Analysis

  • user interaction
    yes
  • max time kernel
    455s
  • max time network
    456s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/07/2026, 13:11

General

  • Target
    Message.eml
  • Size 74KB
  • Sample260730-qe24vsaa29
  • SHA256 2ea840c2a3dfb6efca05e94cbebea59aef2b594d80504eae1fb97407c9e7cfd8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Probable phishing domain 1 TTPs 1 IoCs
  • Drops file in Program Files directory 31 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 12 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 15 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies data under HKEY_USERS 5 IoCs
  • Modifies registry class 19 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 55 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 17 IoCs
  • Suspicious use of SetWindowsHookEx 40 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\Admin\AppData\Local\Temp\Message.eml"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2060
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdrooms.com%2Fimprint&data=05%7C02%7Chans-joerg.engel%40dreso.com%7C08b859585e334c6d2f6608deee208d47%7C4875ab0bd8374817b397e19740d8b17f%7C0%7C0%7C639210020737809864%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=LgoDAgGaqrrsDV4wfRfERykCnK9h2Az9G%2FzRdomk37s%3D&reserved=0
      2⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1684
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x308,0x7ffb101cc188,0x7ffb101cc194,0x7ffb101cc1a0
        3⤵
          PID:3832
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,10062406023471562542,6615974735675132058,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:3
          3⤵
          • System Time Discovery
          PID:4652
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,12212700801711896943,3270716522016782310,262144 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
          3⤵
            PID:3520
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,9927231845412489233,11210612486808688104,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:8
            3⤵
              PID:4880
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,17812038538702035517,14337617125613853587,2097152 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
              3⤵
                PID:3200
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,7442198038100478365,6005440279430434467,2097152 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
                3⤵
                  PID:1544
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,9372496892514169152,779863840966442418,2097152 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
                  3⤵
                    PID:2636
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,11188629907273135397,4505479213090655333,2097152 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
                    3⤵
                      PID:876
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,5321409600331669546,1974763757139529788,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
                      3⤵
                        PID:4832
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,6287849901699531958,8701097963477325945,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
                        3⤵
                          PID:1244
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,15652045983526761315,10612650315149320462,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
                          3⤵
                            PID:3688
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,15652045983526761315,10612650315149320462,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
                            3⤵
                              PID:4504
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6220,i,2359886258918028001,5842069574959885265,2097152 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
                              3⤵
                                PID:1700
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6204,i,12175842239955319004,16001713863867587018,2097152 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:1
                                3⤵
                                  PID:4796
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,5651377335412872501,17507831300025578905,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
                                  3⤵
                                    PID:5376
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,2878274930389926935,4764918142476258854,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:8
                                    3⤵
                                      PID:5468
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6604,i,2827623256784231360,10993325662237838958,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
                                      3⤵
                                        PID:5536
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6740,i,1787822371672757239,15714786124298503118,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:8
                                        3⤵
                                          PID:5924
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6596,i,5082553586549434140,4789935253737629086,2097152 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:1
                                          3⤵
                                            PID:5388
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,3732320406263719644,227147586031381956,524288 --field-trial-handle=2372,i,5167124503110417923,3886486143963298437,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
                                            3⤵
                                              PID:5588
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdrooms.com%2Fprivacy-policy&data=05%7C02%7Chans-joerg.engel%40dreso.com%7C08b859585e334c6d2f6608deee208d47%7C4875ab0bd8374817b397e19740d8b17f%7C0%7C0%7C639210020737829677%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=CpczeLVHqx1CrIuckJGSeW%2FKUDo4O6Xh7QHZhsbPBpg%3D&reserved=0
                                            2⤵
                                            • Drops file in Program Files directory
                                            • Checks processor information in registry
                                            • Enumerates system info in registry
                                            • Modifies data under HKEY_USERS
                                            • Modifies registry class
                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                            • Suspicious use of FindShellTrayWindow
                                            • Suspicious use of WriteProcessMemory
                                            PID:5480
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffb101cc188,0x7ffb101cc194,0x7ffb101cc1a0
                                              3⤵
                                                PID:952
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,4018398547363492780,1009085134339449124,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
                                                3⤵
                                                • System Time Discovery
                                                PID:872
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,10612094010429108293,2629743557282378869,262144 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
                                                3⤵
                                                  PID:5776
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,12111560224569675107,7922245617938611918,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
                                                  3⤵
                                                    PID:5800
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,12332120772695643134,15028091574254347969,2097152 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                                                    3⤵
                                                      PID:4564
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,11904902875660994254,2364675032076953102,2097152 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
                                                      3⤵
                                                        PID:2008
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,5561242826070016006,9438862515106629351,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:8
                                                        3⤵
                                                          PID:5212
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4944,i,11042983437124987726,10902585658491076465,2097152 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:1
                                                          3⤵
                                                            PID:2028
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5084,i,533025489871327601,6761758979984237994,2097152 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
                                                            3⤵
                                                              PID:4696
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5300,i,8456518020775569479,13652076044883770760,2097152 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
                                                              3⤵
                                                                PID:2100
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,14084233558394534435,11418368154048115563,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
                                                                3⤵
                                                                  PID:640
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,4361597919916553425,16972463538655271129,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:8
                                                                  3⤵
                                                                    PID:2000
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,10621213292841474689,78207480202096905,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:8
                                                                    3⤵
                                                                      PID:2724
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,11674487988209777620,10899937433521598652,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
                                                                      3⤵
                                                                        PID:2688
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,11674487988209777620,10899937433521598652,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
                                                                        3⤵
                                                                          PID:4592
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,597286939759987860,11142822453607022307,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:8
                                                                          3⤵
                                                                            PID:6100
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,5994143358615657581,18363676347365834640,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8
                                                                            3⤵
                                                                              PID:5228
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,16923936353423293493,15951141364892136920,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:8
                                                                              3⤵
                                                                                PID:1748
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,7906194042805643047,1132820266200812881,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8
                                                                                3⤵
                                                                                  PID:1720
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,12700055563951624501,1322512645879991208,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:8
                                                                                  3⤵
                                                                                    PID:5436
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2936,i,10384999505061985746,8456391718041208720,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=3992 /prefetch:8
                                                                                    3⤵
                                                                                      PID:3780
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,7542721112815243549,9746884746056999418,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
                                                                                      3⤵
                                                                                        PID:5696
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,15008891022236135086,9760020000261021021,524288 --field-trial-handle=2340,i,7574697425234138102,16803343928472629493,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
                                                                                        3⤵
                                                                                          PID:5028
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                          3⤵
                                                                                          • Checks processor information in registry
                                                                                          • Enumerates system info in registry
                                                                                          • Modifies data under HKEY_USERS
                                                                                          • Modifies registry class
                                                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                          PID:3092
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb101cc188,0x7ffb101cc194,0x7ffb101cc1a0
                                                                                            4⤵
                                                                                              PID:3676
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1720,i,13672312907242314735,526844973827863867,524288 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:3
                                                                                              4⤵
                                                                                              • System Time Discovery
                                                                                              PID:1912
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,11098674651278041193,8935272949211973230,262144 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=1936 /prefetch:2
                                                                                              4⤵
                                                                                                PID:3824
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,2244963035665985703,14313036687556086032,524288 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
                                                                                                4⤵
                                                                                                  PID:2000
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,7759148399077537422,6632520443474232293,524288 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
                                                                                                  4⤵
                                                                                                    PID:5172
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,7759148399077537422,6632520443474232293,524288 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
                                                                                                    4⤵
                                                                                                      PID:3264
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4892,i,3312156076275882188,460961130991605635,2097152 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:1
                                                                                                      4⤵
                                                                                                        PID:5348
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=4896,i,3688317840490198096,7225884599325073353,2097152 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
                                                                                                        4⤵
                                                                                                          PID:2600
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,1423288571576558525,6949879516157373744,524288 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
                                                                                                          4⤵
                                                                                                            PID:1504
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,5017418633151578190,2736826322405912449,524288 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
                                                                                                            4⤵
                                                                                                              PID:5596
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5848,i,17208638449127731010,10945683245118359533,2097152 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:1
                                                                                                              4⤵
                                                                                                                PID:740
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6128,i,14332029467873018706,12934365024058237658,2097152 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
                                                                                                                4⤵
                                                                                                                  PID:5936
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5312,i,4342656596954322306,5676464370313082842,2097152 --field-trial-handle=1944,i,286654950754138628,1964335817594575824,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
                                                                                                                  4⤵
                                                                                                                    PID:1896
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                                                    4⤵
                                                                                                                    • Drops file in Program Files directory
                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                    • Checks processor information in registry
                                                                                                                    • Enumerates system info in registry
                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                    • Modifies registry class
                                                                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                                    • Suspicious use of SendNotifyMessage
                                                                                                                    PID:5912
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffb101cc188,0x7ffb101cc194,0x7ffb101cc1a0
                                                                                                                      5⤵
                                                                                                                        PID:5980
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,4041015803804668766,758547861904044780,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
                                                                                                                        5⤵
                                                                                                                        • System Time Discovery
                                                                                                                        PID:1440
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,11316289123957818427,12824727081085066599,262144 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
                                                                                                                        5⤵
                                                                                                                          PID:5628
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,10073347936112638048,4693870450396561725,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
                                                                                                                          5⤵
                                                                                                                            PID:3224
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,1980934210901380663,14323111767565495632,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
                                                                                                                            5⤵
                                                                                                                              PID:4144
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,1980934210901380663,14323111767565495632,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
                                                                                                                              5⤵
                                                                                                                                PID:5552
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4896,i,11937095733333490716,2327875107916707396,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:1
                                                                                                                                5⤵
                                                                                                                                  PID:1864
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=4900,i,11410706916424310067,8573644073695190551,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
                                                                                                                                  5⤵
                                                                                                                                    PID:5744
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,17584807727535647293,14836559155481717755,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
                                                                                                                                    5⤵
                                                                                                                                      PID:5648
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,7409639458857602847,718306512145006457,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
                                                                                                                                      5⤵
                                                                                                                                        PID:5748
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5448,i,4230876189196166888,8885135619033993,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:1
                                                                                                                                        5⤵
                                                                                                                                          PID:4684
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6016,i,2339279808739577979,963743637061693938,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
                                                                                                                                          5⤵
                                                                                                                                            PID:2812
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6044,i,8413026882935982007,17514975005782846140,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
                                                                                                                                            5⤵
                                                                                                                                              PID:2728
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,2121222464381746255,2900462682659940827,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
                                                                                                                                              5⤵
                                                                                                                                                PID:4700
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6596,i,13197635814829011951,6785608002412640044,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
                                                                                                                                                5⤵
                                                                                                                                                  PID:4352
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,5984202917835718031,4937515826342102590,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8
                                                                                                                                                  5⤵
                                                                                                                                                    PID:3248
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6668,i,9262302916129929778,13503691401281246962,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
                                                                                                                                                    5⤵
                                                                                                                                                      PID:5560
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,9050061380682566469,11033732439308772368,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
                                                                                                                                                      5⤵
                                                                                                                                                        PID:2124
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,334782306961334498,15564156116094731569,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:8
                                                                                                                                                        5⤵
                                                                                                                                                          PID:5144
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6760,i,6441623039177672815,3032873053518932036,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
                                                                                                                                                          5⤵
                                                                                                                                                            PID:5536
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7156,i,16710529869710936589,16815710402944518834,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:8
                                                                                                                                                            5⤵
                                                                                                                                                              PID:4624
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7324,i,5981445029373614520,8150534263932913724,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7344 /prefetch:8
                                                                                                                                                              5⤵
                                                                                                                                                                PID:5292
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7364,i,11205892947468269811,6292042135826985257,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7240 /prefetch:1
                                                                                                                                                                5⤵
                                                                                                                                                                  PID:5344
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7508,i,4751637430314563661,9869180392756193721,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:1
                                                                                                                                                                  5⤵
                                                                                                                                                                    PID:5956
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7432,i,13467231749841794189,6660263466500744008,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:1
                                                                                                                                                                    5⤵
                                                                                                                                                                      PID:1248
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7256,i,1352522658293806646,16440724947853646898,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:1
                                                                                                                                                                      5⤵
                                                                                                                                                                        PID:3760
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7824,i,17070121594755897684,9087096310173544981,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7804 /prefetch:1
                                                                                                                                                                        5⤵
                                                                                                                                                                          PID:5016
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7752,i,15367499164364452971,9185363168048811845,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8056 /prefetch:8
                                                                                                                                                                          5⤵
                                                                                                                                                                            PID:4656
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8044,i,17952659891687147235,721640076225454334,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
                                                                                                                                                                            5⤵
                                                                                                                                                                              PID:640
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8112,i,5425133006536653852,14920184442618218216,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8068 /prefetch:8
                                                                                                                                                                              5⤵
                                                                                                                                                                                PID:2196
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7852,i,16450982598941327402,4760943936294809086,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8096 /prefetch:1
                                                                                                                                                                                5⤵
                                                                                                                                                                                  PID:5340
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8068,i,9267791550362732156,8964056795630168092,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8244 /prefetch:1
                                                                                                                                                                                  5⤵
                                                                                                                                                                                    PID:3864
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8316,i,13483462669593197612,15311947125652019791,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:8
                                                                                                                                                                                    5⤵
                                                                                                                                                                                      PID:5632
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8272,i,6103066533759479334,14989217511241917303,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8296 /prefetch:1
                                                                                                                                                                                      5⤵
                                                                                                                                                                                        PID:5180
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8304,i,7855464389058430160,12508765958887326838,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8548 /prefetch:1
                                                                                                                                                                                        5⤵
                                                                                                                                                                                          PID:2056
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8316,i,2732823436749547734,1374804500134079601,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8296 /prefetch:8
                                                                                                                                                                                          5⤵
                                                                                                                                                                                            PID:5364
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8176,i,6400221265405887630,11983761616999106372,262144 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:8
                                                                                                                                                                                            5⤵
                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                            PID:688
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8040,i,11664101022559622356,11351940238168006372,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8476 /prefetch:1
                                                                                                                                                                                            5⤵
                                                                                                                                                                                              PID:5372
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8188,i,6618976946534838932,2422053079277245442,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8020 /prefetch:1
                                                                                                                                                                                              5⤵
                                                                                                                                                                                                PID:2884
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8856,i,16297198459243231540,8725811653179021669,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8876 /prefetch:1
                                                                                                                                                                                                5⤵
                                                                                                                                                                                                  PID:4468
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8776,i,17914083364322868209,5094250770351791664,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8792 /prefetch:1
                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                    PID:644
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9020,i,5341697220068441560,3306538500655622295,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9024 /prefetch:1
                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                      PID:4956
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9412,i,1344843834425544442,8289093181172934730,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9604 /prefetch:1
                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                        PID:4216
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9612,i,9787761742487594976,8321910304410815028,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9660 /prefetch:1
                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                          PID:5296
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9444,i,14184229103556620468,4653328066432950484,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9720 /prefetch:8
                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                            PID:1588
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,5654840089130810714,6275431223205337419,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                              PID:1732
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9016,i,2532365964956346534,16753941055958894233,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9116 /prefetch:1
                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                PID:6068
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8188,i,12077958869215538165,5403157185787606608,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8692 /prefetch:1
                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                  PID:1820
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7012,i,7414647409068058362,11141817021265750982,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9456 /prefetch:1
                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                    PID:2964
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9028,i,59164018585288292,955509679249805677,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                      PID:4620
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9712,i,8789144693635530969,1900141256175295015,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=1064 /prefetch:1
                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                        PID:4976
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=6616,i,12627771140706229533,2936360112571049741,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:1
                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                          PID:4448
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=7844,i,14590158160972614679,13243737402485416665,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:1
                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                            PID:2732
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9676,i,11748070672994633716,17896501700551175785,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9440 /prefetch:1
                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                              PID:1372
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8300,i,659406735157705323,238056448841448287,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=4052 /prefetch:8
                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                PID:4160
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9344,i,17329346356254204156,6323914845266679839,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=8996 /prefetch:8
                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                  PID:1880
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9996,i,13296740805662506627,16192252623157114831,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9992 /prefetch:8
                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                    PID:4804
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10164,i,1399161580934259939,57599452894646716,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=10196 /prefetch:8
                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                      PID:740
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10380,i,5665507337159555523,3442904096572445069,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=10396 /prefetch:1
                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                        PID:2736
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10444,i,14053156390265796616,17125705159227258369,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=10440 /prefetch:1
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                          PID:4580
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10392,i,3825794356872478240,5975701720387212765,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=10372 /prefetch:1
                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                            PID:1052
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10540,i,5437853822902908914,13376575726748617641,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=10224 /prefetch:1
                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                              PID:4960
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=9848,i,4479570895769767998,890699113049930993,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9864 /prefetch:1
                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                PID:964
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=9868,i,7267734310571178721,11693208726814766844,2097152 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:1
                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                  PID:3768
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11004,i,8652015760228432556,7072209502380563714,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=11112 /prefetch:8
                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                    PID:4956
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11016,i,10644914248791653213,9899981662810357959,524288 --field-trial-handle=2240,i,9540938492578833625,12684853734351898603,262144 --variations-seed-version --mojo-platform-channel-handle=11096 /prefetch:8
                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                      PID:5112
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Faccount.drooms.com%2Fsettings%2Fnotifications%3Flang&data=05%7C02%7Chans-joerg.engel%40dreso.com%7C08b859585e334c6d2f6608deee208d47%7C4875ab0bd8374817b397e19740d8b17f%7C0%7C0%7C639210020737851755%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=4m0ZtNeneApt51KvHv6pHPXo%2BZEvwyGpIxHNso6AEAw%3D&reserved=0
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:1132
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Faccount.drooms.com%2Fauth%2Fsign-up%3Flang%3Dde%26project_container_id%3Dec5ff32d-1a9b-4209-a68c-6da38ca70876%26project_id%3D7cd31c53-b34e-41df-8e1e-39b545c7a707%26token%3D52d1849332655f673d645fc5fd671e07%26userRole%3DinvitedUser%26utm_campaign%3Dinitial_invitation%26utm_content%3Dnew_user%26utm_medium%3Demail%26utm_source%3Dadmin&data=05%7C02%7Chans-joerg.engel%40dreso.com%7C08b859585e334c6d2f6608deee208d47%7C4875ab0bd8374817b397e19740d8b17f%7C0%7C0%7C639210020737389734%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=HBddim0Kp%2Bv3wYKdBhjnzxwrmgr6l71FLs40wbod7uw%3D&reserved=0
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:5492
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                    PID:1400
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                      PID:6028
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                        PID:4340
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                          PID:3652
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                            PID:5948

                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                                                                                                Downloads

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_1119775664\manifest.json
                                                                                                                                                                                                                                                                • Size 85B
                                                                                                                                                                                                                                                                • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                LICENSE

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_1694490834\LICENSE
                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_1694490834\manifest.json
                                                                                                                                                                                                                                                                • Size 79B
                                                                                                                                                                                                                                                                • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_1763840219\manifest.json
                                                                                                                                                                                                                                                                • Size 135B
                                                                                                                                                                                                                                                                • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_1866654118\manifest.json
                                                                                                                                                                                                                                                                • Size 165B
                                                                                                                                                                                                                                                                • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_1912406663\manifest.json
                                                                                                                                                                                                                                                                • Size 238B
                                                                                                                                                                                                                                                                • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_392272167\manifest.json
                                                                                                                                                                                                                                                                • Size 160B
                                                                                                                                                                                                                                                                • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_524161629\manifest.json
                                                                                                                                                                                                                                                                • Size 113B
                                                                                                                                                                                                                                                                • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5912_765526321\manifest.json
                                                                                                                                                                                                                                                                • Size 177B
                                                                                                                                                                                                                                                                • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                blocklist

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                                                                                                • Size 105KB
                                                                                                                                                                                                                                                                • SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                                                                                                                                                                                                                                                                • Size 135B
                                                                                                                                                                                                                                                                • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                protocols.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                crl-set

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                CrashpadMetrics-active.pma

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                • SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 884794b0bd7b70a55f13523b0de7ea1e5acc7b3cd6c9b4663bc124242b0de950
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 57f3f8c0922ab211a331ccc8913430dab5b95b6cfcf390eeef5743f3e11a26db
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 ce6612fa5fcb5a512497cb33ab0a3f706834ad222b5696f08863894b1e22f287
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 25e973397fd447b0028cdc17dc1802bb7a6125e539bdae5206c17e8cf683b0df
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                • SHA256 444fa05742deb27e3a99dce9984d725e4bf8dadcc338d61f6df21464eaceda66
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                CURRENT

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT
                                                                                                                                                                                                                                                                • Size 16B
                                                                                                                                                                                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                LOG.old

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                • Size 334B
                                                                                                                                                                                                                                                                • SHA256 dad29254f73c92cfaaafb7bfa9985a20a7858499fa501d07f2a6552119486378
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                • Size 6B
                                                                                                                                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                data_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
                                                                                                                                                                                                                                                                • Size 44KB
                                                                                                                                                                                                                                                                • SHA256 cc44bbb6d9119a17864f8eaac6a46b8925a0415f5a58f9c7e76251b6081d76ce
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000c7

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
                                                                                                                                                                                                                                                                • Size 40KB
                                                                                                                                                                                                                                                                • SHA256 32757dd7cdd69fc8b77e460fcf0b4354d7ba9b12b70b92175439c18f16ecc819
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000c8

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
                                                                                                                                                                                                                                                                • Size 83KB
                                                                                                                                                                                                                                                                • SHA256 b9cf829054644112cad26f89076f408cecf4260bc41ecf58632fd3b5d6fe9425
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000c9

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                                                                                                                                                                                                                                                • Size 204KB
                                                                                                                                                                                                                                                                • SHA256 0491f105738b7f9bae0de2de3fbf5ff4a362780d89591bfae9db5d8044459c8f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000ca

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
                                                                                                                                                                                                                                                                • Size 78KB
                                                                                                                                                                                                                                                                • SHA256 372140d055fe4434b65daf2fa2e6a903918f7ebd5c79b058e8272878b397b35f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000cb

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                • SHA256 4055c08923c81d63735c1691baa778c332bf680b8c4eb057d7b87e2c00c5578d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000cc

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                                                                                                                                                                                                                                                • Size 256KB
                                                                                                                                                                                                                                                                • SHA256 ef389287b32b215ab2e1831b8baed478f94246cafb0528c444a34008bd45096d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000cd

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                                                                                                                                                                                                                • Size 256KB
                                                                                                                                                                                                                                                                • SHA256 542ac655cca6f4835f0752937b8144fa3620dfec1b42b5277470217010a621c0
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                                                                                                                                                                                                                                                • Size 56KB
                                                                                                                                                                                                                                                                • SHA256 631ac6b47af403356db81376220724c58604074ae4e6312f775dc5783ab6ce61
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                • SHA256 2eed3abc7301a2c73b9ee873c6cd2fa414c0ad158667780d148f77bedfd723b6
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d2

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
                                                                                                                                                                                                                                                                • Size 60KB
                                                                                                                                                                                                                                                                • SHA256 09942f492f93e5748a18748a9d5703c1d9fb2371e88bc2a01fa7779650dc40dc
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d3

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                                                                                                                                                                                                                                                • Size 256KB
                                                                                                                                                                                                                                                                • SHA256 adb7287fc26c0521616bb69adf7889e9318a0c1e00398825c51c01d2a06f4c05
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d4

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
                                                                                                                                                                                                                                                                • Size 72KB
                                                                                                                                                                                                                                                                • SHA256 7f81a55e80b400a677e433fdafde901f01196aa6e8fa4037262c5c4174e75576
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d5

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d5
                                                                                                                                                                                                                                                                • Size 45KB
                                                                                                                                                                                                                                                                • SHA256 28f0ca343f88c5b6ac5f582868fa010b951e79112ca93352a2b63ad82fb50b8b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d8

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                • SHA256 a1ff932c520015ccbce5ada0e6585cae669861883eb1cbfcc3bad4a9730fc69a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000d9

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                                                                                                                                                                                                                                                • Size 35KB
                                                                                                                                                                                                                                                                • SHA256 45dfbb83fd1bf66c6cdc6a9673482cdb853fe814737dcce5203f077c32aaba6e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000da

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                • SHA256 17bd64c4f43d604309e87d916f9233115180c0dc0cb5a94cdda36a2add279da6
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000dc

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                • SHA256 27b38334127d248f760ded14a3441b6ce3972eb110f73e50e1ae76dd16b73861
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000dd

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dd
                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                • SHA256 deee03b883e06fcbcfe81dcb5d8fd225bda7a80598f81d6584983a1cf1a35807
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000de

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000de
                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                • SHA256 e20a00a1515c40dce399de85108e117f334ad3a6cdcb01d865cd7d60d2edb963
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000df

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                • SHA256 c002c9475be7888eb33f5fc3d0e74201c85e3c4a5b0f1c5e2029d74d5be442af
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000e0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                • SHA256 2746180c534e283835ac1c58724a257367182525c969843a6c1f4231c148c866
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000e1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                • SHA256 f85284540a082499c264d055fc9b91a4295e03b29f7d1b86cae72cdbca6caa13
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000e2

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                • SHA256 aba198ed6c475aae5a6bd5ee990edadbb8808dd461e14dd6c1a7b2f7d8e6288d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000e3

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e3
                                                                                                                                                                                                                                                                • Size 32KB
                                                                                                                                                                                                                                                                • SHA256 62d715699a1d0402fd8ece8e553a6ebd4ee6fbdd46c61685d2cc7dda4b4d63bf
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000e4

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                • SHA256 ba9e386c2fe4e0b8914f7c6160aa63cf25277bc9ec98fd582d27e2c76b40e2d3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000e8

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
                                                                                                                                                                                                                                                                • Size 32KB
                                                                                                                                                                                                                                                                • SHA256 19104f228a2d57afc1b20ef0f180dd5407831cb8e1ab5958324d6e8ade506727
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000ea

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                • SHA256 4c4ae9cb9da9c629dc3c055ee87d8bb565db65cdfb0974038302014b3acee700
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000ee

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                • SHA256 afcb2fa45963a50208e111c22d9626cecc959f3c44b0e33a55021e3858c13e22
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000f4

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
                                                                                                                                                                                                                                                                • Size 44KB
                                                                                                                                                                                                                                                                • SHA256 8cbdf7af7262903af31521b595e016f55e105afac12d6fdd2bde6d10bafc94ad
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_0000f7

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f7
                                                                                                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                                                                                                • SHA256 3b8a42592b08f98963351744ad987ecc727c774e87db98e3af624297297c1546
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000100

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000100
                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                • SHA256 029315210052006dca4d31fc987c462252d48da96a9ff4f2a797a69753ba29a6
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000101

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101
                                                                                                                                                                                                                                                                • Size 66KB
                                                                                                                                                                                                                                                                • SHA256 77df21477abc909a61db33e0f54965cdb1588e475d46dee935168b4721f73152
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000102

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
                                                                                                                                                                                                                                                                • Size 68KB
                                                                                                                                                                                                                                                                • SHA256 47d91cd0bf170ab1972a0777e1051fe5ee2a840a1d9efbeb0097e338228a8888
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000103

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000103
                                                                                                                                                                                                                                                                • Size 60KB
                                                                                                                                                                                                                                                                • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000104

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000104
                                                                                                                                                                                                                                                                • Size 63KB
                                                                                                                                                                                                                                                                • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000105

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000105
                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000106

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000106
                                                                                                                                                                                                                                                                • Size 37KB
                                                                                                                                                                                                                                                                • SHA256 84186c94c202c6eaa8cdde14e8bcb82ae95f13413df2852b46bd013535425f4b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_00010a

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010a
                                                                                                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                                                                                                • SHA256 ccf6c276c1c99974afd4aad652e992d04558b2b5de68d49eeb0703671ad3552b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_00010b

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010b
                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                • SHA256 0b0b6b9a609ad590b762f5387b6fe738f088f6de44958a2c18e83c4c77b2c293
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000112

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000112
                                                                                                                                                                                                                                                                • Size 64KB
                                                                                                                                                                                                                                                                • SHA256 e256e9600a609119202c819ac3c82de8c545ab1a7e66058d650aa0b0f7168611
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000122

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000122
                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                • SHA256 3096c47012a7255879304054c9d8d260fd67a0f4b3fdffae385fda6d519856e6
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000124

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000124
                                                                                                                                                                                                                                                                • Size 373KB
                                                                                                                                                                                                                                                                • SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_000126

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000126
                                                                                                                                                                                                                                                                • Size 51KB
                                                                                                                                                                                                                                                                • SHA256 a2f1d22a77537709ba1ece5ca9dddc1434929d5e6db3251634f0508c134b9f41
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f_00018c

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00018c
                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                • SHA256 2a0b7c30f0977fb1625451633b6b398f1f2c69d01c655bba3918c961b66a0583
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                179e1a8a7d0a4f04_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\179e1a8a7d0a4f04_0
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 dda65abeeed462d778debf07f5b89d219b8acc9778b54a0d1183910ee27357b2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                4e661907c2f9f071_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e661907c2f9f071_0
                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                • SHA256 e994d111aa866390ba669a5834c2f1fd134bb5f2039969cf6a3733ce85d04509
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                c4170f3fec6523be_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c4170f3fec6523be_0
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 c199c6f49fe5094cc68ccea2287cffd1220f439a6dffcc1220cf628e5781f041
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                fca405a13f16b525_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fca405a13f16b525_0
                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                • SHA256 343b7b4051302e7d122bc288a0405d2969c9430e1c0cb531f94096f2485b17aa
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                temp-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                • SHA256 02c27355cc48321f952f6a67726f72d80760a57a92245f8c1bb425a22b4b6bdc
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                • SHA256 605bc73aa2efd9e4206405f0364bebbb6fce3a4fa0cf6241b21313b94f9c73c9
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                • SHA256 cdad1b375c503978e4d6a27f1d51917f0cb7f038eb8ad708875d1eae8543e102
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                • SHA256 c8fd3dad9267e4b78cadd5be9ae9990af5cda14bd240d647295a86f06b5663d4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                • SHA256 a5e1f9dddae99640553385eb65182c5e334885c701d84e4b17608368d675c939
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                • SHA256 f4470c997f5157467fe65c50633a128cd37b8bb6c8e1dda44d94fb86d6889c36
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index~RFe596f3b.TMP

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596f3b.TMP
                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                • SHA256 2c6a34ea2831c6d149d18583e1accd92fea7066ab00bc7746875ad7ea1c14725
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                SiteList-Enterprise.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                Edge Profile.ico

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                • Size 70KB
                                                                                                                                                                                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
                                                                                                                                                                                                                                                                • Size 627B
                                                                                                                                                                                                                                                                • SHA256 409d4c47e940688527d730b996e8991e010988c7671565467ed69d640d0947f3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
                                                                                                                                                                                                                                                                • Size 322B
                                                                                                                                                                                                                                                                • SHA256 17c14cb47e5c011fb5822df6d58a06095f801391d7538b9b512810292edf0e5a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                dasherSettingSchema.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.108.1_0\dasherSettingSchema.json
                                                                                                                                                                                                                                                                • Size 854B
                                                                                                                                                                                                                                                                • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                Favicons

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                • SHA256 bce36274cf5317319d93933bf9b618907fed019ef41387c0c29c250215e76754
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                History

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
                                                                                                                                                                                                                                                                • Size 204KB
                                                                                                                                                                                                                                                                • SHA256 02482e37b0a5eec885a66faad03ef616a0f4d3c0f2fc48e4d33f5f1abe3b7407
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                • SHA256 d6fc13ab7da99bce9fec799ccab649a350fe5571957d30a243da10fe5765a233
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                LOG.old

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                                                                                                                                                • Size 345B
                                                                                                                                                                                                                                                                • SHA256 ed104528a74d30666f183fa86373f29c2f0def937c6af9906613c92012566aca
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.virustotal.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                • SHA256 a4ca4d4958bbd2f32521522cf5eac5179b04ded58e1d27edea3e878c55d66c45
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.virustotal.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                • Size 357B
                                                                                                                                                                                                                                                                • SHA256 1db5f11a0a1ce6738ecd764aea77caf11319b06ebf4c2fe9e8a8175b45b5962e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                MANIFEST-000001

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.virustotal.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                • Size 23B
                                                                                                                                                                                                                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
                                                                                                                                                                                                                                                                • Size 72KB
                                                                                                                                                                                                                                                                • SHA256 0d4e2ef2365c6dcfe316a22901798438ffe30e6f8f6f1dd006b24343f72d270d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                000004.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000004.log
                                                                                                                                                                                                                                                                • Size 106B
                                                                                                                                                                                                                                                                • SHA256 750a6861d9bb90023ecb226aad383d6c0758512599be3bf87d1f016f2412425f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
                                                                                                                                                                                                                                                                • Size 331B
                                                                                                                                                                                                                                                                • SHA256 a242d900729d463e96c287f5d6e2f7c72753ca62c500229ce585a667b9e6b349
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                Cookies

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                • SHA256 96e01aee4f4ca0734e5c88dd3286d5fd092119558d6fd8fc4fbb1477b4063650
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                                                                                                • SHA256 4f08a3b706d3ebe2263eac2f1860306359049a8b40e15505d8e7640b33f2bcb7
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                • SHA256 e9fa982e1803b08d0f497b1bafe48aa57b50035c5530e765d95f012198358f45
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                • SHA256 80f4983ecefc733f789810ecb51006f83153c4b79d7d3b94a63e9675ff7976bc
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                • SHA256 fa22279a08c00b86d91b8f6be6185aba9ab89b4d194a2524ddcc8009b829aa7b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 47KB
                                                                                                                                                                                                                                                                • SHA256 af4ed12604a1b0d2e17224697756a1fde2e9ff2b4f5b76a8a773c98c122020b1
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                • Size 111B
                                                                                                                                                                                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                Sdch Dictionaries

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 40B
                                                                                                                                                                                                                                                                • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                Sdch Dictionaries

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 211B
                                                                                                                                                                                                                                                                • SHA256 26f360edca71c6e213e22f4c8655747f6dbc811802d894f465c9e628f72c2188
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                Sdch Dictionaries

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 211B
                                                                                                                                                                                                                                                                • SHA256 1d067f01ae2d253a016b3cbd7a9502597dc403a4a5c28d13355059c98a8d676c
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                Sdch Dictionaries

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 211B
                                                                                                                                                                                                                                                                • SHA256 4825a370b39fccd3b2931927d947ea1dbaf947b069878552e909ec791a66bd19
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                Sdch Dictionaries

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                • Size 211B
                                                                                                                                                                                                                                                                • SHA256 675aaac9905b0ef78d8fc40905dae835a2349446825752d5bed6da2c96a6b870
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                TransportSecurity

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                • SHA256 f4d5345f4f6e0ea93043c9b9d0951568de325736e361f4b6e1b98c058d8367b2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                TransportSecurity

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                • SHA256 24d8ad00a97b63c8e59454cf1919a4c697ac9d562129dcee8751d36e46c06623
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                                                                                                • SHA256 d08d387c8adf4801f8e847035fa365a8e809324bfd0b3c61a845072bff3524a6
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 ac800b9b2ee31fbb920ec0f0d5f14e08bef8050d87600145493869b62b19b53d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                • SHA256 ef839935eafad53803754d489121dc906e4feddb5eae262f6ba2cffef340d118
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                • SHA256 61979e9bd27473d9641fe35e11ce7038791b701a4925f17032e2d7e675f651d5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 25KB
                                                                                                                                                                                                                                                                • SHA256 3c25bf0c2bdef24ed5193830f70ee25fc8ebe57c8f9251e770d899c45deb04d7
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                • SHA256 62331ba01bbb726f8e35d008cee134e1fbc27c3708138dfcaae289c73cf3c252
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                • SHA256 8b26f4fabfe2b1035a090b65f6d152eb6e99b2e23d23845d475fea66a3d0d0a2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                                                                                                • SHA256 8eba26cf8d247b5a7c8a4b8986ae5e2c23b971c16fdb921f10e084ed5bbb15b3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                • SHA256 7166dae0a8d3e27be543d69fa35580b9d593aa3d46b9011fe775543dd8f7633d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 25KB
                                                                                                                                                                                                                                                                • SHA256 afeb44e38eae9f3025b2f9e1e46e9d5ba68bbdabe4071f6978d2613034e30e2e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                • SHA256 d3e097b787286753889711267cb47b6b83978907887486e8704fef1417e42336
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                • SHA256 04ffd80c71d894a71245766a67fa912a421602e2658c1aa553032e596316e5ce
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                • SHA256 b4d4b695e218f92fa8c890ffd3d5347e40de11fa9e51607f0502a6ea98f25819
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                • SHA256 bb5cccbc1fab20ad374b7e05a754fe2cded3c7ead9b1fcc18f78f58134e9cc1d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 e852ad704610ac2eaac3dee0520ad79261aaad40d6c77fdc71871edf76d4ae35
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                • SHA256 ea8dfdd81d0e392f12f7d6375dda51f823ce6366acc09bf3ec6ce399dcb323e4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                • SHA256 831f286b8a63eb541fbd1f8f7c9b9c38ff53a57f846bd5c846b7ee470a82a086
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Secure Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                • SHA256 ae7e2580276f83a455a0a8fc309533ea3014e044d9298944a71a9cdd7a12c3c4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Secure Preferences

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                • Size 33KB
                                                                                                                                                                                                                                                                • SHA256 a972e3bfd75002e989b76d2115e4710bedb72e1bd24b07aec81e1ae8d943609f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\2d8be0da-b3f3-4f6f-ba35-030547bdaaac\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 600B
                                                                                                                                                                                                                                                                • SHA256 f249df41acaf3d68ca3219fbcba6dff1271d01370c3fbcd5341cc322a5b3f864
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index~RFe5ccf8c.TMP

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\2d8be0da-b3f3-4f6f-ba35-030547bdaaac\index-dir\the-real-index~RFe5ccf8c.TMP
                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                • SHA256 92061ad4f38e09c6a3d51a8b9989f02edee1c90fbbf7b5c0e44aca3734c95608
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                index.txt

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\index.txt
                                                                                                                                                                                                                                                                • Size 147B
                                                                                                                                                                                                                                                                • SHA256 b7be08fb77a89e9864d31c7bcfac39fab7e3add0ad786d2f8861648ce8b68745
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                index.txt~RFe5ccfcb.TMP

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\198b1dbef7ece2ad03770a72810f2b485859f245\index.txt~RFe5ccfcb.TMP
                                                                                                                                                                                                                                                                • Size 152B
                                                                                                                                                                                                                                                                • SHA256 df1cfd63b3a7e1fc39b3ac75f9844d49b8cf8bb91702ae9bbc3b19405ec9ebe4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                4f2277ea2139c475_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8210ceeb-345c-4f71-8a03-ccbc41551587\4f2277ea2139c475_0
                                                                                                                                                                                                                                                                • Size 63KB
                                                                                                                                                                                                                                                                • SHA256 7e8f0a26073ceda016645aeeadd19dd4162e3e3f7b0f14647523bd3ac52cb93d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8210ceeb-345c-4f71-8a03-ccbc41551587\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 5148cf4b44bdd6c9fb635900aec12bec843a1b9b77f13f3396981e53e77bcb8b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8210ceeb-345c-4f71-8a03-ccbc41551587\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 a4dc4e55de2a28234edead36600dbf78e81008a8c137e1629b421d547d4fe806
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8210ceeb-345c-4f71-8a03-ccbc41551587\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 d655c6a0b40e7da2344693ed8db9a9b8d6fd9c70c9c6ddae84eb4758c4110a93
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                623cd082b6202da0_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b72c29a0-bd55-435d-8f59-04769e50d179\623cd082b6202da0_0
                                                                                                                                                                                                                                                                • Size 62KB
                                                                                                                                                                                                                                                                • SHA256 e1ca7d7a26614ae42c96fcb711aa9c379abd99bd277df69d7fd5d2adb5dab7f2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b72c29a0-bd55-435d-8f59-04769e50d179\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 3c413dc9f628e30477504df1366e8d342b4c644ee3211f7bfebcc9a56c67b912
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b72c29a0-bd55-435d-8f59-04769e50d179\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 10fee5ed86b780c5890c2292049dcb33cc953e449717f33717644c051c0bcbec
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b72c29a0-bd55-435d-8f59-04769e50d179\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 a1e5a6118d39b68eb47be684f123c680634dac7dfb51f2769bee104bd53f4adf
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b72c29a0-bd55-435d-8f59-04769e50d179\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 96b09cf26c2b59db12c5ada5dd73ebd4f286230e8f56b860122ebb44fe477a44
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b72c29a0-bd55-435d-8f59-04769e50d179\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 126f80b6404e437b4b5e44b5532ad2386f1b13ebb37f14eb625b079a3d02830b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                1a51f1be0a8fdf52_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\1a51f1be0a8fdf52_0
                                                                                                                                                                                                                                                                • Size 65KB
                                                                                                                                                                                                                                                                • SHA256 97587ca2ba72bde8041326956bbc46000575b0dfb16233e155cbfc2e6e7228a1
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                1a51f1be0a8fdf52_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\1a51f1be0a8fdf52_1
                                                                                                                                                                                                                                                                • Size 128KB
                                                                                                                                                                                                                                                                • SHA256 19e825c28a038d4c9ccd4ee1b4658d2f27411be942e0137a358606debda8a93e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                2a129ff85c6b1559_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\2a129ff85c6b1559_0
                                                                                                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                                                                                                • SHA256 557d15f93899a554f3e07c676ce410fef97dba020962fe27b8d0c6c4475a75ff
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                2a129ff85c6b1559_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\2a129ff85c6b1559_1
                                                                                                                                                                                                                                                                • Size 79KB
                                                                                                                                                                                                                                                                • SHA256 75fda5c63a5e7b750bc64995a3ad16d6cd4bef8c1cf4f64d7c72aabb3788e47c
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                62344765313d86e6_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\62344765313d86e6_0
                                                                                                                                                                                                                                                                • Size 118KB
                                                                                                                                                                                                                                                                • SHA256 d19c1a5f65a29b69a85c62218fbe13eb083584a3cdda6f5aebbbf637746045c1
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                62344765313d86e6_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\62344765313d86e6_1
                                                                                                                                                                                                                                                                • Size 312KB
                                                                                                                                                                                                                                                                • SHA256 a453031f88b1f202155025a1d9e8f7c6d0a0cad99afa5253b77d9800309a3e26
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                85f73dd0b35f337f_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\85f73dd0b35f337f_0
                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                • SHA256 841de5ff11882743bd7b9893885d440c0111f674cf7c34b6e1700ef195d7db02
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                85f73dd0b35f337f_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\85f73dd0b35f337f_1
                                                                                                                                                                                                                                                                • Size 54KB
                                                                                                                                                                                                                                                                • SHA256 e779e707a7220b191bd2970acdd37cff4bb426f0148cd6e866819254d7307bdd
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                888c3f0851605c09_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\888c3f0851605c09_0
                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                • SHA256 4eb0a2bed18528761f33998292fc9a7d3285b44ac06b0ecdb05b39d06783d951
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                888c3f0851605c09_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\888c3f0851605c09_1
                                                                                                                                                                                                                                                                • Size 72KB
                                                                                                                                                                                                                                                                • SHA256 4d8664a48b2bf24b83a3fca7a973230106704f34e31ca17ed4b9d69cda3e327f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                ae82ad10b0e6c8d1_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\ae82ad10b0e6c8d1_0
                                                                                                                                                                                                                                                                • Size 320KB
                                                                                                                                                                                                                                                                • SHA256 003b14def8040736725607cf269a8167d33543b3821fb390edbb9ec2635638ed
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                ae82ad10b0e6c8d1_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\ae82ad10b0e6c8d1_1
                                                                                                                                                                                                                                                                • Size 614KB
                                                                                                                                                                                                                                                                • SHA256 f2142f3aa88ef45165e3a3b930275936b47a209e898ee83fc528f308ed715b83
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                b5c368617f9ba6e6_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\b5c368617f9ba6e6_0
                                                                                                                                                                                                                                                                • Size 1.8MB
                                                                                                                                                                                                                                                                • SHA256 0ca67d486fb542f0584809bf757059399503c173f3a9e71747a1f1122dd6b3ce
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                b5c368617f9ba6e6_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\b5c368617f9ba6e6_1
                                                                                                                                                                                                                                                                • Size 4.1MB
                                                                                                                                                                                                                                                                • SHA256 9f05a22bca5ac66e0f2a143fad81214e4c7aaad7c64d6a76bfd924202bfbeab7
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                c65e36407de7ae26_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\c65e36407de7ae26_0
                                                                                                                                                                                                                                                                • Size 408KB
                                                                                                                                                                                                                                                                • SHA256 486ff22669d6df8b9eaa311eb93d556a460ddc5be1cabfa2192e2f5752f20717
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                c65e36407de7ae26_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\c65e36407de7ae26_1
                                                                                                                                                                                                                                                                • Size 998KB
                                                                                                                                                                                                                                                                • SHA256 9f9bb84f19dee95d96956b7749d1ed34ec63c207510b5abb552d45d802af6cfd
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 f72b188ff6a660da2e022265f5f5efa1d94dc2667238b0e9ff4111938b1cf97f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 8ff6022383f27ddc15b8137440f7ba81ab2ad378514a5b9666d04c15323d9135
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index~RFe5bfba2.TMP

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5bfba2.TMP
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 b9fb7ab9409e6a3a2f884e71225a20c273cb6085e5763adade7a34988f3aa499
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fc6fc443-86a2-478a-8d70-c0a9b0b01bb4\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 67ffb3b2e65156e3b3aad7a45d233fdfe3d3256791c5abc8b16356ce0fab9f11
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fc6fc443-86a2-478a-8d70-c0a9b0b01bb4\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 d8cf9ede0acf6f374316a42055376cbab0f6be62edd225456ee0e48f3376f1dc
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fc6fc443-86a2-478a-8d70-c0a9b0b01bb4\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                • SHA256 1e65c185b6eaf0ae0cee5fa00866947e7757352970f1943da5b0047ac5948933
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index~RFe5d2a4f.TMP

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fc6fc443-86a2-478a-8d70-c0a9b0b01bb4\index-dir\the-real-index~RFe5d2a4f.TMP
                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                • SHA256 f3c60747ac3d3292dc99fdf0ad2b1c61ed2fa7a73193a681ddef1d807814da47
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                index.txt

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 371B
                                                                                                                                                                                                                                                                • SHA256 cc035b7e4b472dff220fd58c80fd654bdcac17127de9991d05a8ed28f3294aff
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                index.txt

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 481B
                                                                                                                                                                                                                                                                • SHA256 2c1393efab64abb480c73618cb71aa1e5afd290da6acf25dd3177f2c9dcb0b19
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                index.txt

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 476B
                                                                                                                                                                                                                                                                • SHA256 5ba87d3f13bb9071574670730e19080cf87a670325f072f43a4f8113166446fc
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                index.txt

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 476B
                                                                                                                                                                                                                                                                • SHA256 b133ac33316e51094205dd7b278106a2b53c3cee6b6aa8224439a359019517f4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                index.txt

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                • Size 476B
                                                                                                                                                                                                                                                                • SHA256 b72fd452b03400639e290786bda434d4ce957eba637b56de9376f9cc974094a2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
                                                                                                                                                                                                                                                                • Size 335B
                                                                                                                                                                                                                                                                • SHA256 16515f5dbbdefeedeac87ff74d688f984eef599060a7555b33411bdf6d0249b3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                ba23d8ecda68de77_0

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                                                                                                                                                                                                                • Size 127KB
                                                                                                                                                                                                                                                                • SHA256 18ecb24d03b2804697768312a84024f6218802b31e041cb959d7e0ba9c681073
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                ba23d8ecda68de77_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
                                                                                                                                                                                                                                                                • Size 222KB
                                                                                                                                                                                                                                                                • SHA256 d8b7ce776f13c21fa9e0aec7ad774dc54ff1c6f4bcf27359863dcc3ae8337e4a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                • SHA256 7136d03631ca573c29bad3c5c54e86a84098a00c8e8c7191e598211a90c89147
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                the-real-index~RFe5c6e13.TMP

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c6e13.TMP
                                                                                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                                                                                • SHA256 6dfc66bd791470c08445e4c4217e9f00999d4bd1a910eb924cb7a86c14b32fcc
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                • SHA256 90e709b0bd81c2e9caa1a4e02c8f3812f4ab51e77617ccacefbf779fd40f701a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
                                                                                                                                                                                                                                                                • Size 319B
                                                                                                                                                                                                                                                                • SHA256 0f14432e417f97c729883f9fa56fda2eba21ed4542063b4be63c0cc3ac1ba9b2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                Tabs_13429890780986062

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13429890780986062
                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                • SHA256 5e03db1476b14e79668a1d0b787e3758c93e078a9a7b9cf323106ac30dcc2b3e
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
                                                                                                                                                                                                                                                                • Size 112B
                                                                                                                                                                                                                                                                • SHA256 2dc7867c4df6780673b4deea6f1d3f4c0d709d50725a830afbc69d2030596722
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
                                                                                                                                                                                                                                                                • Size 350B
                                                                                                                                                                                                                                                                • SHA256 e76a9ca5f1ba803ab7d1720f1789266607787cf4c05711f876b407dcf973497f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
                                                                                                                                                                                                                                                                • Size 175B
                                                                                                                                                                                                                                                                • SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
                                                                                                                                                                                                                                                                • Size 326B
                                                                                                                                                                                                                                                                • SHA256 2c9ab5c495a2f4db7d8dcf3457efc420e48a7d9d7177f4d9c3ec788a2c6c3d1f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                sync_diagnostic.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                • SHA256 05cfd5eacff622171734bc31fb1037d8802c92c9f56801d89934a707ecef7fd1
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Web Data

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
                                                                                                                                                                                                                                                                • Size 224KB
                                                                                                                                                                                                                                                                • SHA256 0ca3831d170b44c21e1fd821058ad9e83c860df2fe4e40c515cbc92655df2aa1
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                MANIFEST-000001

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\FileSystem\t\Paths\MANIFEST-000001
                                                                                                                                                                                                                                                                • Size 41B
                                                                                                                                                                                                                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                c0b890a9-cc8d-4cb4-b650-183e9e07bfe9.tmp

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0b890a9-cc8d-4cb4-b650-183e9e07bfe9.tmp
                                                                                                                                                                                                                                                                • Size 414B
                                                                                                                                                                                                                                                                • SHA256 444e40e8da3c63cdc733b457817758c781435d9fef7af342b930259580023d3b
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                d5bc0e35-a66c-4266-9cd0-56d47cee66ab.tmp

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d5bc0e35-a66c-4266-9cd0-56d47cee66ab.tmp
                                                                                                                                                                                                                                                                • Size 1B
                                                                                                                                                                                                                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                load_statistics.db-wal

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal
                                                                                                                                                                                                                                                                • Size 3.9MB
                                                                                                                                                                                                                                                                • SHA256 18f72cd20510270b06c69f02b812c6e2ce06198dcd227e0c44321f9a9dda91d5
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                • SHA256 74b1879b0d95702026db136fcf63eaf8ff91f65bf79449ba81d4b19c3c5c7476
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
                                                                                                                                                                                                                                                                • Size 322B
                                                                                                                                                                                                                                                                • SHA256 cb262ee5be0ec9e08d93847b72db4a8800265fac4fc7f3b756f123f087bdc243
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                000003.log

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                • SHA256 de61054989abb7b4d4da95513eb35a4b66b7b67cb591f829c02db9a2645edc24
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                LOG

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
                                                                                                                                                                                                                                                                • Size 337B
                                                                                                                                                                                                                                                                • SHA256 8c9a3ac7df877080e4997b6eb5822ee429dd529ab0c1947744624cd52fecfe82
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                b68e71ea-21e6-49c0-af42-ef6683c5f48a.tmp

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b68e71ea-21e6-49c0-af42-ef6683c5f48a.tmp
                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                office_endpoints_list.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Last Version

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
                                                                                                                                                                                                                                                                • Size 14B
                                                                                                                                                                                                                                                                • SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                • SHA256 b1fe00e7fc4a0140abac35043bf156fc80258c0db0e67875067a0f551e0561b3
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                • SHA256 797beb41d7a933f413e83645091fc85d333e713e62222b517777a6aebe531648
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 37KB
                                                                                                                                                                                                                                                                • SHA256 7dc501954b46926f05cc2b426d22744209c5f2a9d3e71a714cfc14b72ff04403
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                • SHA256 2c65e416ca5545f0dbfced7b2a1c20598fb80bdeac5c75ecda73b58dda701a01
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                • SHA256 d0e2e370d22d99fcc658d332f69edbaa63d71046f9deac1ababb6ef0a2488b0a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                • SHA256 0aa11be08d1ebb21d53348f69e2f4faa15fb4e7a36d76db86a7692d9acf4a8b2
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                • SHA256 fc6c3d416af330241a6cd0015f19489fa43c92f1e563370683196b8ebffeae64
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                • SHA256 e0a144b6415e81f5bb5b4482be84deecfad202062fa92f9a240707461e0c7a6a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 f8fe7b4d1d6fc24df4d89cfd9fff03c73e76548f9170c3f7d9a2474ccbd96573
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                                                                                                • SHA256 dae054156d8595d201c85e4b4a582b26e35127ce2ad3e61d72e17136e0ab947c
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                                                                                                • SHA256 14a46f5e93fcbb57083c5cbb2541526486f464c23a09805e0e5de151bc57eddb
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 69dabdceaaae04fc6562e2b8be674b9c6ff07e15331fcadb70aa70257d83a205
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 7dad228d98db0954ccb5a82589fa7235ce9a6a7210dc00074505950483c8dd83
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 88918d3e9d9ec419fddc40e7c650a126efc58d7de05eeae86b8ff0d28fd9ce75
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 0ec5c3d2addeef2d85ccefbd56eb784c7470010e61142ad6c10483817b18e16f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 73cd627342f6c4a39dd3be4ac274e93863ef2b1554da37eaa949f32725299192
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 901312aa247fec0dc21c9f4b91009e1f9cdee0173cfd6dbc2b6c919bb9282c18
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 a1034ac095edb4455b657de82898abc87044564b6f138f59052cf17e94657fa9
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 efb0611953c20a8ee237930a8acd309129835c17993d1dffefc8f006c0ae218f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 ea9f02e2c8167e6f19d6b20ccf590698f259f15ab75ac63801ac3f5871cf66e4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 0ff5b62e01fb361be77dcf3810634674a147f14614e6334fd87a7f6d4159fe8a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                RevisitationBloomfilter~RFe5c261d.TMP

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5c261d.TMP
                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                • SHA256 00d28156a8296328592d8238a4dc10d1697ff9c7392c8bd60dac6a51dd6d8eed
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                data_1

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                                                                                                                                                                                                                • Size 264KB
                                                                                                                                                                                                                                                                • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                                                                                                keys.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                Variations

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
                                                                                                                                                                                                                                                                • Size 86B
                                                                                                                                                                                                                                                                • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                nav_config.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                ab82f420-8070-45a5-87e1-fd8e22da0903.tmp

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ab82f420-8070-45a5-87e1-fd8e22da0903.tmp
                                                                                                                                                                                                                                                                • Size 37KB
                                                                                                                                                                                                                                                                • SHA256 66638edc01345ff05618464dc109b6d05dcf13cdf27f6d4c43e2b7b2129cc74a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 612B
                                                                                                                                                                                                                                                                • SHA256 aeafbf741a31779df28e66924d9483ca813c7448270edb60610dbf755e2c9459
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 252B
                                                                                                                                                                                                                                                                • SHA256 b39f9f1d1be5d89b97c4aa7aeff11ece6fae65ed9b99f7505123d6a9cbc7f65f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 372B
                                                                                                                                                                                                                                                                • SHA256 b291074f2e3e8198f737de300b1e02abb1a4a9404765629b084a6999f5dd785a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 492B
                                                                                                                                                                                                                                                                • SHA256 499dc40289ac5285a0ea98e85bfd66388b81b4897463eb4199064e37689a7ae4
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 852B
                                                                                                                                                                                                                                                                • SHA256 ad5d3035a1eaad7a8307261b69bd7a46d0aaa2df9844c8dabf508d149eec43f7
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 972B
                                                                                                                                                                                                                                                                • SHA256 096f39b72529dc3a9798e1f62e76fc02239fa792ca01a7e68010126ab5549887
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 732B
                                                                                                                                                                                                                                                                • SHA256 4e7f9d2cc311a6a5534efd94b8f30b2eef267551ab66b08eb9e069be86117744
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                                                                                                                                                • Size 13B
                                                                                                                                                                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                • SHA256 b6f6359acb235cf47a2b8c2d9d7e263b4185b9efa7120d8e41e456eeeb02cd75
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                4cf4fd51-cf25-4dad-bfb6-1a5759228cf0.tmp

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1684_1072639957\4cf4fd51-cf25-4dad-bfb6-1a5759228cf0.tmp
                                                                                                                                                                                                                                                                • Size 153KB
                                                                                                                                                                                                                                                                • SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                content_new.js

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5480_1700801002\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                f64ac913-7524-4e24-ac3b-fc599faf8bd3.tmp

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5480_1700801002\f64ac913-7524-4e24-ac3b-fc599faf8bd3.tmp
                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                default.dic

                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                memory/2060-10-0x00007FFB3CC90000-0x00007FFB3CE85000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-0-0x00007FFAFCD10000-0x00007FFAFCD20000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-11-0x00007FFAFA510000-0x00007FFAFA520000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-9-0x00007FFB3CC90000-0x00007FFB3CE85000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-43-0x00007FFB3CC90000-0x00007FFB3CE85000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-8-0x00007FFB3CC90000-0x00007FFB3CE85000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-5-0x00007FFB3CC90000-0x00007FFB3CE85000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-12-0x00007FFAFA510000-0x00007FFAFA520000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-7-0x00007FFB3CC90000-0x00007FFB3CE85000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-6-0x00007FFAFCD10000-0x00007FFAFCD20000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-1-0x00007FFAFCD10000-0x00007FFAFCD20000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-2-0x00007FFAFCD10000-0x00007FFAFCD20000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-3-0x00007FFAFCD10000-0x00007FFAFCD20000-memory.dmp

                                                                                                                                                                                                                                                                memory/2060-4-0x00007FFB3CD2D000-0x00007FFB3CD2E000-memory.dmp