Analysis

  • user interaction
    yes
  • max time kernel
    705s
  • max time network
    695s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/08/2026, 15:55

General

  • Target
    https://www.thefurrypound.org
  • Sample260828-tc7hcazwby
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of FindShellTrayWindow 52 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.thefurrypound.org
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3740
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffad6fac188,0x7ffad6fac194,0x7ffad6fac1a0
      2⤵
        PID:3064
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,9519874430160073224,2005859619442441389,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:3
        2⤵
        • System Time Discovery
        PID:2976
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,4966365509606918442,1030768320362857007,262144 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
        2⤵
          PID:868
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,7334299632466894737,1165415642637160461,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
          2⤵
            PID:3500
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,14466589513400762354,4722326731274008417,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
            2⤵
              PID:2456
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3516,i,7729551899690496947,11806119509645342423,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
              2⤵
                PID:4960
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,16333416974866717210,1391087460807737482,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
                2⤵
                  PID:1816
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,2851566304570475713,5835955876175418326,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
                  2⤵
                    PID:4164
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5048,i,12818312301861394967,9543714050878033127,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
                    2⤵
                      PID:1124
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3532,i,9789994808379589657,1006416332156271590,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
                      2⤵
                        PID:3328
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,17733647747734324770,3274863297252832143,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
                        2⤵
                          PID:4056
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,1353666848329091629,9825349249786300116,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
                          2⤵
                            PID:1296
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,17625889814446174993,11090895443684980205,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
                            2⤵
                              PID:1312
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,17625889814446174993,11090895443684980205,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
                              2⤵
                                PID:2396
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6312,i,10293584174552540468,2142052282213018711,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:1
                                2⤵
                                  PID:1052
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3720,i,12585191853072937752,6075753460648802223,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
                                  2⤵
                                    PID:1232
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,9197412247728299374,6335360133471032318,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
                                    2⤵
                                      PID:4076
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,12221795953280769796,5645192077795076793,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
                                      2⤵
                                        PID:4508
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,10564034852375524923,7242671766535213725,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
                                        2⤵
                                          PID:3228
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,16525788273432773321,399435763940688981,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
                                          2⤵
                                            PID:4240
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,610295107267391253,14769999079873226650,262144 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:5060
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,7593247136735426885,9031069811578914874,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:8
                                            2⤵
                                              PID:3872
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,949862992034693102,8286503615132865886,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=1504 /prefetch:8
                                              2⤵
                                                PID:3192
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4044,i,15721035974959906580,8432282653607298292,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=4048 /prefetch:8
                                                2⤵
                                                  PID:3968
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,479308177716318758,1545529205737169736,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
                                                  2⤵
                                                    PID:3020
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4524,i,2102296702770931830,5689712974091147611,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:1
                                                    2⤵
                                                      PID:2240
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,12067042900195856418,13654441059282888477,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:8
                                                      2⤵
                                                        PID:1192
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6700,i,10712106165021587783,7005733388383464157,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
                                                        2⤵
                                                          PID:4388
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6824,i,1930946115762021642,685540558307120458,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
                                                          2⤵
                                                            PID:3520
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6576,i,6431885703466338245,16975618119436405569,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:1
                                                            2⤵
                                                              PID:1156
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7008,i,8963859441444630576,754928604119726617,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:1
                                                              2⤵
                                                                PID:1128
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3260,i,16889550049778813047,10823821558826312510,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:1
                                                                2⤵
                                                                  PID:4380
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6688,i,15993693166084293669,17782862225458763257,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
                                                                  2⤵
                                                                    PID:2592
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,16281965161116763416,11923601212631466226,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:8
                                                                    2⤵
                                                                      PID:4072
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3064,i,7696476461575208786,2839628628914644410,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:8
                                                                      2⤵
                                                                      • Modifies registry class
                                                                      PID:4076
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7440,i,11058591598134794298,10640980847330000703,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:8
                                                                      2⤵
                                                                        PID:932
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7736,i,4250374606625961998,17187964943560766295,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=7464 /prefetch:8
                                                                        2⤵
                                                                          PID:1612
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7740,i,17413336196842876605,4626788934994338540,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=7764 /prefetch:1
                                                                          2⤵
                                                                            PID:2776
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8144,i,7305551452213663704,15711560545953366421,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:8
                                                                            2⤵
                                                                              PID:1956
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8288,i,6397503417994339474,15639939506461048990,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:8
                                                                              2⤵
                                                                                PID:1072
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8304,i,8456407047486330738,17050511036228102328,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=8328 /prefetch:1
                                                                                2⤵
                                                                                  PID:1564
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,10704229543133142912,23191533385248583,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=8384 /prefetch:8
                                                                                  2⤵
                                                                                    PID:632
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8380,i,3759698958875308201,1731406812251831592,2097152 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
                                                                                    2⤵
                                                                                      PID:452
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7632,i,15601693209550301463,15390448487763733302,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=7484 /prefetch:8
                                                                                      2⤵
                                                                                        PID:1872
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7872,i,17655576185639488576,9858030840303203453,524288 --field-trial-handle=2360,i,15215305606208886287,11785223308494604534,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
                                                                                        2⤵
                                                                                          PID:1392
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                        1⤵
                                                                                          PID:4464
                                                                                        • C:\Windows\System32\rundll32.exe
                                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                          1⤵
                                                                                            PID:1700

                                                                                          Network

                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                Replay Monitor

                                                                                                Loading Replay Monitor...

                                                                                                Downloads

                                                                                                blocklist

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                • Size 105KB
                                                                                                • SHA256 ae53e618032c667892ed21a0d220c217b0a8d7911b3dee86b08e6a49f9b5961f
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                settings.dat

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                • Size 280B
                                                                                                • SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                LOG.old

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                • Size 334B
                                                                                                • SHA256 68aace0f54b75468526a5b9b5407030a2fa92c159532cb3a2820fada0eadceb5
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                LOG.old

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                • Size 331B
                                                                                                • SHA256 225b1fb0b88e3235ccc2952ac7802d9743c288b649a321189d0ad25e273346e6
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                LOG.old

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                • Size 331B
                                                                                                • SHA256 8daebcdf951cb9cd831a6bb2524081631ae08061dabe302e31f9699a3c0f3246
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                BookmarkMergedSurfaceOrdering

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                • Size 6B
                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                • MD5 SHA1 SHA512

                                                                                                f_000063

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                                                                                • Size 91KB
                                                                                                • SHA256 9290e2e3f46994b9d80ba9da92b667842899cebe941ebba52de140cd3a699339
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000af

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                                                                • Size 60KB
                                                                                                • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000b0

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                                                • Size 68KB
                                                                                                • SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000b1

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                                                • Size 19KB
                                                                                                • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000b3

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                                                                                • Size 63KB
                                                                                                • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000b4

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                                                                                • Size 40KB
                                                                                                • SHA256 839ff4459cf5fd3d0d1815e4eddefcd5e5fab6d8fc69a82875fe0b33774abc79
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000e0

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
                                                                                                • Size 283KB
                                                                                                • SHA256 a2c5a19aee52336c5bf2f3968dafe8b27bcae93a8b091245eaf0227058a948a0
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000e1

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
                                                                                                • Size 20KB
                                                                                                • SHA256 4c1195176cbfa92074e27fb66b225cfaee22d5e9a807d826aa7ea00c6a31fe87
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                f_0000e2

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
                                                                                                • Size 2.0MB
                                                                                                • SHA256 fc93ec1cb6e0e41ec02b252b1e5055296e340ddb89af3dd2848d227e22a4db58
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                • Size 8KB
                                                                                                • SHA256 4979210de0d72e94b11c3d22d59f830d8140b0fd73f2f68b6119ae086bfe5fe5
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                • Size 3KB
                                                                                                • SHA256 4add73a7f153fd02cba8e50d77ee5da8218ebc807a7e2798c75d517b91be531a
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                SiteList-Enterprise.json

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                • Size 2B
                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                • MD5 SHA1 SHA512

                                                                                                Edge Profile.ico

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                • Size 70KB
                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                CURRENT

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
                                                                                                • Size 16B
                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                • MD5 SHA1 SHA512

                                                                                                MANIFEST-000001

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                • Size 23B
                                                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                • MD5 SHA1 SHA512

                                                                                                000003.log

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                • Size 186KB
                                                                                                • SHA256 0b9c3a8bb82e59fd11595fa4a298260ee464898384d0f1f3758dce78ca96c082
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                LOG

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                • Size 353B
                                                                                                • SHA256 60218d1cd999968eca53213b620c6ff8c0f8562c709b765a8a4a83fd21ef669a
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                Network Persistent State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                • Size 9KB
                                                                                                • SHA256 a8b2337355ea1c1d11ec5c490d578d5a998ae6f512438d845a3102eb5781e0f6
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Network Persistent State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                • Size 1KB
                                                                                                • SHA256 ee2e8a0ea4790a1464523a8f74a8602fe47100531298fc5ffcddfa734cd4e4f1
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                Network Persistent State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                • Size 11KB
                                                                                                • SHA256 0ef0e5575740daf6069e2b81d321353f6ba6156ef3e2e13bf5428e3ab890f5dd
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Network Persistent State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                • Size 111B
                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                Network Persistent State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                • Size 8KB
                                                                                                • SHA256 9dde4f6996e036620887452e070a1e6c9128520f0c1f846b335df6e0cb80ac64
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Network Persistent State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                • Size 11KB
                                                                                                • SHA256 ce792745a54dfeeaa09a91dcff77eaf5bb43931a2c995bede94998691cbe795b
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                SCT Auditing Pending Reports

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                • Size 2B
                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                • MD5 SHA1 SHA512

                                                                                                Sdch Dictionaries

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                • Size 211B
                                                                                                • SHA256 234bd48d8c0fc60bb66e93028ed5ff6538b79100ae845c38664bbe551731e260
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                Sdch Dictionaries

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                • Size 211B
                                                                                                • SHA256 71238cbaa2a99d21b914849a56d73bf4702fa04689c935f871194226fd232cfb
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                Sdch Dictionaries~RFe5c3c74.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5c3c74.TMP
                                                                                                • Size 40B
                                                                                                • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                • MD5 SHA1 SHA512

                                                                                                Preferences

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                • Size 12KB
                                                                                                • SHA256 48442e024e953c9a2993af33e0491dd11b6a983829ac2e03b221a222296c305c
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Preferences

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                • Size 19KB
                                                                                                • SHA256 d0784b4a406928a382054990e34a7f0bef93761abca98201498f55ba4f9c7969
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Preferences

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                • Size 14KB
                                                                                                • SHA256 ddf2d5d2dc0db978fd8a700927c6d49ce9cdee0a8e0dd5204aa8556dc918b574
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Preferences

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                • Size 14KB
                                                                                                • SHA256 d47af15fcde22814151f6cc7c832f5d67548185c0ce1d25db21b3b73b4ca6e25
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Preferences

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                • Size 16KB
                                                                                                • SHA256 3bdd24922c204afcc58469ed1f5e5ec16f9b79248f0769d78a421e3077823f8e
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Preferences

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                • Size 19KB
                                                                                                • SHA256 16712672ffe9fe01f5f18e9e8188c10a4262fa492543e33cbd971702532f36b6
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Secure Preferences

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                • Size 30KB
                                                                                                • SHA256 aab1c7d79ffc56abc2ac2745065bef783342a77a61a345218814ecffa5ab0e95
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8205646c-7e53-4ae4-8f01-4db81f80e4cd\index
                                                                                                • Size 24B
                                                                                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                • MD5 SHA1 SHA512

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8205646c-7e53-4ae4-8f01-4db81f80e4cd\index-dir\the-real-index
                                                                                                • Size 576B
                                                                                                • SHA256 0fa78a49168efff500e65826528cf363f6b6aa74f99f643eb4a42c98b395649c
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index~RFe5d01e7.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8205646c-7e53-4ae4-8f01-4db81f80e4cd\index-dir\the-real-index~RFe5d01e7.TMP
                                                                                                • Size 48B
                                                                                                • SHA256 92ad6e7623869a800239de4cd942c028cb7d292db2627fbea68a8fa499e5f9b2
                                                                                                • MD5 SHA1 SHA512

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\994ed170-0111-4078-8cc4-563c28dbbdfb\index-dir\the-real-index
                                                                                                • Size 2KB
                                                                                                • SHA256 00216f4fc6312e8390f5968306ef52ad8801c4857e92993358771c3b5f6c5431
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index~RFe5d0245.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\994ed170-0111-4078-8cc4-563c28dbbdfb\index-dir\the-real-index~RFe5d0245.TMP
                                                                                                • Size 48B
                                                                                                • SHA256 424b0bddfe78faf6f870bd230c740045ad2ae3f572c77556bdbbdccda64387ab
                                                                                                • MD5 SHA1 SHA512

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                • Size 214B
                                                                                                • SHA256 8e0bc377aa518ed5069c4f62192cb3d8a9c1386a65da2d0358174589e676bc7f
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                • Size 241B
                                                                                                • SHA256 0f48e8f82aaad7801c207b4970621a63687f2291df21971234999794e7b1b530
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                • Size 239B
                                                                                                • SHA256 ce9dc8ac1d0d63ae2b2e74099dff948564bb892bfb1731302bc80755c86c68db
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                • Size 130B
                                                                                                • SHA256 8231ba79fd35de7464f6a48a9ba40e9f36e0d8e1e88a4c340d77870df2318f67
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt~RFe5ca550.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5ca550.TMP
                                                                                                • Size 137B
                                                                                                • SHA256 33e5529fadd9235c0c18568dae4a5a583255f72b36a078324e71f206bf1e20a6
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0495b831-cbd3-470f-a751-4136d066e0ac\index-dir\the-real-index
                                                                                                • Size 72B
                                                                                                • SHA256 4f5beac528906c1dd873c826d7f750d6d8ef42b3da77a726daf8bf2857703367
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index~RFe5cd2b9.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0495b831-cbd3-470f-a751-4136d066e0ac\index-dir\the-real-index~RFe5cd2b9.TMP
                                                                                                • Size 48B
                                                                                                • SHA256 ba773a6149f5520beeff8cddb31cdde071e0433fc0ca269fbebc887e6675558e
                                                                                                • MD5 SHA1 SHA512

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\70599668-79a8-4baa-bc5b-42404e70b9c9\index-dir\the-real-index
                                                                                                • Size 72B
                                                                                                • SHA256 40eef9de50c3d4321924ee86eba76f7f219008f38ad9bec3ba25c92ef241e362
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
                                                                                                • Size 1KB
                                                                                                • SHA256 edde4f7e83009089e486a26c1db7c2c50e1da8ef991e35527d31628352b56b52
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
                                                                                                • Size 3KB
                                                                                                • SHA256 c61d672c03be0283adf6780a968f5dbb18b890d2cca5c0b86d52c731eca2414e
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index~RFe5be338.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe5be338.TMP
                                                                                                • Size 1KB
                                                                                                • SHA256 8fdd9d456c743a41d2870427f2094cfc273b172b821f35ac3c37616ce0dcba25
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
                                                                                                • Size 72B
                                                                                                • SHA256 16dd138df8fa127836e438dccbec0859d1513a22d2c13a5dfef1236568639cff
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
                                                                                                • Size 72B
                                                                                                • SHA256 451ccd85ee3132a61fac47336851748f6a68e53080cd55609b9e31cb7db93997
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d418396d-e15d-4546-96ed-4056e4b4070f\index-dir\the-real-index
                                                                                                • Size 96B
                                                                                                • SHA256 338e30725d8bb85d277a540d1ecc0671f8f160b360073de72896547dbcbc45aa
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index~RFe5cd2b9.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d418396d-e15d-4546-96ed-4056e4b4070f\index-dir\the-real-index~RFe5cd2b9.TMP
                                                                                                • Size 48B
                                                                                                • SHA256 2f563e90a804228916fbe4537f95aca593842014a58cb086c2c4472a2be958a7
                                                                                                • MD5 SHA1 SHA512

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                • Size 624B
                                                                                                • SHA256 79b8fe23d5b0743e9b8298f3fab71ee782693c1b32d7aaa3ffd2c18188220166
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                • Size 619B
                                                                                                • SHA256 c630594a90cec8087e620893059597b4f6e8fa1a1a31394e1d80d35672058a68
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                • Size 371B
                                                                                                • SHA256 874db76eebfb02b8d45b85858835bd888b9208de0786bb3ea1bf2fb5256c3ba8
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                • Size 519B
                                                                                                • SHA256 53499841234036e17c6f4e0de9b95bcc0fbb5baa1e6a018d30f16a56d88857e6
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\907362a5-4f4c-4c10-84e9-8cd5b0219913\index-dir\the-real-index
                                                                                                • Size 1KB
                                                                                                • SHA256 981dacec77c3e8900da83d0e01506d7125370f61a141893d36dcefbdc80a0d9c
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index~RFe5dc007.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\907362a5-4f4c-4c10-84e9-8cd5b0219913\index-dir\the-real-index~RFe5dc007.TMP
                                                                                                • Size 48B
                                                                                                • SHA256 58c1a06b6341a63714e398bf2bd62b5052ae1e2e534aafd2e32f8825b3378f5a
                                                                                                • MD5 SHA1 SHA512

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
                                                                                                • Size 182B
                                                                                                • SHA256 4b52ab0dec77339ed91cf3c2e607e1b34efec4245c590b7499fa60292b6f65c3
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
                                                                                                • Size 98B
                                                                                                • SHA256 46a4b7b0e411c40d7340ce4a4005febf02ba5affa6e1f00508357c49eb9c1182
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt
                                                                                                • Size 100B
                                                                                                • SHA256 dc45e346c0445bd3bed049669d147ad6d411ace30a724a57f5fe1f8e576d6abb
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                index.txt~RFe5d6ce6.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt~RFe5d6ce6.TMP
                                                                                                • Size 105B
                                                                                                • SHA256 8fa3b859e5e4aab9b1e6a0ce5b15c5e6f8bc23cbc026e781c138e9fc8b685a30
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                • Size 120B
                                                                                                • SHA256 4d8d153561ee279d78c9619dd34da6992b0b40fdd15e8042a51b9700fc53325c
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                • Size 72B
                                                                                                • SHA256 dfe405c12f36ef9fe5b403661126b2410d88a058074275f9ba5c871ad5a218fe
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                the-real-index~RFe5c39b5.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c39b5.TMP
                                                                                                • Size 48B
                                                                                                • SHA256 ea3ef78331877783ea2c302b7e8a3e2d1e0592f2cbb222233b070821f465e3d0
                                                                                                • MD5 SHA1 SHA512

                                                                                                sync_diagnostic.log

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                • Size 6KB
                                                                                                • SHA256 de5beef1557a96595d7967b2e09d454948ff60d553542b20b69cb57e4c2e334c
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                OperationConfig

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                • Size 22KB
                                                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                OperationConfig~RFe590304.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590304.TMP
                                                                                                • Size 3KB
                                                                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                Local State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                • Size 18KB
                                                                                                • SHA256 d0d0805c6219fe8cd1df9ece53aed00e5f4933c69882be63984527a25edcada7
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Local State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                • Size 26KB
                                                                                                • SHA256 e400271e1b30d776cf8e8c924899651eb54c183f32d169e6536424bac30e29a6
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Local State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                • Size 8KB
                                                                                                • SHA256 e8d4d24068c49d28dbbd46c42f39f2018deb52ce6ed215e7e93c8534fc53678a
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Local State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                • Size 26KB
                                                                                                • SHA256 a41e5b98435728a8b2e5ed61b6656c9bc598d2512e423c5df7d40f4a2d6982a5
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Local State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                • Size 18KB
                                                                                                • SHA256 7528f149cf44aad68caac4303f54c8c5e30892d15595746ad41ac713c1c08a34
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Local State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                • Size 26KB
                                                                                                • SHA256 c35317f81776f319a21b4558b1813b62794fc1dbae6bb0fd59318006e7955c0a
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                Local State

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                • Size 8KB
                                                                                                • SHA256 9f77904a1fb12e82077bc2909ae18a6201882302a4fe647e8a559dcc93a41845
                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 761df9f0b480f249e7eefcdce2968407fb23105a07bf44b3dce39b5880cc4cef
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 2adb201e35f3739d3b3550d4c0b0937528662678c443ff34a9aa79b190a418fd
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 115d1abf656cffac03d2eaed95c019075fb7b685a39096318fb8b54450bdcaeb
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 205d854f16b7e965438767003c372c70fd361fc1e264caffa3d598e8aa0a6fe6
                                                                                                • MD5 SHA1 SHA512

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 2e29de13995329f33d485b3af51d0afa16aba8bb5a1fe4f362f08ea5edba513b
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 3e66dee325358aa065035f5a5ea31464e65809d40263ffe8f9717b3def1b5fbe
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 e1a8c5b096c43d629194ec4c72d53ffd9d034c06d92a77f91dd9f14c1c909d6f
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                RevisitationBloomfilter

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                • Size 392B
                                                                                                • SHA256 5aeb9b30a548cc92cd098b7a7db9913c3367ec13c36321c6771e2c7f6a4b7053
                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                RevisitationBloomfilter~RFe5bb8cd.TMP

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5bb8cd.TMP
                                                                                                • Size 392B
                                                                                                • SHA256 f9c9bb449f67d5b18a60a1969aea1f6ff1a9505b6bd00382cc46958006b82c29
                                                                                                • MD5 SHA1 SHA512

                                                                                                94709319-e9a3-4249-a6b5-446c9a5e823a.tmp

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\94709319-e9a3-4249-a6b5-446c9a5e823a.tmp
                                                                                                • Size 13B
                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                • MD5 SHA1 SHA512

                                                                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                • Size 2KB
                                                                                                • SHA256 35e5273b4d357fa48495501959db78330fcf1362ed5997f5ba5287b2eac5940d
                                                                                                • MD5 SHA1 SHA512 TLSH