Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/07/2026, 12:17

General

  • Target
    https://everisgroup-my.sharepoint.com/:u:/g/personal/oembunut_emeal_nttdata_com/IQAnuTeumn0YRZZplL_KOX8rAWEDvo46ifYd2WMl8pE7Y48?TeamsCID=49949972-5a69-4cd1-b8f5-55ff88e489a3&isSPOFile=1&OR=Teams-HL&CT=1784720588191
  • Sample260722-pf835aef79
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 30 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://everisgroup-my.sharepoint.com/:u:/g/personal/oembunut_emeal_nttdata_com/IQAnuTeumn0YRZZplL_KOX8rAWEDvo46ifYd2WMl8pE7Y48?TeamsCID=49949972-5a69-4cd1-b8f5-55ff88e489a3&isSPOFile=1&OR=Teams-HL&CT=1784720588191
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:5040
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff929a2c188,0x7ff929a2c194,0x7ff929a2c1a0
      2⤵
        PID:2844
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,4786494101474008730,2211073781524543834,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
        2⤵
        • System Time Discovery
        PID:2288
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,10635735131101672311,4541474445113179789,262144 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:3832
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,7607086135071577171,2646808016014069409,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
          2⤵
            PID:2356
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,15740491278397429397,12772885762869337708,2097152 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
            2⤵
              PID:1992
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,8401906422749364692,4623830433037540122,2097152 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
              2⤵
                PID:2340
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,6119066069933938351,831579431787027555,2097152 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
                2⤵
                  PID:456
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,17982541242103183991,2432124899618160062,2097152 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
                  2⤵
                    PID:3456
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,15743649968878789782,15163274710431493833,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
                    2⤵
                      PID:4880
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,11705478260832778024,17060961860266939416,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
                      2⤵
                        PID:4988
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,1681196778210589030,9206760498762390938,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
                        2⤵
                          PID:4448
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,1681196778210589030,9206760498762390938,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
                          2⤵
                            PID:3180
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,1144803302156294812,14657861726616423797,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
                            2⤵
                              PID:5584
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,290900924769607233,8370273492948546118,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
                              2⤵
                                PID:5624
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,159575057559628467,17271009605855099435,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
                                2⤵
                                  PID:5628
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3036,i,18118154304482077553,2545891908219356047,524288 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=1032 /prefetch:8
                                  2⤵
                                    PID:6124
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=744,i,5118039878488076925,5064136916534169116,262144 --field-trial-handle=2272,i,6684507524763089430,12656370742899868692,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:5864
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                  1⤵
                                    PID:1792

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        blocklist

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                        • Size 105KB
                                        • SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                        • Size 280B
                                        • SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
                                        • MD5 SHA1 SHA512 TLSH

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                        • Size 280B
                                        • SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
                                        • MD5 SHA1 SHA512 TLSH

                                        BookmarkMergedSurfaceOrdering

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                        • Size 6B
                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                        • MD5 SHA1 SHA512

                                        f_000089

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                        • Size 41KB
                                        • SHA256 40fb6874aa7a26a7af323a466cc86ec6ebbad75a20adfb903f2f457c7e1d8520
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00008a

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                        • Size 48KB
                                        • SHA256 76cac4642ff56cbee2c1c79f1c224f2fdf090d53e2d46d181ff7d925cb527681
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00008b

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                        • Size 56KB
                                        • SHA256 7bb999c33084c077e1f5b0781a3139005cd6a3293661ae37064da6f0fdda59f0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00008e

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                        • Size 16KB
                                        • SHA256 c4bd048826fdaa8cdb4f05bbb0621d79a95e46894db87a3d949759fc8929380c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_000090

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                        • Size 27KB
                                        • SHA256 643419859585cbbc302e462c447060343aa9eed4563b58fc55a13fb861c74004
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_000093

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                        • Size 52KB
                                        • SHA256 3ba01f52edca67a5353a4654ad3ae426f9177e79f370ef10ba367a3ba3c41737
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_00009d

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                        • Size 20KB
                                        • SHA256 5cbed04ad637c341cbf45d933a271fa8c9a9f4b5dc49b46dc664276a5f628869
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                        • Size 50KB
                                        • SHA256 2145acbf230521f8a762af09e12add844644049711366bda9612edbaf5aacb38
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                        • Size 44KB
                                        • SHA256 a963c6b95363fa684311c92187af6d8aefdaa92a36e965716ea80f2f1bd77740
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b2

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                        • Size 22KB
                                        • SHA256 a2150acd6b73c0a3f264dba768394eaf354c20d06b1dd87c4ae9638bf41d668c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b3

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                        • Size 17KB
                                        • SHA256 b30c3078d5d8efea6740541ea8ff30d4dc999fc499c66e96d4026e602492225e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b4

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                        • Size 16KB
                                        • SHA256 98aceac979e7943ca3cd352501c73a7ba297d4db87d7392e2945db3ce29b33fe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b5

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
                                        • Size 16KB
                                        • SHA256 1f7216458568f394c796e011cb5da2285c6d9c919e3d7c224cfd09df6197ac50
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b6

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                        • Size 17KB
                                        • SHA256 7d733601e4b8e0cd33e0b0147b53c67a79d63feae377df06b8d9fddfba8c1062
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b7

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                        • Size 17KB
                                        • SHA256 d5a73c4c8205f5c8fdae9018d01b597f1827316dc5ab9d0ec9747cda2853cfd0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b8

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                        • Size 17KB
                                        • SHA256 67daacb863882f1d7f87a5174b29a7ff8b0a719c6e46babd207f2379a0d99f83
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000b9

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
                                        • Size 35KB
                                        • SHA256 11980ecd03e02439a6300eeff5dbf9a48bd52eebf14bbcc246752b0ce5baf223
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000ba

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                        • Size 35KB
                                        • SHA256 a8283e1b2cabd16be04a6cb0a292e532d5b74520123e09c2cd9deb9eccf2d1eb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000bb

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
                                        • Size 170KB
                                        • SHA256 f64ddbb70f682e3d5cff038f60645c65a5f12fc6540c5847e8820874bdd5dc2a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000bc

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
                                        • Size 159KB
                                        • SHA256 36b658e80d8825f6b43ff8f67ef5fec88412ca10f9d2663453ad6ff0984b9d7b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000bd

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
                                        • Size 33KB
                                        • SHA256 bfe9f48b1c1c0a4d93329f3399f4de41ae5ca780ce4e5fca7be168cafee394e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000be

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
                                        • Size 30KB
                                        • SHA256 49549a16f46767fa5c801de6e26a1c45112b83653f048bc9a78ba7210f8a14a8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000bf

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                        • Size 21KB
                                        • SHA256 6dbe807b8da91d549a49beec3330d795601ec0f272ea232e91121f3ed703dfe4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000c0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                        • Size 25KB
                                        • SHA256 dba7c93d3cf4806133d8fe211dce32aa12041fb82acc4591f464052714878fb8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000c1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                        • Size 41KB
                                        • SHA256 3fc627e56349201333e6c39a44036b5cf09ad9378e46782098505edb037ba104
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000c2

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                        • Size 46KB
                                        • SHA256 e91fee23bcfae78b7296d495abf0358581632b33658231546c952a78547c3c08
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000c3

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                        • Size 22KB
                                        • SHA256 f1841ff185a4f43bf0184c828da1647c0ddfbebb6bb763cd10789f9eb6a4a306
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000c4

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                        • Size 21KB
                                        • SHA256 c958fec1beb0ad85c367cc63c7baa2138789061a7fecf4af0902bb8dd7c51701
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000c5

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                        • Size 53KB
                                        • SHA256 4232d0eeacaac408998ece1c08515aa0b0aeae19d0d8939b3f08c31a10731d2f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f_0000d0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                        • Size 162KB
                                        • SHA256 421d1cc9cedb5d0211d7a4e898facf69c8eb5e551ef41ae3eb1ead0192fbf7c8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 4KB
                                        • SHA256 397013a855e95188862bd10689274907e902c2c79561facf80011021087364de
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index~RFe593118.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593118.TMP
                                        • Size 3KB
                                        • SHA256 f2f2d2ffb3d1016a7054fd36100017eba74fdcace135f34e5698aa48fe255e32
                                        • MD5 SHA1 SHA512 TLSH

                                        SiteList-Enterprise.json

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                        • Size 2B
                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        • MD5 SHA1 SHA512

                                        Edge Profile.ico

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                        • Size 70KB
                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        44

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.blob\7\00\44
                                        • Size 171KB
                                        • SHA256 b0412d2d76f06888d5f18267edf61bb93b1c806171b060f208f53b35463d43a5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000004.log

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.leveldb\000004.log
                                        • Size 1.6MB
                                        • SHA256 d1dc57031db6331fb8403ff6bef3f49a45a921fb4549e62d0802d0ec6599c7ad
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000005.ldb

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.leveldb\000005.ldb
                                        • Size 1.5MB
                                        • SHA256 607136c19b803bd8ad5c88e4af787e68880c9061207b09011302b7d59617fb9e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000006.log

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.leveldb\000006.log
                                        • Size 1.1MB
                                        • SHA256 ef4fd67d07130f92c5792745e4bca4e4a7e08df3f4d82a3f038d5412367291e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        000007.ldb

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.leveldb\000007.ldb
                                        • Size 2.6MB
                                        • SHA256 d7dfac285cb36820512a85c23038f6fad2766b9ae4b35e1b5dcff1b058a99b74
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        CURRENT

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.leveldb\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512

                                        LOG

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.leveldb\LOG
                                        • Size 541B
                                        • SHA256 228e0359d1b9d3daf7a4c494497709afd45ce5392cb30709e0e218ea5a166a36
                                        • MD5 SHA1 SHA512 TLSH

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_everisgroup-my.sharepoint.com_0.indexeddb.leveldb\MANIFEST-000001
                                        • Size 222B
                                        • SHA256 c9935cbd29b2a57ac5210b17ff34b89d212a4a2c071c7b8855eb425d8f712372
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                        • Size 3KB
                                        • SHA256 5cda7a22b86ee8c7cba62be18d906c15a80c87d54bfc9bfc4fdced3c9ffa1c81
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                        • Size 111B
                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                        • MD5 SHA1 SHA512 TLSH

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                        • Size 3KB
                                        • SHA256 b8caab27b8dd51c490d3fe0addbbf674b65130a75a4b53b994cf412b69be648b
                                        • MD5 SHA1 SHA512 TLSH

                                        SCT Auditing Pending Reports

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 12KB
                                        • SHA256 73ceffedd4065c5ffef9d68e3cfeb492033677e87a99bf6688dfaab7600c88ab
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                        • Size 13KB
                                        • SHA256 0575c5803c8623ed94cab5671d0a11b4196215f579f5589b6fe3aa2d1323dc3f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Secure Preferences

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                        • Size 30KB
                                        • SHA256 96d4a46564895542a31e00f97721b8529487628fd607e42865c0c3d9248b0ee4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        92d1dc8ae40b212a_1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\84179815-b6ce-4788-860d-b6f86a518209\92d1dc8ae40b212a_1
                                        • Size 1KB
                                        • SHA256 0aa5c0d8ab6508432b32e1c2e06f6fec1882c5f9ed657098935df6c95cabe964
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\84179815-b6ce-4788-860d-b6f86a518209\index-dir\the-real-index
                                        • Size 2KB
                                        • SHA256 e677c098413641bfeb7c116d8ceaaca7c47a45ac445346d15b97981b3cb41f69
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe592a91.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\84179815-b6ce-4788-860d-b6f86a518209\index-dir\the-real-index~RFe592a91.TMP
                                        • Size 48B
                                        • SHA256 e25d90c3945619195891198083010322b3287b7ac1745efb5f9a52ee3d1cc006
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\849cf0b9-e543-43d7-a316-37e34bc7c321\index-dir\the-real-index
                                        • Size 22KB
                                        • SHA256 1ea6c65e9aa338019baeb80f3fd49ebe64bdbbf5fd8b723a9f4d7ff8af513871
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index~RFe599f34.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\849cf0b9-e543-43d7-a316-37e34bc7c321\index-dir\the-real-index~RFe599f34.TMP
                                        • Size 48B
                                        • SHA256 a28989f5e37fc60709188103709236d902eeb6e01051d9c85ea61da97eea78ad
                                        • MD5 SHA1 SHA512

                                        a4e5036f58e9d133_0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\8cb437e1-15c8-42bf-91ad-c2dec179dc7e\a4e5036f58e9d133_0
                                        • Size 77KB
                                        • SHA256 ed981c4b96e4cf910a26d789fc87fb4ae668e321927054fa58d51555844517b1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        a4e5036f58e9d133_1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\8cb437e1-15c8-42bf-91ad-c2dec179dc7e\a4e5036f58e9d133_1
                                        • Size 194KB
                                        • SHA256 0bdfcd61cfb19d3adcd27582325ce83324310b26c4140d85cc3d013fb02a7b43
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\8cb437e1-15c8-42bf-91ad-c2dec179dc7e\index-dir\the-real-index
                                        • Size 816B
                                        • SHA256 187682f801539945143c7e3cdc56c5f84ee16c374a1215ae512b558169a56cc7
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe592c46.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\8cb437e1-15c8-42bf-91ad-c2dec179dc7e\index-dir\the-real-index~RFe592c46.TMP
                                        • Size 48B
                                        • SHA256 4c53fc008cdc0adc2f94857b7a86ac80ba0e203cbf8edcccd08b55d007ef6658
                                        • MD5 SHA1 SHA512

                                        eac20401e41a96fb_0

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\a7f4705e-7098-4ffa-8dcb-309655834ac3\eac20401e41a96fb_0
                                        • Size 177KB
                                        • SHA256 2a6c667628d30eec7c76d751a2f423dcd6737cb421de8d837b28032181c9cc8d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        eac20401e41a96fb_1

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\a7f4705e-7098-4ffa-8dcb-309655834ac3\eac20401e41a96fb_1
                                        • Size 377KB
                                        • SHA256 4be38f09721366f2512c4bc725859593db6fbf33e625ca4283b82bd9a3dac6ed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\a7f4705e-7098-4ffa-8dcb-309655834ac3\index-dir\the-real-index
                                        • Size 48B
                                        • SHA256 b5e345132e15a4fd16c66627224f2f28a95cdc411b0a5df4bd24e90a63269c65
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\a7f4705e-7098-4ffa-8dcb-309655834ac3\index-dir\the-real-index
                                        • Size 120B
                                        • SHA256 e945db6b75747dfefe51a540ea0df22d617cbb3e8c6a98d4839fa711e588f73a
                                        • MD5 SHA1 SHA512 TLSH

                                        index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\bd27cf05-ac7e-4c67-8a5c-6843cff631d7\index
                                        • Size 24B
                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\bd27cf05-ac7e-4c67-8a5c-6843cff631d7\index-dir\the-real-index
                                        • Size 6KB
                                        • SHA256 19c9edc68bd86ca6c5d413710b3eff36a32158cbbe168e79e9028c5f485c9324
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index~RFe59bc41.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\bd27cf05-ac7e-4c67-8a5c-6843cff631d7\index-dir\the-real-index~RFe59bc41.TMP
                                        • Size 48B
                                        • SHA256 6c1d5f1093090d9666269d05ef986208895a6107a0d24700d289a4e3b4b484f3
                                        • MD5 SHA1 SHA512

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\index.txt
                                        • Size 351B
                                        • SHA256 12f87211d447d26f21dae1f57b86c9874eaced7b1afb80ddfc8bbc453543c72c
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\index.txt
                                        • Size 449B
                                        • SHA256 f3ea3bd11f8736d46cd40e4ae41e1375e99a68aa85aaff11ca60cbaaa3e85d99
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\index.txt
                                        • Size 653B
                                        • SHA256 0e28828da91feb41f3fd2df22a3ad0f5427497c08af02231c1679b34f560ed37
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\index.txt
                                        • Size 598B
                                        • SHA256 ac16fc563a8600782de430ba1bb9b1980550643878f64a5a37e9bf999ffa0f81
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\index.txt
                                        • Size 754B
                                        • SHA256 6a516a2cb15e16e0ca90b5213b46b67a742860f5636584acfc7c1c5e2b3dc80f
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt~RFe58ce86.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\385356e7cd297a04c48ccee270c685860069c618\index.txt~RFe58ce86.TMP
                                        • Size 201B
                                        • SHA256 97a7e3e01040e7a5ff6fe2f3297e6c8e00a057420f0bce0577c189c410d444e9
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 96B
                                        • SHA256 7fbcb85fe7af28cc8d2831131af3b1571cd4eece0aec4ca81be9c40c495f5c96
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe591052.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591052.TMP
                                        • Size 48B
                                        • SHA256 8f342d7384d93e828944f9bb5f649b264e75fa7054066e6338e8332999ad8a06
                                        • MD5 SHA1 SHA512

                                        sync_diagnostic.log

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                        • Size 4KB
                                        • SHA256 6463c8d33ab8949e07f2847e54400ddcf537cc777d47622a7da78f472f62547f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        OperationConfig

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                        • Size 22KB
                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        OperationConfig~RFe599be8.TMP

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599be8.TMP
                                        • Size 3KB
                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                        • MD5 SHA1 SHA512 TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 27KB
                                        • SHA256 aba916181794ef802092f7be94ad3f3f0b24b81b04331e0add8d84f018d0a1a7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 8KB
                                        • SHA256 01a28294a7a813a6addd67c9896bf7a2e7603231a047f70c956646c560e591f9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 19KB
                                        • SHA256 318be41d4c91e7af7f93825f07b9d2f5f2f4b5a03176d8193e6d6922f31330e3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 19KB
                                        • SHA256 eb735eab6dfd6e5f2f84ded0585766c92058897d7aec79587e8db2bdd085f7c6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                        • Size 8KB
                                        • SHA256 347339009c8dd2ea28fa06045274a98bdb15afeacd4d0ba214be0f196d267d5a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6998d039-8477-4b81-9b5a-410b5e17022a.tmp

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6998d039-8477-4b81-9b5a-410b5e17022a.tmp
                                        • Size 13B
                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                        • MD5 SHA1 SHA512

                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                        • Size 2KB
                                        • SHA256 64722e8c233a5b8c11e30422c7bf1435dbe427cf3ae39856e9c26b2bd437e086
                                        • MD5 SHA1 SHA512 TLSH