048
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7360,i,7690655805728981530,1957330512735541806,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:1
                                          2⤵
                                            PID:4920
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7412,i,697583560864216643,18129058247075688376,2097152 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:1
                                            2⤵
                                              PID:4784
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,14097391285361851628,6856578936044428515,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:12
                                              2⤵
                                                PID:4236
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2648,i,1450659395242234237,2750286505887917731,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:14
                                                2⤵
                                                  PID:6676
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4644,i,4690844912321410612,7900683008584633104,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7756 /prefetch:14
                                                  2⤵
                                                    PID:6672
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,5143310974550472834,13414786397962674449,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:14
                                                    2⤵
                                                      PID:6684
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,15176151945423982773,16146689628313749894,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:14
                                                      2⤵
                                                        PID:3532
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5548,i,4566814760573129964,5382918285726729636,262144 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:10
                                                        2⤵
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:6648
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3848,i,17824902300920852896,9803569982952684933,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:14
                                                        2⤵
                                                          PID:2308
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=920,i,8941517341625728910,14764544746173722581,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:14
                                                          2⤵
                                                            PID:2764
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,1743050493927310148,5546078314507018049,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:14
                                                            2⤵
                                                              PID:1284
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,7821348611052047419,12640170351847930079,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:14
                                                              2⤵
                                                                PID:1088
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,13154480278908694123,17410963672258185113,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:14
                                                                2⤵
                                                                  PID:3592
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,181142874488908237,3595408126273376189,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:14
                                                                  2⤵
                                                                    PID:2844
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7948,i,17456085880724410189,7599229958707036365,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:14
                                                                    2⤵
                                                                      PID:1044
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8004,i,12027429109935225529,3351680409860771323,524288 --field-trial-handle=2360,i,5661105715258447344,4000432632550656711,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
                                                                      2⤵
                                                                        PID:5940
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                      1⤵
                                                                        PID:1912
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                        1⤵
                                                                          PID:1228
                                                                        • C:\Windows\system32\svchost.exe
                                                                          C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                          1⤵
                                                                            PID:5744
                                                                          • C:\Windows\system32\svchost.exe
                                                                            C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                            1⤵
                                                                              PID:6968
                                                                            • C:\Windows\System32\SecurityHealthHost.exe
                                                                              \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                              1⤵
                                                                                PID:6364

                                                                              Network

                                                                                    MITRE ATT&CK Enterprise v16

                                                                                    Replay Monitor

                                                                                    Loading Replay Monitor...

                                                                                    Downloads

                                                                                    settings.dat

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                    • Size 280B
                                                                                    • SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    settings.dat

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                    • Size 280B
                                                                                    • SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    47c2b95c-d8f6-4d10-b2e4-84fd1cfd4b47.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47c2b95c-d8f6-4d10-b2e4-84fd1cfd4b47.tmp
                                                                                    • Size 70KB
                                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    LOG.old

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                    • Size 334B
                                                                                    • SHA256 584ca050147b43ecdb2f5493f41e06c995a6a6d7aeece3f70ca95d987b11fb7f
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    f_0000cc

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                                                                    • Size 55KB
                                                                                    • SHA256 52a37b3a78eb5b59df3bdb129b9115c6fed9bec6ca62b55ae56d8c2701de5972
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_0000cd

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                                    • Size 57KB
                                                                                    • SHA256 e4dd3bb15ae6492d5ddff59e08075a6023463b82cfe6c284470fec0d86fe52ae
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_0000cf

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                                                                    • Size 56KB
                                                                                    • SHA256 5ac2037030385ad8cf10e486b44475d778eef2e2a377751fbf3c938fd3991b1c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_000109

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
                                                                                    • Size 55KB
                                                                                    • SHA256 c0b1c3c6995c24eabd1a6fcc4f00523e022b546cf1fa4fce6c30d04763244d1b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                    • Size 10KB
                                                                                    • SHA256 ec8f2a62d248e639e37c9619cc94fd85be5380a34e825f50aa263597e7ebad91
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index~RFe5ad274.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5ad274.TMP
                                                                                    • Size 3KB
                                                                                    • SHA256 9d759c3ce50be0c47b78db551addabb3901c5cf1403bda9ba0868571dcde2d14
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    fbb52e1d-2374-4e44-8e4e-bb6deac4d67a.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fbb52e1d-2374-4e44-8e4e-bb6deac4d67a.tmp
                                                                                    • Size 2B
                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                    • MD5 SHA1 SHA512

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 8KB
                                                                                    • SHA256 539ba8868115a45580e508a8cc58d6765c4f613d17479fb33cfb7766b7ae9c52
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 7KB
                                                                                    • SHA256 1160618dd5c8164d6e5858bed7195f752a8c604f7a45ecc848b51e2f4ef6919e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 7KB
                                                                                    • SHA256 16038635573a810a7c5f537878e1cf60d849d2c7f8169ca42b51952bb5ae749e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    SCT Auditing Pending Reports

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                    • Size 2B
                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                    • MD5 SHA1 SHA512

                                                                                    Sdch Dictionaries

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                    • Size 211B
                                                                                    • SHA256 bdbef7ee2d2e0bf751083f858078659097e67527ee213744e9071ea28dd3fd98
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Sdch Dictionaries

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                    • Size 40B
                                                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                    • MD5 SHA1 SHA512

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 17KB
                                                                                    • SHA256 256a21534a6ea614935491f4850d26c2e494db2c3d37a38b539a4d4af09061a6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 16KB
                                                                                    • SHA256 0b03f92dd4406e480a5cddf5aefed90d2d8212386109b30230699707b838a0ec
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 16KB
                                                                                    • SHA256 c1099891293f0e7334e2284f90cf894c0133e1e790dbd43ec7a001b3535734d5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Secure Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                    • Size 29KB
                                                                                    • SHA256 e7535e0ff07c7ded1cb0568728baf5f11ef7ea4bcf8b9b25e93549d00854d74f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dbc21efe-494b-4aef-aecf-6b4521d42992\index-dir\the-real-index
                                                                                    • Size 360B
                                                                                    • SHA256 2718f3e53cc4454eb49b93f6566312e51fa46106cd7056de1f3811df2c1ef5f9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dbc21efe-494b-4aef-aecf-6b4521d42992\index-dir\the-real-index
                                                                                    • Size 2KB
                                                                                    • SHA256 52a896f8bf1c2d33065029bfc97852fab54ebf762b434492d587032811598202
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe59b329.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dbc21efe-494b-4aef-aecf-6b4521d42992\index-dir\the-real-index~RFe59b329.TMP
                                                                                    • Size 360B
                                                                                    • SHA256 784dd6ac4a4e7cc2fc10cdf7ca1ee34d51d5ba4ef330a947dbe0b6ed83e92186
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fc78bb28-bf64-4f27-a287-71b933260204\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 68229742df0513253d8454a9f0cad0a1f91681d76785503b820e30662e200a3c
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fc78bb28-bf64-4f27-a287-71b933260204\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 e52913b890bdc81fe625ffa9cf491ddb9f734cc301bb3ba76945afe167703011
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                    • Size 371B
                                                                                    • SHA256 1c88214a2163ec2df05e4ff55c82dfb71582fbcd22ff244bacbc71e4b0172ae3
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index
                                                                                    • Size 24B
                                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                    • MD5 SHA1 SHA512

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 82de8e80f8a016743976c61779f4f10fa1b288f916179f7a439325c123d1e15a
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 c8273b2f25fb9dab98c908346ef55915201b6723cd71eccfe9f42c4dcc95f088
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 2e6b1362911c21e926fda68a5b15cb04833aedaa860574c76c7b76c44b9f4574
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 a569e2198521985c3b226c6e8a9565849cad41999d61eea8464ea7ea4c4ed180
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 ef1fddc6196b0b0904d47b656bb73e981d352564c55607b3259363eb789340a0
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 557081165c4a6c91586c29c551fafeb9606df4268d72be59521bb9ddbbf86959
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 5eeb9c76a3a275004f7b5772d765fd674dce476b6c5372027903a47465926f46
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 39a894d05cd33e157fff654d16317cdce3621ca4d457bfe0520a334abd4ca432
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 a8987f5529ef9f4a70301b064b28bc6f102b1f381586e13ff20b41afec204ff5
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 49544da83bca6c50ff62f447305402cabfc53d9ef5e7194e385c5e951fe907af
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 118109ed0824387287a3e0e166aa2ab16ef6c4c05c63953ceee1ac7ae6a9d129
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 e128b736ec91e3661c173284f1cbb256829a77c6f1441ff85f6948f24a871782
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 76fd4251a40ca5b565f6ac27c2835b050a4b0c7264f2afd69523969aecd798e2
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe5a2b28.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe5a2b28.TMP
                                                                                    • Size 48B
                                                                                    • SHA256 38483f7be0794ff75dc0b0e946aab57992e4e0756ccf70a89586e67f5c134495
                                                                                    • MD5 SHA1 SHA512

                                                                                    the-real-index~RFe5cb56d.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe5cb56d.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 0667000fd4d33832f9d3704c4b7f0fae902ecb6be059243a1a205bbb56e8c20e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe5eaa19.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe5eaa19.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 1c50387f80ee5f80b32b3e38acb99cdafb8c9a34a775b29d9b5bd0a751349e1f
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe5fb82d.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe5fb82d.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 7d1f277a186b5428e99a5b68d7ec813ee2317504be98fb329161baa6319638f6
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe609222.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe609222.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 a6fdeeb3b4163dc8ce378dd29200a12c8ec69013aa76dcfe998f2736817543fe
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe616c75.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe616c75.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 26b19be97365b151f89caed7c7a2d0e3618d0fb27b9dedd7057592bd4659d3b0
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe62412a.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe62412a.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 6a348809dd2f73a899361e4df8085d8f34ec096f89e616d0f98d856df6fc75a7
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe632ba9.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe632ba9.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 3bbe7528914cf260ffe4736948d769620384a8c74bf00b23417d2afda0e1c5b9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe6419e2.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe6419e2.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 bd4de6c11a74a7dbd922b7b5f64815ff939fbf73a4fc1a29ad9c2120f664eb59
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe650839.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe650839.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 7f1796373cef1eb0e52c5270ec555a157ccb779c1aa4a881cf3e8831195e62af
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe65f672.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe65f672.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 071103d4727abe072b4f60e525cd4fe2250681e6b6e3c73b914b3f780b0af9a4
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe66e4ba.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\df2c65f7-919f-46a8-b4af-94debd639897\index-dir\the-real-index~RFe66e4ba.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 d1e39cf0b7659b24eb0bf6a931a95ee7b03fc1453978b3145732bb8892f6935b
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
                                                                                    • Size 159B
                                                                                    • SHA256 f8272c43fb10d5105c2eed635380b43d4dca63a958bc373c581f8664f1b7755a
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
                                                                                    • Size 159B
                                                                                    • SHA256 ee181acb3faa504db375ce04482b304bcc914fc215e972799bf4c50ab2ae79ec
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt~RFe5a2b57.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe5a2b57.TMP
                                                                                    • Size 165B
                                                                                    • SHA256 8d4353e05afa42c75e2b9d4b134b79c8825ded6680980e48a1a5018d9160dde1
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    013888a1cda32b90_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
                                                                                    • Size 4KB
                                                                                    • SHA256 80440d351e198933e0695fa26b4a094a0a865e03696415d36d626bf2fa41fcc6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    013888a1cda32b90_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_1
                                                                                    • Size 12KB
                                                                                    • SHA256 05c879e98f7070db91d93b406753de98ccb2c06404d17c8e4a6f292dcedc686b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    08b99d499107ba17_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_0
                                                                                    • Size 1KB
                                                                                    • SHA256 851f29bb9774222cc12f66e352e94d2224efd0f783e83a101ae176bb937fbcc5
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    0ae129c33e7a30bd_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\0ae129c33e7a30bd_0
                                                                                    • Size 13KB
                                                                                    • SHA256 d4cdf3b003335c1489647e5e620a717f4818ebeadfe541b86aaeaa80d393ec9b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    0ae129c33e7a30bd_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\0ae129c33e7a30bd_1
                                                                                    • Size 30KB
                                                                                    • SHA256 2f938ac280ea53c703d103df06e5b8f76d87ddc0f625d020dd7187be0348cb61
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    297ecea5cebb5dfe_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0
                                                                                    • Size 37KB
                                                                                    • SHA256 e5b95a0bd3fd8ae51f1ffcd2de1a876f5c567d65129330f68b4900a271372205
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    297ecea5cebb5dfe_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_1
                                                                                    • Size 70KB
                                                                                    • SHA256 096bfbdb92e7a59de62632d8934e176a204ec06393e70c2d1611e4a7252575bd
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    2a0afd649b00527b_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2a0afd649b00527b_0
                                                                                    • Size 7KB
                                                                                    • SHA256 e91c7d07bc10c79d04a1ab67f643e390b4a6f937c771e5451fd81cf6ffa0a555
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    2a0afd649b00527b_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2a0afd649b00527b_1
                                                                                    • Size 20KB
                                                                                    • SHA256 de946ea4e96529955c16dfbdd30df49ace9693d5677ccd697e369b62e0d3dee2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    67a473248953641b_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
                                                                                    • Size 13KB
                                                                                    • SHA256 f549c4bb3f6026914653dd87cfa2587ad9278f173a3147dee6c29d50d91971a1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    67a473248953641b_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_1
                                                                                    • Size 3KB
                                                                                    • SHA256 b2d8ce60ef4283fb2c2dc31d4cf12985ac73447137b8cce4c183471462b8bc7b
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    7b4fd8111178d5b1_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_0
                                                                                    • Size 7KB
                                                                                    • SHA256 bb00d92fe3420fbfa633ce31175e1b1ed87eb912c37dbb2c0529969a2fa3c4c3
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    7b4fd8111178d5b1_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_1
                                                                                    • Size 21KB
                                                                                    • SHA256 ceaf6214022472ab5f3c87e3f259985a70a2f4009f8ed2d4320b4b9a28934fae
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    b6c28cea6ed9dfc1_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
                                                                                    • Size 2KB
                                                                                    • SHA256 e72af667c99ec96e49a97c3782b06a0e45d112e49ac8db3e1c70afe97f3e6135
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    b6c28cea6ed9dfc1_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_1
                                                                                    • Size 3KB
                                                                                    • SHA256 d43eec8c93794d68d6c8d40b7b2512671c95715c8d69750757537bf4fd197fc3
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    d0757ff92c7cde0a_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\d0757ff92c7cde0a_0
                                                                                    • Size 4KB
                                                                                    • SHA256 d4b4da572b37885afe23a99151645de836941e58466402d6570256d56d284775
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    d0757ff92c7cde0a_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\d0757ff92c7cde0a_1
                                                                                    • Size 10KB
                                                                                    • SHA256 53633924250702a4955684a5bd0ab38507d67bdd77493ab5eec919578f57cb60
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    fa813c9ad67834ac_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
                                                                                    • Size 16KB
                                                                                    • SHA256 8ea7bb8053f6f2aab40489874cfef4ca8923a5c44ce01d7d71b06b31f8de7cdd
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    fa813c9ad67834ac_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
                                                                                    • Size 38KB
                                                                                    • SHA256 488541fdc4e970b4a8a26d4f06d08e98d7bb24e6500ba350ad542ec56bd2fd33
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                    • Size 312B
                                                                                    • SHA256 ed9bebb1d0fefc0029f9991dadce6787665474a01032410dc107f843f1d0b22d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe5a2abb.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a2abb.TMP
                                                                                    • Size 48B
                                                                                    • SHA256 3bf615ed4bf020f3bdc9c56f5830fedb24dd4a426337a14eec947a2d145422df
                                                                                    • MD5 SHA1 SHA512

                                                                                    OperationConfig

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                    • Size 22KB
                                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    OperationConfig~RFe5b0701.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b0701.TMP
                                                                                    • Size 3KB
                                                                                    • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 35KB
                                                                                    • SHA256 379f2618446424d6f15e17e2440be6ae72fbc2fe383a9c12be591446dbf7dc8e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 41KB
                                                                                    • SHA256 db417235fbcef7995da5a3802b7f5166eb9a9f3307955a3472cbc1ef55c35178
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 43KB
                                                                                    • SHA256 43cccf47bd1135b010723ba8b17aa174255afcef8584f04a4163e2a194ccfb58
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 43KB
                                                                                    • SHA256 60bb7fc4ddb5ade0e369dc63b74883fe2afe028b7de1de4c6cc6cb270ea6f0f2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 38KB
                                                                                    • SHA256 70b7c6e5889b8582f749d941ed432130dde14c3caa7a853fb082cb4f93629faf
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 41KB
                                                                                    • SHA256 fa0052c31047055e9f1ac4dc2d13ff89961d8bb7b5c447cafbaa7bf0e2450677
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 35KB
                                                                                    • SHA256 7e73f715c98df38981c2266985787b9af2eb5652a83cca22b6d96789acb7a11d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    RevisitationBloomfilter

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                    • Size 392B
                                                                                    • SHA256 04f515dd3f706effc2a4b8b03a2a2ba379f7e0a98788e6480b02bbbb82f280e1
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    RevisitationBloomfilter~RFe5a0773.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a0773.TMP
                                                                                    • Size 392B
                                                                                    • SHA256 08cbeadaeb4d2efa0ca9c8a66ab5276aa3e24fa3693ac25575acae9a3a070ddd
                                                                                    • MD5 SHA1 SHA512

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 372B
                                                                                    • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 252B
                                                                                    • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 132B
                                                                                    • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                    • Size 13B
                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                    • MD5 SHA1 SHA512

                                                                                    content_new.js

                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4424_1846086381\CRX_INSTALL\content_new.js
                                                                                    • Size 10KB
                                                                                    • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    compatibility.ini

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\compatibility.ini
                                                                                    • Size 198B
                                                                                    • SHA256 252b7fff962848c61092e82a3d87adca163849767713a93ab533bb397f1f53bb
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    data.safe.tmp

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\db\data.safe.tmp
                                                                                    • Size 29KB
                                                                                    • SHA256 420f0524d2c1eaf7966ded4ba7585a4b86a202b8f68882a25384b73370fb6af4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data.safe.tmp

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\db\data.safe.tmp
                                                                                    • Size 29KB
                                                                                    • SHA256 94c0e0ccf037c9793b319f842cbe2a33eb208966b01e35bbf417efc93821f200
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data.safe.tmp

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\db\data.safe.tmp
                                                                                    • Size 29KB
                                                                                    • SHA256 cfb64e2f6472bf405448edbfdc2a3d27424f446d565407995e229b9b216620e5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    events

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\events\events
                                                                                    • Size 1KB
                                                                                    • SHA256 db03d518feebdfc11c72a3044e398a6fb41e98d203cceb2b66949ae91ba5857c
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    6c4f9722-a4ee-4d97-9868-5e4dec14cd8e

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\pending_pings\6c4f9722-a4ee-4d97-9868-5e4dec14cd8e
                                                                                    • Size 871B
                                                                                    • SHA256 bf62d46bbc47e35d055cec2f9b9376a96fc8aa659a9402725687dddf52c82a4d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    88b718fe-6618-4d06-91aa-d5f38ab40cfe

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\pending_pings\88b718fe-6618-4d06-91aa-d5f38ab40cfe
                                                                                    • Size 2KB
                                                                                    • SHA256 835b55f69b35f5ed5e0a102206a2d2f589a87f148724ddabc41fc0df5500a2e4
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    9636b9d9-bdc4-43d9-bbb9-fbc9ebebcfeb

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\pending_pings\9636b9d9-bdc4-43d9-bbb9-fbc9ebebcfeb
                                                                                    • Size 235B
                                                                                    • SHA256 4c05b20d6842fb7f2304820011b143a63aaf71b51a052014fe433e61e0366fee
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    c881edda-df0a-4ee3-8bc7-87ac3161598c

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\pending_pings\c881edda-df0a-4ee3-8bc7-87ac3161598c
                                                                                    • Size 886B
                                                                                    • SHA256 e7c024e4ea80d6becc858c1849fff9f76b37327b12b1c5ab7bf85ccb8c877a66
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    cba4c3f1-0ddf-4e68-b9cb-d275232f64c3

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\datareporting\glean\pending_pings\cba4c3f1-0ddf-4e68-b9cb-d275232f64c3
                                                                                    • Size 235B
                                                                                    • SHA256 88f8b178b0fbae96ff546f600b062efc2bf591768b0210981188b5e70737d3fe
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    prefs-1.js

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\prefs-1.js
                                                                                    • Size 6KB
                                                                                    • SHA256 991afe007ff58763f82f61a585e91bef8946e6bc35c77c44e21af35e198b2d07
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    prefs-1.js

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\prefs-1.js
                                                                                    • Size 6KB
                                                                                    • SHA256 1c176234d71419339a00321766b0bc5dc2c7dd57a703dcd9ed694f6309543c36
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    prefs.js

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6leyazu9.default-release\prefs.js
                                                                                    • Size 6KB
                                                                                    • SHA256 56228af61c7f537d25250d5c219e87d3f6717d5b2248aea6f16f503f0fefaf46
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH