Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    887s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    13/08/2026, 04:18

General

  • Target
    Frindle-by-Andrew-Clements-pdf.html
  • Size 2KB
  • Sample260813-exfg2agg64
  • SHA256 32ed63159c77e21ee19ca1b9aa3213ccf0218eb59539560b132a8e68ef0e18ea
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Frindle-by-Andrew-Clements-pdf.html
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:860
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7fff1e99c188,0x7fff1e99c194,0x7fff1e99c1a0
      2⤵
        PID:3000
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,301142677546930071,2809479290038277270,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
        2⤵
        • System Time Discovery
        PID:1888
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,9159945880610542262,18335756993038171171,262144 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
        2⤵
          PID:1568
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,8420705217914534804,9029186190423240288,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
          2⤵
            PID:3852
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,2559610061490420821,3931593184872788901,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
            2⤵
              PID:416
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,16524729720106953805,18013989448660995488,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
              2⤵
                PID:3392
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,13097700386554319555,2545802534991724856,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
                2⤵
                  PID:2772
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,1842295041706534182,15844138985159292190,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
                  2⤵
                    PID:2220
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,15251815076044514139,3072043830695293222,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
                    2⤵
                      PID:4680
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,12191777386059068895,7552366487030634582,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
                      2⤵
                        PID:2204
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,5196317857049205713,10558536580195504788,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
                        2⤵
                          PID:2592
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,5196317857049205713,10558536580195504788,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
                          2⤵
                            PID:1816
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6168,i,16249228910316521949,4356223580412552068,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:1
                            2⤵
                              PID:4188
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6340,i,8790164333343610151,17184490861697348804,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
                              2⤵
                                PID:1836
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6124,i,8474855094565421182,4846012928653976228,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
                                2⤵
                                  PID:1720
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,10637113928086860526,11719938430931903012,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
                                  2⤵
                                    PID:4364
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,7854625772523311097,18143299352872825348,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
                                    2⤵
                                    • Modifies registry class
                                    PID:3048
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,12529462053879948789,17718806717511068915,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8
                                    2⤵
                                      PID:4100
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,12160638189658303743,16899364615205597372,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
                                      2⤵
                                        PID:5028
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,11994313351518166565,2576430687096079617,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
                                        2⤵
                                          PID:2208
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,15556228682175087525,11710556635165042533,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8
                                          2⤵
                                            PID:460
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7108,i,3266162739707331522,3590554441665485674,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
                                            2⤵
                                              PID:3556
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,1894807232659690675,7516679184046425938,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
                                              2⤵
                                                PID:5076
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,4449161858855633246,3941406087316408615,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8
                                                2⤵
                                                  PID:2104
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6860,i,17726159040632221760,11029572380736025790,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:8
                                                  2⤵
                                                    PID:1668
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6852,i,5624587278486039640,12467767364601162522,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=768 /prefetch:1
                                                    2⤵
                                                      PID:1628
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6168,i,1886001451318214490,4743819206933210571,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:1
                                                      2⤵
                                                        PID:3436
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6816,i,2654963318742279994,3193290288678448611,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:1
                                                        2⤵
                                                          PID:1656
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=4488,i,15690707908527405181,3762176742808018105,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
                                                          2⤵
                                                            PID:1072
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6244,i,2434527015931031131,12440755432280042297,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
                                                            2⤵
                                                              PID:5068
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7216,i,7251549146399974697,8622243788611817624,262144 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:8
                                                              2⤵
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:3512
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7248,i,13613523561315460631,2789270449204734763,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:1
                                                              2⤵
                                                                PID:4492
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5624,i,6630206149845137159,1047497941345166940,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:1
                                                                2⤵
                                                                  PID:1196
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7596,i,12780300928923095423,13571584511187977161,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
                                                                  2⤵
                                                                    PID:4300
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5528,i,2988781710462698279,9976087397277803629,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:1
                                                                    2⤵
                                                                      PID:2592
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7420,i,7738923247879838428,16423766532868152611,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
                                                                      2⤵
                                                                        PID:1628
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7596,i,2343396422778920442,15930551079341158922,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:1
                                                                        2⤵
                                                                          PID:2040
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=5320,i,13498216049185061068,11807874093392782002,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:1
                                                                          2⤵
                                                                            PID:4732
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7504,i,109375048916171601,3590289806315750288,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
                                                                            2⤵
                                                                              PID:5032
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,10172305121517066482,17122576765129951050,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:8
                                                                              2⤵
                                                                                PID:2532
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7228,i,4203876513689494556,7331906408864131771,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:8
                                                                                2⤵
                                                                                  PID:5104
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7676,i,11198414663039030346,7286669548198615097,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:8
                                                                                  2⤵
                                                                                    PID:2592
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,14529117901909131962,13236207265069675390,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:8
                                                                                    2⤵
                                                                                      PID:2976
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7220,i,13242767289845993748,15376528586133068766,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:1
                                                                                      2⤵
                                                                                        PID:3664
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=5512,i,17955108419591668007,1272411507464042360,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7972 /prefetch:1
                                                                                        2⤵
                                                                                          PID:3108
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8180,i,12385611113033725526,16100499893634806348,2097152 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4724
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7724,i,12434040118715161238,11693025048266839031,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:8
                                                                                            2⤵
                                                                                              PID:2180
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,8345189503123209584,13421611552688962863,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
                                                                                              2⤵
                                                                                                PID:3388
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1544,i,2513418610961847644,12986285438913756847,524288 --field-trial-handle=2292,i,5975337771073434620,14032702954482784196,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:8
                                                                                                2⤵
                                                                                                  PID:3460
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                1⤵
                                                                                                  PID:1772

                                                                                                Network

                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                      Replay Monitor

                                                                                                      Loading Replay Monitor...

                                                                                                      Downloads

                                                                                                      settings.dat

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 4f09b67f3cd537e58118f5452ece8461e4fe6705ee65ee2a25a297c3b63b0bb2
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      LOG.old

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                      • Size 7KB
                                                                                                      • SHA256 40630ad836e61cb11d789e3617ae81cc4ee5f66460780189b0beb8a392c613da
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      LOG.old

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                      • Size 7KB
                                                                                                      • SHA256 08c15b504b48d12bb4299feeb45a711bc516d801770c36b61623aaacbf8420c2
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      LOG.old

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                      • Size 7KB
                                                                                                      • SHA256 81662a7f2fe53de2d8a3ecb1555f01f283cde3c6adc37c824a01bc190b5786ea
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      LOG.old

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                      • Size 7KB
                                                                                                      • SHA256 cfb6b8aab2052c5ec0d75bfd167a0ae39396e4908fed88fdb52f375fb41cbc44
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      LOG.old

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                      • Size 7KB
                                                                                                      • SHA256 f386d640c984fbe85944728c593a8994b7a84b46d2909adaa38c156c4568495d
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      BookmarkMergedSurfaceOrdering

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                      • Size 6B
                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      f_00007d

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                                                                                      • Size 56KB
                                                                                                      • SHA256 e5a5b08d10282d3bb102ea60da50511d94b7b5df75c6975bbcb52b8e67a1a66e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_00007e

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                                      • Size 673KB
                                                                                                      • SHA256 3bd1600398d54248bc1ece1d3c9c3f5e113073655c8263e7e81efb3911869760
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_00007f

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                                                                                      • Size 22KB
                                                                                                      • SHA256 81f663ef39cf821e9369d5bc1d1e085df38a3e0d0f0f21fb264aa344ce3929d8
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_000080

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                                                      • Size 34KB
                                                                                                      • SHA256 43062c3f74cac788bf408b3a761c01eb9a0c644f746f6a589cf0f53c03b1b003
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_000082

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                                                                                      • Size 283KB
                                                                                                      • SHA256 b605a27742240cb59789eef6302afb1468b43cf1a44f1396919ca42f6d796dfc
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_00008b

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                                                      • Size 335KB
                                                                                                      • SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_00008f

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                                                      • Size 32KB
                                                                                                      • SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_000090

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                                                      • Size 96KB
                                                                                                      • SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_000091

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                                                      • Size 407KB
                                                                                                      • SHA256 b8d511b5631833faa6bdf354ca905d5fa78a5d2ed7ed09598f1cd704e027bca5
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_000092

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                                                      • Size 68KB
                                                                                                      • SHA256 1320e0aa029e30007c083bafbf425419154b115c017e70d5256277ddbbf06bb1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_000098

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                                                      • Size 60KB
                                                                                                      • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_000099

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                                      • Size 68KB
                                                                                                      • SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_00009a

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                                                      • Size 65KB
                                                                                                      • SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_00009b

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                                                      • Size 19KB
                                                                                                      • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      f_00009c

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                                                      • Size 38KB
                                                                                                      • SHA256 3370f2e33b0f3a2dae282f78a6bda56adacc76aaf06c7b388db4fda41b90b92c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      temp-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                      • Size 11KB
                                                                                                      • SHA256 2ebc6c0da50d31804e4509d380588b94d4b0ad86cd1b4728595b285cb4065bf2
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 10KB
                                                                                                      • SHA256 f61a861f606bf704d0eadd4614e16e62e4e49cac2f43fdf4d2c949053a5f3468
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 11KB
                                                                                                      • SHA256 c95d77926cb5fed14b0d470cdad6a9305fd2a34ade8e018c584a697355796d15
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 10KB
                                                                                                      • SHA256 fc4fdbbc4ab1194fa582cee874bba81d363df07b351f43fe2dd7cd93a5eab036
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 4KB
                                                                                                      • SHA256 33ded51576027f7960619075c151bd5d12b86b3c6dda59bfae92f81b86f4f0af
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 10KB
                                                                                                      • SHA256 6d1d560406a32e8a21bc76f8d973ff60cbfe512dfc83603d1919ae638c9bd22c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      SiteList-Enterprise.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                      • Size 2B
                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      Edge Profile.ico

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                      • Size 70KB
                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      000003.log

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                      • Size 265KB
                                                                                                      • SHA256 882de39271b4b73686434ab1f07249ed2cadedfd78a595ae48e98e61b4b8dcb8
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      000011.ldb

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
                                                                                                      • Size 17KB
                                                                                                      • SHA256 7a1e06d6d546a1c0e49c52df1f7c277abab3882ede724b60839841a0b79c4953
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      000012.log

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000012.log
                                                                                                      • Size 141KB
                                                                                                      • SHA256 b7e2ca7e54ebbb75e69c7848051e672ac8671ea24c77638ba226dc8d5c3d52f3
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      000014.ldb

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
                                                                                                      • Size 17KB
                                                                                                      • SHA256 05d58d0944891a5c14e743840fd94c1d29283c279724a316bd882300cc75482b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      LOG

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                      • Size 4KB
                                                                                                      • SHA256 34f09d4a9b3e87a61ddf4075b4a7248eaf20edcfe238d2b9f261457c7b7b7e7e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      MANIFEST-000001

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                      • Size 23B
                                                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      MANIFEST-000001

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                      • Size 684B
                                                                                                      • SHA256 a448c93c588ace6e0584ce07cf776de639804b9586747c4006400a047e357763
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      Network Persistent State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 19KB
                                                                                                      • SHA256 1abbd05e14283b45f07cf6a6138433c57927945a0f02949e7de529db8140a881
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Network Persistent State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 15KB
                                                                                                      • SHA256 f4dd6e922b334d9b3f04897a2eaf0d209a0d8cc18b162a0e1a0716c6a3aaa009
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Network Persistent State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 7KB
                                                                                                      • SHA256 40b8a1da8107744f38bac7192fc2967218c05579f13550b4d169b23a02465707
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Network Persistent State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 19KB
                                                                                                      • SHA256 1e9a48c3d19f7462ee06c82380582c579e6a2032c007912343cf410d702f3d26
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Network Persistent State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 111B
                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      Network Persistent State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 16KB
                                                                                                      • SHA256 615cbf4788db26e6c22b86edb26461108a50ff8ce02bdcac5f71e8ba7908b7f1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      SCT Auditing Pending Reports

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                      • Size 2B
                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      Sdch Dictionaries

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                      • Size 211B
                                                                                                      • SHA256 b1f3109203993eaa93053c94e89143bcdbeb5eb420533223eb2724b8616eed81
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      Sdch Dictionaries

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                      • Size 211B
                                                                                                      • SHA256 254f5cb9607de7129d2513c2e117014c324360e382f4593eaaed243d4829a6e5
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      Sdch Dictionaries~RFe59e303.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59e303.TMP
                                                                                                      • Size 40B
                                                                                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      CURRENT

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\CURRENT
                                                                                                      • Size 16B
                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                      • Size 18KB
                                                                                                      • SHA256 2a56293b9ca9c6d505c45fefb6c2a4a21634720e022bb7445e163824b4f08fdc
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                      • Size 12KB
                                                                                                      • SHA256 636f220ec782f285c08b66a354cdaeed5caca542a1691d3103c4d26c4c265bc8
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                      • Size 15KB
                                                                                                      • SHA256 9b4ecbb25eea2058111bbd69bc885be2075b7bb9d60cf442977c364e89a30521
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                      • Size 13KB
                                                                                                      • SHA256 24687e11e7d6d136253e9f986164db7bb48960316e327ba7791d842f7e6aa4be
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                      • Size 19KB
                                                                                                      • SHA256 140cd9937b60504dc2dcc7623b3f71e1ffcf9fac644f9ab995447db23577b8a4
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 70fe55d4ab3599d6964d9fc0f7d3b4f2acbf9984b760674e440af38450837e48
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Secure Preferences

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                      • Size 30KB
                                                                                                      • SHA256 8eb3565e708f1ed31ac98bd9af4029dc41cb3968f9016be1dabc0643ab6c7319
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\28ed9e43-3225-4dbc-b876-c61dc602b79b\index-dir\the-real-index
                                                                                                      • Size 2KB
                                                                                                      • SHA256 fd1201ca922b65daac2933e4949c9f8657bb348351e2e7996193598cdc285f8c
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index~RFe585ec5.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\28ed9e43-3225-4dbc-b876-c61dc602b79b\index-dir\the-real-index~RFe585ec5.TMP
                                                                                                      • Size 48B
                                                                                                      • SHA256 acd4110433d9980788601df3f91378d9081f190272062acebbaa24771b38ce5e
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\60968124-8588-4508-9ba4-e0963c8428b4\index
                                                                                                      • Size 24B
                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\60968124-8588-4508-9ba4-e0963c8428b4\index-dir\the-real-index
                                                                                                      • Size 576B
                                                                                                      • SHA256 58fde5ed58a93391799aeff377bb72cf9a74225971d5c1d1f38a4cb694be1364
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index~RFe58c56e.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\60968124-8588-4508-9ba4-e0963c8428b4\index-dir\the-real-index~RFe58c56e.TMP
                                                                                                      • Size 48B
                                                                                                      • SHA256 ade23688c262fcf4b90a91618db7374f77bec402d59eae092e14032f369e42f0
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                      • Size 214B
                                                                                                      • SHA256 099924fc1dcfb11d01b4c2f53da273613e14c5cf1eae61b1e5c84dee0bee99af
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                      • Size 216B
                                                                                                      • SHA256 ec1a9454fbb33cbe218ec02ad971ef40466f3f7107a610aae9325e21a9c5c69d
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                      • Size 243B
                                                                                                      • SHA256 4fbbec4020d325788c05a668bfb7e665f60b7767d00f164efa634a99dc59afb5
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                      • Size 130B
                                                                                                      • SHA256 959888fef0c55a6f470074151c1a1b9f985c1e3de1eddcfb7f867395973b736e
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                      • Size 239B
                                                                                                      • SHA256 524d45964135030014b14f4c9d842528730270d37713a0a6b40cbb7ad2bb195a
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                      • Size 132B
                                                                                                      • SHA256 61d59fc47d439cd6c231736ee915cd53699701dc3f3a9207f48675f25d973621
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt~RFe5823ee.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5823ee.TMP
                                                                                                      • Size 137B
                                                                                                      • SHA256 631be6853e55a54d0fe8e14b47d0aa5547f3fa2ee0c4f6b7a72db748a2991b0e
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\the-real-index
                                                                                                      • Size 1KB
                                                                                                      • SHA256 a324cb0b4c19fa06e1033052b38095983f346a424397e72d84451598ea5640c6
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\the-real-index
                                                                                                      • Size 3KB
                                                                                                      • SHA256 1fe6c06a33950188ac5aeb48b9d4705b37cd5b2b5da3b7fd29be906dd48198b6
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index~RFe59cccc.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\the-real-index~RFe59cccc.TMP
                                                                                                      • Size 1KB
                                                                                                      • SHA256 4ca7c6ebf63b514bdccb57ebde0f9d195ef86cdb6cfdedfcdd645c5696d41bfe
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                      • Size 371B
                                                                                                      • SHA256 fc3980b0a3f6f1b65f0d6a20430bb0e97c80dfabe9b3034833eb03a0e775343a
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                      • Size 120B
                                                                                                      • SHA256 365c3f276cecfb65f087ac27d6826222daa38476d6e4a89a05b9f88718f12681
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                      • Size 96B
                                                                                                      • SHA256 591a1f6a5bf13e0d330f243bc244c6debc732be682bd9c7e6f3e4ca624851e26
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index~RFe58b65b.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b65b.TMP
                                                                                                      • Size 48B
                                                                                                      • SHA256 e32191beffc5e517bb48ade2bb67429cb2177299b588d51c929bc513519e6f52
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      sync_diagnostic.log

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                      • Size 4KB
                                                                                                      • SHA256 847d8f98b521651762d7e72bcea3b8f65ec58120aead609c9e6592dd9f562b4d
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      the-real-index

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\a5d6b6a3-b83d-4b8c-9d12-29b14cf6722f\index-dir\the-real-index
                                                                                                      • Size 120B
                                                                                                      • SHA256 488ce17083d4dd314cc49966a4f39c2e71070ab48ec45c25cb4308c7e827e4fe
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      the-real-index~RFe5a5296.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\a5d6b6a3-b83d-4b8c-9d12-29b14cf6722f\index-dir\the-real-index~RFe5a5296.TMP
                                                                                                      • Size 48B
                                                                                                      • SHA256 aeb114fd6a5911fa254e266967ea352ad85b56e42f8980b8d53895e06e7993ac
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                      • Size 74B
                                                                                                      • SHA256 dc3fe778aab2f1384a4b17ee2879a40cb097b936caabcbb9b3a025f20c6ae9ab
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                      • Size 155B
                                                                                                      • SHA256 7481aea69b300bd0a41d37b18566dfc6837d935e4a030f9b0daa9e54d5be4ebb
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                      • Size 149B
                                                                                                      • SHA256 4522bf37107673c28f8409fb71a94304b97955644d44b79457e43a3844202a8c
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      index.txt~RFe5a16d5.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5a16d5.TMP
                                                                                                      • Size 158B
                                                                                                      • SHA256 abcbe5d8b935798aa0c722fec53045fac226810473883e106f822bf838b81a03
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      OperationConfig

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                      • Size 22KB
                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      OperationConfig~RFe58de55.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58de55.TMP
                                                                                                      • Size 3KB
                                                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      Local State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                      • Size 16KB
                                                                                                      • SHA256 4e68223d613719d622422e6974a5bd939bce2d69276d3a02e5658840ba137ef2
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Local State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                      • Size 8KB
                                                                                                      • SHA256 62ff79fc9777957e6f3b12d04c13226ed770f32af63c9b4069f44a0312c9fc9e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Local State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                      • Size 20KB
                                                                                                      • SHA256 4b6cdddcf6ff59dd9ff5a08b5ece7ffe1ef11832e38fb03f574e83ba3e641bde
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Local State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                      • Size 8KB
                                                                                                      • SHA256 2adb93edd43861dbd699dcc97c4b303d2cadf0e7bd14011a6f722a3d13c31926
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      Local State

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                      • Size 27KB
                                                                                                      • SHA256 b47b73ef5a65c56be2fad2d19488d3303ae50f017f0c2a1366d098cce58f72f8
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 76558ee82e3a33a28e7c4a977c4e1ff9440fbbb453c851fc8415a02b323195d0
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 9ddd46ea5c82f4814b027cf6bcfccd65f4c20971af588a8aa6046b8e4517ce91
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 3266b395f68a3ec381648d884f65c629fc16763e0430880bba07d92658e701bf
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 6e9026858747bee7fa0805237b22a104bb674a6b34fe09ffe6dbd1e204acd3ed
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 f6eece4d3e8817d08b4953e7100d9d4c157de94aeeffa25e78b6bca6639e5176
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 ebc5d0dcf5667fe827bbce9c38a459eb513a47648ef17649692055d9c40c367f
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 23f0a3bcb8cb3f50507c24d212fcae02a781b291f7c1c2631a64e1a7a4fa6851
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 0b7f9335253b37031afca730df39e7b0b806dbce6ca70ea47cdd6236821c0b3a
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 3f3ba3fee0c3586c0eae050a3a2ad7ddbd6916e66be5b49127bff84d3a84665b
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 4b8c0a5ecdb20e0634f71ebfa5d16d9651d6bcd32921e6492a4d571727c789bf
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 b29e8eea7e96a0696f6e9fe614793f28a0e6cc6470279d9a63b2dcd40afbc85f
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 e995b5da3f2bd48eb84a8abbeb728b692dacb1e83e686ed2fc30dacbfcba7ea3
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 9ef012bef538cb5c52e4c3072eb75db54f7b719cdc5963457c57a7c759802913
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                      • Size 392B
                                                                                                      • SHA256 1655ed895086381c60e5cbb5b5ec06f000ace8ea51339fb9d0e624e3ca18f9e8
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      RevisitationBloomfilter~RFe58844e.TMP

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58844e.TMP
                                                                                                      • Size 392B
                                                                                                      • SHA256 e98c794ed1a39ad6996ad66aab84f0a5419b4aecc1b1512c3a1921816d274cf2
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      metadata.json

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                      • Size 13B
                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                      • MD5 SHA1 SHA512

                                                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                      • Size 2KB
                                                                                                      • SHA256 ca78cf452e506bdccba0069dcd52377be9f6b75bb039fea757b04b62dfbf09bf
                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                      ccba5a5986c77e43.customDestinations-ms

                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                      • Size 13KB
                                                                                                      • SHA256 028fe5e736035bd3ca459cdf01edf42862995264929dd249a4ea46298987e6ee
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      ccba5a5986c77e43.customDestinations-ms

                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                      • Size 16KB
                                                                                                      • SHA256 4c8fb61e56a0c05e9677a375251b55ea6fe1c015395e68685ac1934fa9b2c11d
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                      ccba5a5986c77e43.customDestinations-ms

                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                      • Size 10KB
                                                                                                      • SHA256 6f0d985487423c2c376285471a88652e32a7cfb3fdc2b80fd1486dfc77337d2c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH