Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    896s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    12/08/2026, 12:17

General

  • Target
    http://google.com
  • Sample260812-pgalystwhz
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 53 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
    1⤵
    • Checks SCSI registry key(s)
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3828
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffe5ca9c188,0x7ffe5ca9c194,0x7ffe5ca9c1a0
      2⤵
        PID:460
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,5447718952670085972,11342447186039566872,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3700
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2352,i,8051956605475280595,16041581974783652391,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
        2⤵
          PID:3356
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,5986461588478827909,5950830089836317787,262144 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
          2⤵
            PID:5084
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,9410831119878632487,12042910857571874364,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
            2⤵
              PID:2168
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,7374670327255703587,3794413630898872542,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
              2⤵
                PID:3112
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,8672323697939923071,7884625515657799040,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
                2⤵
                  PID:560
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,18050410164217542992,14742587049866120261,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
                  2⤵
                    PID:872
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4736,i,7339231784092745151,17114623670606595116,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:1
                    2⤵
                      PID:2444
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,5098181882236415049,13435270813616163539,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
                      2⤵
                        PID:4504
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,10058187263069782501,2102808045591439145,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
                        2⤵
                          PID:556
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,16520822127025279904,12830672774583528737,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
                          2⤵
                            PID:2464
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,16520822127025279904,12830672774583528737,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
                            2⤵
                              PID:3124
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,484162362563393398,12622077282558379098,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
                              2⤵
                                PID:2116
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4232,i,14652412280475167126,18099940476409002807,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
                                2⤵
                                  PID:3308
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6008,i,12770026872359221663,4845855186505525762,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
                                  2⤵
                                    PID:4548
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,2563327536233245860,10884292079166993114,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
                                    2⤵
                                      PID:1236
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,15848950247057744548,14806468603573109069,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
                                      2⤵
                                        PID:2412
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,16266601641654003248,6837407317555248391,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
                                        2⤵
                                          PID:4240
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3456,i,1133516787918648530,4928303913651781447,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
                                          2⤵
                                            PID:4992
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5888,i,10882950795510998999,15456705780567222978,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
                                            2⤵
                                              PID:1144
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6776,i,17651811796847320252,11578382852087660,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
                                              2⤵
                                                PID:4744
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3440,i,5648798747980163809,7867103456859893028,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
                                                2⤵
                                                  PID:4980
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6500,i,7837404464473051135,17557204939192025182,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:1
                                                  2⤵
                                                    PID:1512
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6820,i,10383807089290036283,5173367490359996159,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
                                                    2⤵
                                                      PID:4632
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6456,i,2963159279517401420,18148532361849417178,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
                                                      2⤵
                                                        PID:2128
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6952,i,18050355900471176372,16219291126781430458,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
                                                        2⤵
                                                          PID:368
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7008,i,175852312263627948,543151255972144335,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
                                                          2⤵
                                                            PID:772
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7284,i,9391686762773315123,13057187259283931876,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7364 /prefetch:1
                                                            2⤵
                                                              PID:3148
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7032,i,1719752525736120662,11794465497597020042,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
                                                              2⤵
                                                                PID:4128
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7524,i,9703957163283914095,6035313955021339303,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7540 /prefetch:1
                                                                2⤵
                                                                  PID:2624
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8220,i,3851705910482452807,17138124778732906241,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:1
                                                                  2⤵
                                                                    PID:4560
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7872,i,3862799927911750873,3979445416229391739,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=8164 /prefetch:1
                                                                    2⤵
                                                                      PID:3624
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7404,i,15202805215460829984,411645792944859190,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:1
                                                                      2⤵
                                                                        PID:5164
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8212,i,13728564800346347260,3808756330545976073,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=8236 /prefetch:1
                                                                        2⤵
                                                                          PID:5440
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7972,i,3981090479217863891,16002840117109363300,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:1
                                                                          2⤵
                                                                            PID:5576
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8308,i,11435184000016620195,11804228336012194623,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=8344 /prefetch:8
                                                                            2⤵
                                                                              PID:5764
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8340,i,17094192470710664403,13318501866869571656,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7392 /prefetch:1
                                                                              2⤵
                                                                                PID:6004
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8120,i,16443090176147188153,17759670096770745311,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=8520 /prefetch:1
                                                                                2⤵
                                                                                  PID:6140
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8200,i,9568216520616307173,2595067165382288537,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=8232 /prefetch:8
                                                                                  2⤵
                                                                                    PID:5408
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5220,i,645611684167030123,7471925195283034874,262144 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
                                                                                    2⤵
                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                    PID:5308
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8932,i,16669095524754472236,7471979245265578199,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:1
                                                                                    2⤵
                                                                                      PID:4656
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7972,i,13825876775998532573,15396261157229775373,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5984
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7024,i,18288188331337568171,14727157577577494996,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7236 /prefetch:1
                                                                                        2⤵
                                                                                          PID:2684
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7064,i,6196098085993267315,6238486664706475557,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=9120 /prefetch:1
                                                                                          2⤵
                                                                                            PID:6100
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9008,i,13286254529037886911,18285513864321652978,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
                                                                                            2⤵
                                                                                              PID:6072
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,17006613077909503285,15029934704942845735,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:8
                                                                                              2⤵
                                                                                                PID:6052
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7364,i,1287981458547939330,5893701278668430021,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
                                                                                                2⤵
                                                                                                  PID:4196
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=6220,i,9760776697980483003,3462160205908438299,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:1768
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=6800,i,11190556907446167813,14257013693653082003,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:4504
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8968,i,10790202878896347610,11714434984444595480,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5684
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9288,i,9251656766118260121,13170964914803979581,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=9320 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:5360
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8964,i,13326281586056142335,16168937537608360864,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=9472 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5524
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9512,i,15831586784470813428,6078260367629647112,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=9528 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5952
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9780,i,7787169591768665064,8536002148596663820,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=9784 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:756
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9960,i,1997546880485865286,16859758345417144859,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=9956 /prefetch:8
                                                                                                                2⤵
                                                                                                                  PID:5160
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10104,i,16927508101192555898,4465805882474080317,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=10076 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:3740
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9928,i,15645186224701718311,17183348116550321402,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=10024 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:4120
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10252,i,11480242420148665522,15810582744645638252,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=9960 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:4840
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10456,i,6011671253183343371,14697007660554832540,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=10448 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:4572
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10608,i,6693320913648604541,12048671012731628143,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=10708 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:3156
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10584,i,15539518792853579880,4871343709121587670,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:5936
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10936,i,15095894448782200775,8311997289730676992,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=10972 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:1064
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,14572758890509197981,4377270047378042474,524288 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=11148 /prefetch:8
                                                                                                                                2⤵
                                                                                                                                  PID:1300
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10888,i,11591290649154615342,14664477450594572374,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=10876 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:4568
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=11288,i,12088504227011800191,7511071902374092351,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=11276 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:4124
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11448,i,12990000063600946923,4510936983692060004,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=11452 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:5596
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11592,i,9966496391825522932,13430110736075295623,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=11096 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:4944
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11316,i,13820528083303483746,7654690604971684957,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=11356 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:3812
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11300,i,9546302892032623732,13117728921156423679,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=11848 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:5552
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12080,i,8641552306123502726,4003524585877948308,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:4472
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=11588,i,12822784570830122067,14224961054725069577,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:4948
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=11228,i,9070732825191322894,10265384200345700835,2097152 --field-trial-handle=2336,i,1614976504388652121,3576990580395347723,262144 --variations-seed-version --mojo-platform-channel-handle=11200 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:3416
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                  1⤵
                                                                                                                                                    PID:3644

                                                                                                                                                  Network

                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                        Replay Monitor

                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                        Downloads

                                                                                                                                                        blocklist

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                        • Size 105KB
                                                                                                                                                        • SHA256 32bf1b617bd8d18265f0d11cf99eec090aa2694dbb53c3da5caf49d2f1e33cb2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        settings.dat

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                        • Size 280B
                                                                                                                                                        • SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        settings.dat

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                        • Size 280B
                                                                                                                                                        • SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        8b0c9502-c0b3-4206-97a2-9aed7f39b285.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b0c9502-c0b3-4206-97a2-9aed7f39b285.tmp
                                                                                                                                                        • Size 32KB
                                                                                                                                                        • SHA256 720eb63e4c6bd59b2b6b68a127429b12455fa7020dea77924842795c66ec57d4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        LOG.old

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 a922f8c146e3aeb76e0a1d083454e312015488356be4e0aa7445ff53bc4c969d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        LOG.old

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 904e42aee19d780ac0e20311fefd732ed723736701a83c7641f50def01c96a14
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        BookmarkMergedSurfaceOrdering

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                        • Size 6B
                                                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        f_00009c

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                                                                                                        • Size 68KB
                                                                                                                                                        • SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00009d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                                                                                                        • Size 358KB
                                                                                                                                                        • SHA256 d52ead7703a7d8af9d1886b2b65e568ec5832c8d3399fb4212738742339c5987
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00009e

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                                                                                        • Size 65KB
                                                                                                                                                        • SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00009f

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000a0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                                                                                                        • Size 38KB
                                                                                                                                                        • SHA256 013033da212e8f6fedcd5676965554783279c96b4a4edc3d4d47b26ee2afe175
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000d4

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
                                                                                                                                                        • Size 628KB
                                                                                                                                                        • SHA256 66b4ba3544dc4f38f22741f38a1af86639f257a11e850e47a7a711041ae76c03
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000d7

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
                                                                                                                                                        • Size 1.2MB
                                                                                                                                                        • SHA256 a718364ee7a31ba7f2780f8cc9c5ad5d1fd0be50bca1d24cfffcff687ad75873
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000d8

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
                                                                                                                                                        • Size 1.4MB
                                                                                                                                                        • SHA256 85395c52ed5cfb58298ba6590b3ddc3b41b7ee926f2c36273a43916bbc57e3f1
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000d9

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                                                                                                                                        • Size 524KB
                                                                                                                                                        • SHA256 96e5f6e42ce0aefaf8ee54bbfd7209237201c1348d8f627fbd1e5d2b1e5946db
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000da

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 afa170ee1b1bdfcb3ce3901d9b15a3bf6e21367039d23f630575351edbec4a46
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000dc

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
                                                                                                                                                        • Size 58KB
                                                                                                                                                        • SHA256 3cdbcbf3fe37b8e4c2b6c3c992586d260b27a55e78946f3693721e2a8c8f0bd5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000dd

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dd
                                                                                                                                                        • Size 32KB
                                                                                                                                                        • SHA256 cb11ee5a06892d5ffea634705118e1cc48f276c6d18fa20605c9bf5b9c33dc32
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000de

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000de
                                                                                                                                                        • Size 74KB
                                                                                                                                                        • SHA256 2efe7f940b69ff9c5337d3bd5c9c1af88860a49136f642e62960298c3a521729
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000fa

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fa
                                                                                                                                                        • Size 278KB
                                                                                                                                                        • SHA256 d5db7b542a7316f44fe49bb5e7eef925d32d29c2bb47f57610b6743b937c8c26
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00011a

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011a
                                                                                                                                                        • Size 75KB
                                                                                                                                                        • SHA256 ecb1f3b454c37811287ce0acfa1e9676ba477a2783d152aded8c2d6b2a940a56
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000120

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000120
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 7f5f69f899de3059bb394ddee58b3c7874eb9a107943612de801f4b56c10920c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00013b

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013b
                                                                                                                                                        • Size 1.4MB
                                                                                                                                                        • SHA256 aa6ab687c8c75710fa83b9f5eab94cd65e4313ddb69840c1ebb01cd9af35e713
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00013c

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013c
                                                                                                                                                        • Size 752KB
                                                                                                                                                        • SHA256 dcb8a2f4f5cb9829fd96750f186715bff9dfd8e6f894a7abe7baef3c6fc10e3a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00013d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013d
                                                                                                                                                        • Size 169KB
                                                                                                                                                        • SHA256 c6d4b40a17e9f15c68419c2f6424ac36b77b2ff18f43c04682289740b276836a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000140

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000140
                                                                                                                                                        • Size 633KB
                                                                                                                                                        • SHA256 48494cf8bddcdb8912a9bd9ec6ed0762641858ee8a478bf0f7ce8d064f3bd02c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00016f

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016f
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 9f3c189c9943386e6871c8e5c60cff01c974b735c1aa946196cad6ba308feeff
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        1b4e5351f415bcc9_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1b4e5351f415bcc9_0
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 0d4f75fdf7967755d5c1d0cd5fc22d28bee29b24f7001ec526ee725c6afbbb06
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        1b4e5351f415bcc9_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1b4e5351f415bcc9_0
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 c9e2f378ed5d0490a0a3092ac500e850266d32c9f08ffa8c2a97466e00fb9ba6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        1fb49e5ec85cb1ba_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1fb49e5ec85cb1ba_0
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 7addd88c118abcce497b207be27194ca224937c76dcb55b8f418ca3d267b521f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        1fb49e5ec85cb1ba_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1fb49e5ec85cb1ba_0
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 8aa536b1490a14f55ec736205cc4058490b72dea14cc298e3fb7deac5f558fb6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        2301940deee3e182_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2301940deee3e182_0
                                                                                                                                                        • Size 121KB
                                                                                                                                                        • SHA256 f51f6aadb31e72eb6cd488f2efb8d8ee92fb823f3f1acb2f21484b61ab8a6c41
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        3f5f43efe2c9b3de_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f5f43efe2c9b3de_0
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 493d0c85b4451bdf4f5f6dd122986a48d285048bd3efac33c88f222c5bbaea94
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        3f5f43efe2c9b3de_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f5f43efe2c9b3de_0
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 47be151f24cb554b85c8494b0bb0b756f9674ccdf6faacf9ea97ed266fe0119c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        435211dcca1e75db_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\435211dcca1e75db_0
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 32f8a2e6eb2bed4180df89c601d1f8ec22fd44a247c74a8c5b8b6191db14c471
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        435211dcca1e75db_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\435211dcca1e75db_0
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 b7d47262dac75cf618b42846202455ea4aad01b05b1aa2194973f7f754768ee7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        448894101195e654_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\448894101195e654_0
                                                                                                                                                        • Size 278B
                                                                                                                                                        • SHA256 cf74013faf09e08252da80d432da756ee276e6b33581bb410e7065158f516472
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        448894101195e654_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\448894101195e654_0
                                                                                                                                                        • Size 278B
                                                                                                                                                        • SHA256 e5cfaec65b8240ce446ab48f12a3eb4d3570cf371fe257410b104daf10324866
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        58792b265ad103bd_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\58792b265ad103bd_0
                                                                                                                                                        • Size 130KB
                                                                                                                                                        • SHA256 043b991e46d627aae78c51e82fdf801035dd816f68f6ecd1c07fad958e0bd6eb
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        8132349f3912a9c6_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8132349f3912a9c6_0
                                                                                                                                                        • Size 901B
                                                                                                                                                        • SHA256 7d4d3aa261ad0c04a1de35ef2d9ff2cfe34023b42b265e1e612caf6ecb0f16eb
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        8132349f3912a9c6_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8132349f3912a9c6_0
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 8a9219e7ae987fc7d3944c4179b781e7249e3546441f74d4c2eb87657479f019
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        8a087a879e9dbef7_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8a087a879e9dbef7_0
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 ce29b2ed3c0284121d8b9677e9b6e99a71b362edac6b35387ce94f5fe344dc7b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        8a087a879e9dbef7_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8a087a879e9dbef7_0
                                                                                                                                                        • Size 5KB
                                                                                                                                                        • SHA256 5ed2a9c215a229e5eb18e09e55e054903077d07458e0747b38be9333c3938f47
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        a7cd58046e0bb714_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a7cd58046e0bb714_0
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 23658a0ff22863388bfc994cea5281d1e5728b38c89d93249b294e1676a06f70
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        a7cd58046e0bb714_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a7cd58046e0bb714_0
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 d1ff436b5f1c3b90e91824e609f2a9f35b78c529f24e1118a42e050d30919a0a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        aa8d254c1c8b3282_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa8d254c1c8b3282_0
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 2d92cdc715769c07df0369ca977bcd14dcb79b4f0e611a35f8282766bbb6a71b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        aa8d254c1c8b3282_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa8d254c1c8b3282_0
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 a972325438c3b68515e7c28625f8952e49794ec1edb9c7df6a6a0b50063124e8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        bbcdeb988e00375a_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bbcdeb988e00375a_0
                                                                                                                                                        • Size 100KB
                                                                                                                                                        • SHA256 c3cd74f3f17b95121a9c8cc52ba312336f271f34767d2dba9518ab4c6086964f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        bf2674eb7cee3d2f_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bf2674eb7cee3d2f_0
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 0f2827794e0284b6c05974c034d54a728c4269cf4cbdaf23c61065d2bb8d60f6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        bf2674eb7cee3d2f_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bf2674eb7cee3d2f_0
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 a477f128181f49218e61b437b9b91ec995a0232553837e4c982101eba06adfd9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        c6c0b95c7140149c_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c6c0b95c7140149c_0
                                                                                                                                                        • Size 284B
                                                                                                                                                        • SHA256 010d1de71829606bd9d64973b9c489402906f0df3743fc558436a79f816ed38b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        c6c0b95c7140149c_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c6c0b95c7140149c_0
                                                                                                                                                        • Size 284B
                                                                                                                                                        • SHA256 f99fb55049a13ab4eac9bb7228a4c9ef0ba8d748a7e29fec857257960dc29a25
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        cd5fcc451074376c_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd5fcc451074376c_0
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 b5e7921df8ee487edda826b3259c05a37b46e6db5996bed3133b5d56f8a75e38
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        cd5fcc451074376c_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd5fcc451074376c_0
                                                                                                                                                        • Size 12KB
                                                                                                                                                        • SHA256 fae98b1ac39406a741c41f8199c15bd71d2c766fd357546ff1ea8885f6206b6d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        e3891c9d964cb67f_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e3891c9d964cb67f_0
                                                                                                                                                        • Size 170KB
                                                                                                                                                        • SHA256 9302a91c4149ea522d4a6869b56ae8f7038755542c458cc44fad631ea27bbed3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        e7b047d5e67117ab_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e7b047d5e67117ab_0
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 0769641644c544e48f69a699e5d6240195c242178e2c8fb05e7d4cba08c57c2e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 db1cdff4dea329996b9bc1d4bb1cf0642f021884890ec611f246f102fb66d43a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 c39cb0d27ccacc7e63ba1e72c106de2e1dce74717f561c0578aea981c7762058
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 adb53531564344f5fde348e1b28b7b2481bee019cc0513603e0cb5a9d624313a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 8e671b21f9410368dda64730c00fd0745b31c02f499cdedc7e3b36db58c878c2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 df0846875d83d29246baef5416bcdfdc4f57e273b375ea262047631b7e9665a8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 6715ec4ea9b75c18afcafb655ef105ed97f708d8293697cd80882231507a8f48
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 f00655b4a4f0cd049f2db4af541fca6836695936cbec806316726be5ec69561d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 82fb27cf6979f9acbca6886d54fe9f6272716850b9affeca8607e6999bf05220
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 f26c2bd9ccc388560e08c40b92be787be589d27d838f59682060c7c7de6379b2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 935c0daaa2f8657d1be45c44be091e4e4de524a0677546770c4055bb57e3ce39
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 72cc9fed389fe20c901580270d792a7a9820d6c44eb9650b071fca8a81e9d7da
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index~RFe594fbc.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594fbc.TMP
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 5b850e3cf9759007679ab7295a341d4c4c48df0a7614cbc7bf723596a0007d3d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        SiteList-Enterprise.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                        • Size 2B
                                                                                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Edge Profile.ico

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                        • Size 70KB
                                                                                                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        CURRENT

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT
                                                                                                                                                        • Size 16B
                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 21KB
                                                                                                                                                        • SHA256 ac61562785b8b0868fa2cd13a2fcf2642664923c4caf875d52895adb2c582fcf
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 24KB
                                                                                                                                                        • SHA256 8b437a37704a0e49bf786224cfd28bf1e6edf77040f4ae1528c2f2fba87479f1
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 27KB
                                                                                                                                                        • SHA256 533ff648923e694a5856dc1ec24d4636e1f3a6b1c950994f4c206abb34be0abe
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 29KB
                                                                                                                                                        • SHA256 8a7c8c62d50f0fea61d603e793efb751383450eb8584c135b9d1607bbce5241b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 111B
                                                                                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        SCT Auditing Pending Reports

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                        • Size 2B
                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Sdch Dictionaries

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                        • Size 211B
                                                                                                                                                        • SHA256 acd584301170d7a8fd63d637bd5b3cf5f9cf1a6d3bbcc5ff39336911613c5d9c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Sdch Dictionaries

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                        • Size 211B
                                                                                                                                                        • SHA256 8dd01f90ffaf33791bbcf8c24c2abfd5f405094b099a64f84df57ad789eb2f33
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Sdch Dictionaries~RFe588dd4.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe588dd4.TMP
                                                                                                                                                        • Size 40B
                                                                                                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 13KB
                                                                                                                                                        • SHA256 956544086d3f22a435a93a0937085fb3aa92c2214ad57030323b455682cadcd3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 32KB
                                                                                                                                                        • SHA256 f15df99963deef0b816ad9773d39a14fd66d1002867932cb0d1eb3d6d510ec12
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 0ff68f0b59e58cc606ff633c32790a99db8698643b2ff9b0bf726d1b91d0843a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 32KB
                                                                                                                                                        • SHA256 6cad563efb2d2e7b305123ede8e47de572679be2a942bec3c243825c59858e50
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 15KB
                                                                                                                                                        • SHA256 32102ce5549a385c8e6cf19dac6ef22ec49abd2606a154a32d1d081e75b8f094
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Secure Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                        • Size 30KB
                                                                                                                                                        • SHA256 146f3a7cc82591061222ef086abb5c7173f310628e579c064dbfb5f4d0c48a35
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\temp-index
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 7af3a4db11078e1493ad556b0672b2797ce3c8baf61c134786bef4cac509eabb
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe5cbb1a.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5cbb1a.TMP
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 31049f8f1bc05708724a1a3aeed14e2bae8a7d042b501c852da0bace90d97245
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                        • Size 371B
                                                                                                                                                        • SHA256 9fb5184ab0d0f44e33e104b54a6d342971b613a8d45ab987029d324eea9f5747
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\87a7fc434e835dccb082ab1a95c0eb03183fa83b\0551330f-a147-4bc3-a45a-9f9c2873671f\index-dir\the-real-index
                                                                                                                                                        • Size 216B
                                                                                                                                                        • SHA256 2ce20c9f45e6f9fb7b388e21e967f24e8af7ee950b3804ba460295fbe3e91ef0
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\87a7fc434e835dccb082ab1a95c0eb03183fa83b\0551330f-a147-4bc3-a45a-9f9c2873671f\index-dir\the-real-index
                                                                                                                                                        • Size 360B
                                                                                                                                                        • SHA256 0ed8073455c30472b92daaa4b4a744e8869e2216369d63f190e718e5f0956f37
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe595078.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\87a7fc434e835dccb082ab1a95c0eb03183fa83b\0551330f-a147-4bc3-a45a-9f9c2873671f\index-dir\the-real-index~RFe595078.TMP
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 45d548a55b24d725abdca769691e13f052252bac4ebd8df7f4a584a46b12ebd2
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\87a7fc434e835dccb082ab1a95c0eb03183fa83b\index.txt
                                                                                                                                                        • Size 140B
                                                                                                                                                        • SHA256 9b576f3a38e111eb2a26b38420263766b28a95f8d9fc5b6f7f0587816f354093
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\87a7fc434e835dccb082ab1a95c0eb03183fa83b\index.txt
                                                                                                                                                        • Size 140B
                                                                                                                                                        • SHA256 b8fd0cbf9706030270a62e6f57d19310b5e139437cb97c4975e5072e0cadd593
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt~RFe5950a7.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\87a7fc434e835dccb082ab1a95c0eb03183fa83b\index.txt~RFe5950a7.TMP
                                                                                                                                                        • Size 145B
                                                                                                                                                        • SHA256 bec56658a4b3a4b826d4d34b2a4c9f7fcfcdb0f910339552f26491b3bde90978
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9c7d1c789e199deb5c04a3eac411e086b7865793\9d24f24a-b673-474b-8f4d-44e280eb79e8\index-dir\the-real-index
                                                                                                                                                        • Size 192B
                                                                                                                                                        • SHA256 e73fa59529d8c383074fd517acdd440674879b59e5fa132169c8092dd78a6541
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9c7d1c789e199deb5c04a3eac411e086b7865793\9d24f24a-b673-474b-8f4d-44e280eb79e8\index-dir\the-real-index
                                                                                                                                                        • Size 216B
                                                                                                                                                        • SHA256 11cee98961c7fc67e69774aecae6d3f25aaa22e08dbf56b77746109aaf315140
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe594a3e.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9c7d1c789e199deb5c04a3eac411e086b7865793\9d24f24a-b673-474b-8f4d-44e280eb79e8\index-dir\the-real-index~RFe594a3e.TMP
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 592261e30156cf88c915d91b30f1e064fd6beef1c08a033ed035de66d0ae1fa1
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9c7d1c789e199deb5c04a3eac411e086b7865793\index.txt
                                                                                                                                                        • Size 130B
                                                                                                                                                        • SHA256 e59345eff4470fd56cb8412a1eb268d488b3cb771875460c30d9c2def779fd6a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9c7d1c789e199deb5c04a3eac411e086b7865793\index.txt
                                                                                                                                                        • Size 130B
                                                                                                                                                        • SHA256 51ef12f980e847934749f05c73849aee8e05d3ca9dd2a051ff761546dd951490
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt~RFe594a6d.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9c7d1c789e199deb5c04a3eac411e086b7865793\index.txt~RFe594a6d.TMP
                                                                                                                                                        • Size 134B
                                                                                                                                                        • SHA256 8321e77bd25b0f6a1a4fb81fa8c8589a1bdd9ca39e2cc9851c6a3f9ea5f3574d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\aa0c4cf18afdb698e5b321e947cbbacf60460856\23f7cb91-de80-4578-89c7-b4f7d74dac67\index-dir\the-real-index
                                                                                                                                                        • Size 168B
                                                                                                                                                        • SHA256 d47d88a4335ebcb7f78b78d9e6d100ff74aa94601bb58b9b5c9f209c0db42775
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe5a882d.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\aa0c4cf18afdb698e5b321e947cbbacf60460856\23f7cb91-de80-4578-89c7-b4f7d74dac67\index-dir\the-real-index~RFe5a882d.TMP
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 43d35cab6ac69c6cfa34f6f934745c2c03fa7a85aa1897024617d1bca07e1d65
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\aa0c4cf18afdb698e5b321e947cbbacf60460856\index.txt
                                                                                                                                                        • Size 132B
                                                                                                                                                        • SHA256 c27b00206fb23c6a774db6011a3449cc38a0d007ef2c6d51e6b479deb8b819c1
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt~RFe5a885b.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\aa0c4cf18afdb698e5b321e947cbbacf60460856\index.txt~RFe5a885b.TMP
                                                                                                                                                        • Size 136B
                                                                                                                                                        • SHA256 414d0df2972558510e435cbbaa417f79358f755256d8480783c8216bc882c5bb
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                        • Size 72B
                                                                                                                                                        • SHA256 a4870188fe57f1e184bf28ca7013757ef580e961559c734a6535081c3f467313
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe594b19.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe594b19.TMP
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 9d9b5916bb612cf8ff0597aaef19730d0a4f7cd8df04fe1d406489b9f23f181e
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                        • Size 96B
                                                                                                                                                        • SHA256 d24fdf3423cc9806ef772816877fa0036d6a12337d60a8a2d306a387e725b73e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        sync_diagnostic.log

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 bfb18b437d9f7b253f063a8e036d255bf14903b1537132182a0dd8c212cdf14c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        .usage

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\FileSystem\t\.usage
                                                                                                                                                        • Size 24B
                                                                                                                                                        • SHA256 a033340a3549e0997b71c56ae0cce5421ed445b36f14dc1f62d9e50288396464
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        00000000

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\FileSystem\t\00\00000000
                                                                                                                                                        • Size 1B
                                                                                                                                                        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        MANIFEST-000001

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\FileSystem\t\Paths\MANIFEST-000001
                                                                                                                                                        • Size 41B
                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        OperationConfig

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                        • Size 22KB
                                                                                                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        OperationConfig~RFe5909ab.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5909ab.TMP
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 20KB
                                                                                                                                                        • SHA256 6b8ff23565e9771979fa692b4540f8b54dafa1b3b8408dfb3760e436548ecf7c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 27KB
                                                                                                                                                        • SHA256 fb1c30b79266f99aed5936c06df94db3c3af80909d9ae0869ea4e573be3b8c1d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 df42c6a0b6019878fe97600ee4c4a383a6ab297e347925965a768ab4bef9f249
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 cc9f2838c7803c6d7d85e248576e0e73a437c417a8cdad7cde486c5fc1407665
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 8bce4beaba076493c4d70309c347c49ffca61896df8d44d514865a076d417ba3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 aaef08f31eab1d3080b84254876e10afa78e4fa140f4acd2eb50e268b8e59ecf
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 7a1b3601d073c4fd5b82679f71a06fef2fd9a99f4e90f1d61c100e6f1531a5d8
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 6c96cc5f11b3f4d9e195eca321746101cdc134a354a5e859e7563b17774c3a48
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 6712d3113a5cc1f655ec14cac66fa88f8a598b8c8e649be7ace31281869dc5a1
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 e96bac542bb175760b5214bf9ec81daa6d72ee9adbc33c91da4951def4214e8b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 60f80ff0d0f61169a2c1b459f75a3de179e9a24f5c0101c517ee024f9a0761e8
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 5128bae2f38e1ecda661d9c74bbb609afd798b51aaba55bc37c6842a99a2ada5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 5b54bcaedf03ee84d8200ca94476b084e04aee617ff6db612acd148951f9b874
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 82e0e81aeb9a92d1d2c8048420fb6711c8fa5f7d3134eb0ac5077d5555f736ad
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 5fddfaaa243b03cf8e173ad26c0e532a751cec7b4c6bda828ded964ff75de0f3
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 f455af0b158d2b9afc65c5fb9188cff1ea2297467ea2f39c39eeaa74d882372e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 fcad0535f527552860bc76a03c61da25df5ab94b95f7dfb2c66d81d204e4b0ca
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 ad1c73a6d06602dc0c4b06c22fc36d285fe98a3d37dcf52e7700ef508528e384
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 d474659c45c81f373ee3a77e4251084b67dcb6158626b589004c97e9d2a16716
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 07f15d2e7fe6d2dbc9fb3433e915763a67809cd9e912024db19e937dc889bdf5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 848b8f49909fa0517face2d9864c582134c9cd56d26d016ce0a25f93e9c23641
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 b0e2b97ff5f972c3013d39269b4094d5c3eaed6d0084967fe9e8be8e5de7ff25
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 f5e4725cf34e6d4dbc2519ac1c09c21f4ac320191ddef836929d31ba3b867660
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 64dca2523d7f1f8781dcfcf7b9e9e0e73209d0d55970ce6fb12a9e1ab663a5eb
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 55c73800e95046147a64c1c5616dbcf1308a58a3f277a5b6ec30800ed7d612e9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 4173de02a7d8f81eab5a11103acc56b7d58abaf6bd3cd519c51cc2989b4fb3f1
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 9038a33c17126bace9dd9d2069c8075909e2d8357d9653ef494722ea9ada8d23
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 edc56734ff62da7e02e28eda045adaf9718a66cdb3110df20db8b3cd4856b5f5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 bb09d54a31033a9a8244bba1c51c6f7b09af9dd263739b7e2e4d64a49a182bad
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter~RFe58b9d5.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58b9d5.TMP
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 06beb7898ee808dac65f9d05e879a38825066cf8e4bddcd0d5dedf26e27141f3
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                                        • Size 13B
                                                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 6e2eca817059628d11bfdcc75ee08f0e8ba9dd42b7bb5a4be8fcc8eaa1968bf4
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        default.dic

                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                        • Size 2B
                                                                                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                        • MD5 SHA1 SHA512