Resubmissions

12/09/2026, 17:32

260912-v4lwdstwfy6

12/09/2026, 17:32

260912-v4fdls1fng6

12/09/2026, 17:31

260912-v3xw9scn7t6

11/09/2026, 18:28

260911-w4trnsag246

11/09/2026, 17:58

260911-wkajpayfnd6

11/09/2026, 17:28

260911-v1yqsa1tcz6

11/09/2026, 16:48

260911-vbabwsxdlb6

11/09/2026, 16:47

260911-vav7zazxcs6

11/09/2026, 16:17

260911-trlt7ahp216

11/09/2026, 15:48

260911-s9an7shl4s6

Analysis

  • geolocation tags

    nanew-jerseynorth-americaunited-statesususa
  • user interaction
    yes
  • max time kernel
    1752s
  • max time network
    1753s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 15:33

General

  • Target
    http://discord.com/login
  • Sample260910-sza7zstybw
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 11 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of FindShellTrayWindow 45 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://discord.com/login
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4280
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff90f1fc188,0x7ff90f1fc194,0x7ff90f1fc1a0
      2⤵
        PID:4816
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,13704581501535723826,12369965455805482306,262144 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
        2⤵
          PID:3796
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,14580423071623314001,3761736812259787496,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:3
          2⤵
          • System Time Discovery
          PID:1556
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,4982859312730034011,9190508557143389089,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:8
          2⤵
            PID:4072
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17699412445910979901,2728103838002644949,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
            2⤵
              PID:2116
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,7835219567038074141,11954366767751432349,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
              2⤵
                PID:3852
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,14080773633905723629,3992519253770719837,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
                2⤵
                  PID:2548
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,680043156989879328,18071693453025416473,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:2
                  2⤵
                    PID:4772
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3604,i,9599361195536794502,14033878381126104735,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
                    2⤵
                      PID:3032
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,11868386494658454539,5892746050280809892,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
                      2⤵
                        PID:1580
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,13034167645069280990,12883064223335300996,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
                        2⤵
                          PID:1736
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,11990568189647756078,14375567357434746881,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
                          2⤵
                            PID:3320
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,11990568189647756078,14375567357434746881,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
                            2⤵
                              PID:1504
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,61817782957582026,18098492566326576835,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:8
                              2⤵
                              • Modifies registry class
                              PID:5268
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,13877814497761734745,10380322605285427113,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:8
                              2⤵
                                PID:5260
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,9978936499559496179,4517682506853194141,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                2⤵
                                  PID:4492
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,9557112274708606690,8862402590096592575,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
                                  2⤵
                                    PID:2436
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,14676737068780801041,13272847843623426412,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
                                    2⤵
                                      PID:4668
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6820,i,13324389892405846913,14367517436955373122,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:8
                                      2⤵
                                        PID:6096
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4496,i,8881025704298838531,11644589728016042082,262144 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:5764
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,11244678536700243691,7152857516710302788,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:8
                                        2⤵
                                          PID:1132
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3984,i,367656938048104015,2339885894709103851,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:8
                                          2⤵
                                            PID:1876
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,7607552770910320633,6558604535068161129,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:8
                                            2⤵
                                              PID:2456
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,8142556026032710295,10584218391016214995,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:8
                                              2⤵
                                                PID:4968
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,11749974692737903926,13409330692337116831,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
                                                2⤵
                                                  PID:2868
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=paint_preview.mojom.PaintPreviewCompositorCollection --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,18209938179556853356,34871706520208864,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
                                                  2⤵
                                                    PID:4296
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,4872627254749725159,7789131082406580513,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:8
                                                    2⤵
                                                      PID:840
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5064,i,4200544841967367647,3242767217250889093,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:1
                                                      2⤵
                                                        PID:5708
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,4098708262967117724,3347657440117170549,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
                                                        2⤵
                                                          PID:5232
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=1516,i,8250220224258896932,9695598003656757645,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=7624 /prefetch:1
                                                          2⤵
                                                            PID:3932
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3340,i,4329804140383859717,15866823348464668453,2097152 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=7260 /prefetch:1
                                                            2⤵
                                                              PID:5156
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7460,i,17195721803385841040,14508724352774739583,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
                                                              2⤵
                                                                PID:1028
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7964,i,18224673011805592176,328017430884597214,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:8
                                                                2⤵
                                                                • Modifies registry class
                                                                • Suspicious use of SetWindowsHookEx
                                                                PID:5352
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,9127755779170321004,626313661035340125,524288 --field-trial-handle=2320,i,8711747469750736388,12514489093263471355,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:8
                                                                2⤵
                                                                  PID:4764
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                1⤵
                                                                  PID:4916
                                                                • C:\Windows\system32\AUDIODG.EXE
                                                                  C:\Windows\system32\AUDIODG.EXE 0x46c 0x514
                                                                  1⤵
                                                                    PID:2140

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LOG.old

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                        • Size 334B
                                                                        • SHA256 d0c995d1ec26e6f3f834f90f3a5485190072180c3385d37fe3dbf963bc9cecc0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LOG.old

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                        • Size 334B
                                                                        • SHA256 94e944b2b09f15bb5bd11e553836757100f09929d6c667c3cefc07a6925a36d4
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        f_000097

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                                        • Size 19KB
                                                                        • SHA256 dd450a828fe1acb553f1d4bc460a653934deaaa65ea5618a786a21a9aa6db4c7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000098

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                        • Size 30KB
                                                                        • SHA256 1230a480ea1b0580bbdcedd704381f8c22b625304a0694f8c82f269cf48d9516
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00009d

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                        • Size 17KB
                                                                        • SHA256 31ad0482eee7770597b8aa723a80fd041ade0b076679b12293664f1f1777211b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00009f

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                                                        • Size 101KB
                                                                        • SHA256 1e87f1ee8d03da0c822b9f8295170db74fc059bda009fc9f31299c123a5a79d2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a3

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                        • Size 41KB
                                                                        • SHA256 99f4122ee9ecd69a7904404a974ef594125b831cba01658acedf92d4db9e867f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a4

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                        • Size 46KB
                                                                        • SHA256 6b778a1df7828e6d755ab203a9c525ec6ba5763af2c0230221d5594678a906f6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000b6

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                                                        • Size 485KB
                                                                        • SHA256 7145b642dae07fb7818f7489f510e9f76a0991f83048edee2a0077eca26360e8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ba

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                                                        • Size 26KB
                                                                        • SHA256 404f67037c0f300ca0b71d584cd48908b533813daafb09b3a79143708b718346
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000cb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                        • Size 57KB
                                                                        • SHA256 695b66e6e7642be226192f3179077886e6e61af0e32663b39fb3a15d76459838
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000cc

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                                                        • Size 17KB
                                                                        • SHA256 dfaa8fc8e0ced4fac347077993c570a14eee125e6c253ff49e1be3908e290e2d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000cd

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                        • Size 33KB
                                                                        • SHA256 3f189fa3e72617b8c082fa496fa15b45907904282e663543365418dc09ff01d9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000df

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
                                                                        • Size 165KB
                                                                        • SHA256 87e9f6bef8c5d79c6dcab012068894f09fbcdb45a893940e91c8b2ece0ced57a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000e1

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
                                                                        • Size 66KB
                                                                        • SHA256 1361f44d6bf7a51c43d23ff75ea62aba326d9215205766104d2fdd01e32dc458
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000e6

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
                                                                        • Size 17KB
                                                                        • SHA256 4d44118df5a6cdc11bf22d4c9fdde327bae53bcd8f1c07f646de39229281cb49
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f5

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f5
                                                                        • Size 208KB
                                                                        • SHA256 b75df0ff908d952a2d808e00169f988eb63c3b620b49ab7624606d89fed25d81
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f6

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
                                                                        • Size 1024KB
                                                                        • SHA256 005eeeddc424ad04a201236117bcea6167956fef6a91f346e20f9148759074ab
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f7

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f7
                                                                        • Size 1024KB
                                                                        • SHA256 5a3c848712c8bf4c7248ee33aa105e84a0e2176ae966d34936dbe78d47ca93ef
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f8

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f8
                                                                        • Size 1024KB
                                                                        • SHA256 db0a0d9f7821fc80c5292e9c572a82fb1cd4a026c146bd15128ce08c6a466e7a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f9

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f9
                                                                        • Size 1024KB
                                                                        • SHA256 da1874b1c296b78bfa28ed1fcf64bc4cd41c8e5e6f53fc5df660854c64a01c9f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000112

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000112
                                                                        • Size 57KB
                                                                        • SHA256 454b9756537e80ce5639b95598a23839015fdd332feb446bb1fb5b5a1073ed01
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000113

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000113
                                                                        • Size 42KB
                                                                        • SHA256 5fa7a9b8a3a29ae5cc75bd3c53c2adec43c3f51abf3f67d0a5de5adad2d69d16
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000116

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000116
                                                                        • Size 348KB
                                                                        • SHA256 1cebf6dab91935547839a4ec1710a8dae76b70c8d2e11598a8f474ab6d7e4247
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000119

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000119
                                                                        • Size 16KB
                                                                        • SHA256 ca3366ada9de1a1c5c25e0e494fffdace974e1970a98dc3182c777240ca25304
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00011a

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011a
                                                                        • Size 234KB
                                                                        • SHA256 be5b09e5bd8c2f84095f4ff0a2cb0af8b87dbf00032b3d25bbd295dcd9d63260
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00011c

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011c
                                                                        • Size 49KB
                                                                        • SHA256 29cf56fda9ace0229072f96596c4b018963e58830981d525e0b1e71a1a4fab93
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00011d

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011d
                                                                        • Size 150KB
                                                                        • SHA256 ace9dec38407bb488a4f18a5bf18239c81de7b3cd729b1d3948ccb2349f1b421
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00011e

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011e
                                                                        • Size 28KB
                                                                        • SHA256 3e995a411944311d4d318143819ce2d6623bb74c0fc162d6726e0377c3c31a4f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00011f

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011f
                                                                        • Size 31KB
                                                                        • SHA256 30a5f97c11ce0890ca79c2be322eb1aaee768a150119d9e093617e5272322bfb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000120

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000120
                                                                        • Size 16KB
                                                                        • SHA256 1de0799177970db6c3dd7a2cdc8484b90212618813adcf278a91501b9b2a6a15
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000121

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000121
                                                                        • Size 115KB
                                                                        • SHA256 16907dd64826c31ed792ffe1274492445539223193932fb01407ecbc8853d874
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000122

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000122
                                                                        • Size 110KB
                                                                        • SHA256 87930b2da2df71f298a85e098cc92b9f1a96dd6fb4ed301f09873ce64cd73988
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000123

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000123
                                                                        • Size 202KB
                                                                        • SHA256 d25cdd109b0fcf781663dccbd3429aa3fea1d01cc0ac7b389b58ebd6bcb3606e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000124

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000124
                                                                        • Size 250KB
                                                                        • SHA256 2d3046033200f823557e43e2740ea3c47598c76c53781b46c0e102801c4547e1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00012e

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012e
                                                                        • Size 1.8MB
                                                                        • SHA256 0afcd9a58a70d27dea9a485be2b2f6724cb287aa428c0f472229b94f47b7f89d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000145

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000145
                                                                        • Size 71KB
                                                                        • SHA256 82ece993b63c85457b19b0adfc2fface292b4d79be2ac6a6604ca1044f19c8b9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000146

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000146
                                                                        • Size 70KB
                                                                        • SHA256 924257f4b2c2afbd5ecea6fcf6a9347626681478746ccf8cdb2ff9358ebffcc7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000147

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000147
                                                                        • Size 77KB
                                                                        • SHA256 c660dd5bc5cd3f8a8fdbefa78a94badff7ed22dc97e053d87b123b8f57db6fce
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00014b

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014b
                                                                        • Size 69KB
                                                                        • SHA256 c12ea6c50e2294738ac8f6c9731b832535e72bf185b57398fe9a551c2074181a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00014c

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014c
                                                                        • Size 69KB
                                                                        • SHA256 73a345b79ea6243250235790518101cbe19c1bbebb2e0bf8df68050fd09cd60a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00014d

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014d
                                                                        • Size 490KB
                                                                        • SHA256 f088751bac18ec4885433265bd40d4d4821160f54b9406d4ffc9231e0dee242d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00014e

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014e
                                                                        • Size 507KB
                                                                        • SHA256 1fd3d740ebd197de81dd2fba81ad4e03a7a1ae3d682b2b987f12d6c6a4a71cc8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000150

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000150
                                                                        • Size 566KB
                                                                        • SHA256 7f230ab4300675c3998ad1e08a71a9a5275bd30a9d2d346724610252f7649f94
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000151

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000151
                                                                        • Size 210KB
                                                                        • SHA256 5d72aea8c9996aa15bdbeff86b66168cea4082560b4d6e1a3df1a0492c4050de
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000152

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000152
                                                                        • Size 2.0MB
                                                                        • SHA256 865c83723325b76bd65a7ec0f09ec10fea1a395ec983f1a5876aeff2acc53606
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000153

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000153
                                                                        • Size 303KB
                                                                        • SHA256 956e46ea37ce6e5f0c81a8ad8b0f1d4a143f2b4ac1e534e96fce46d2d040f92c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000157

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000157
                                                                        • Size 11.7MB
                                                                        • SHA256 7f188ac884fdf66b65fac650b0e634705f172f2a799e99f32221b92ab5fdac42
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000168

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000168
                                                                        • Size 65KB
                                                                        • SHA256 3a4383bd6613a47c91dbf1ab97f451670243d1f27962295d44e826a5ae0b9e7f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00016e

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016e
                                                                        • Size 361KB
                                                                        • SHA256 aaccf442ac97d96f374d0d515b5216b400713ecc0db2f8c7daa257f43e058a72
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00016f

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016f
                                                                        • Size 381KB
                                                                        • SHA256 781d80bcc8a9ba58cce8af71e96f73150c77db00d0f023f7e24b33d2278e001c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                        • Size 25KB
                                                                        • SHA256 ca4174b396438203bcc87add034e8c7b7914eac218c242a3ef652e9a99b89e5f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                        • Size 25KB
                                                                        • SHA256 df6910dccaabe77cba1942a9cc13995ee67ed08cbd5d8fe8ca24833b15c8f844
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                        • Size 22KB
                                                                        • SHA256 7c7b384d1158e0da6e87ddb7de0f3b438ca2e1ba35ca83c58fe68a1af73886ae
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 5KB
                                                                        • SHA256 a577cd9a3289a6baf3f77a1d9a63161eaba149f7afa7cc824a5bbdb09b7c4aca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 19KB
                                                                        • SHA256 45db2d70cdaafc5f44fb3f659278503da2d593df140e348f6c7f7bc998b8dd4f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 20KB
                                                                        • SHA256 30e4a16822cc677a223b803bd7dd8344299b9cbe4b8876728b86ce9d66641225
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 21KB
                                                                        • SHA256 455212ed015f95eb2325dfd4e3c441edea90bfbc85ac46d4c12d051bb5804230
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 21KB
                                                                        • SHA256 556250e3fe5b2c8f72d94af51bfb87aa4101da9cc9d34b136e00de4a189e975a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 25KB
                                                                        • SHA256 5075c90cde6a29d9ad0101162458bb42c5e734b7ec8eff1a0fbf52610158d461
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 22KB
                                                                        • SHA256 d426d0415de190d652b3f33dc78d04caa02be4163fd27d3158822c09d324e8ff
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 21KB
                                                                        • SHA256 7a5910d9a748d279ffa0accd84eb0b276925ce68f3655e1e56c47c9bd05e9cd2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 25KB
                                                                        • SHA256 8b2d0346156b6a71ebb7d80ba736bb225d586ca15b953b692036a8cd2fcb5880
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index~RFe58aa74.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58aa74.TMP
                                                                        • Size 3KB
                                                                        • SHA256 772bf937e1272d473c86e1785f9b21d89516c8bc4b96a371eedc6c9c9a167afc
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                        • Size 96B
                                                                        • SHA256 ce059f7547b12fe4c5200e46f2af4c4d3807da87f29309d28d03f145a22c579d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                        • Size 192B
                                                                        • SHA256 48d9e046805922f0288d4e28fa0298e45d50f49bb2046040e2ea89a46c8cf91f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                        • Size 144B
                                                                        • SHA256 5caee0688d1313ce4ba8b611fa10ff824cdbc755cef1b8428d13da7b67dce0ce
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                        • Size 216B
                                                                        • SHA256 52866c7a6cd1421774c9dfa0e5098996eb240025d6ffba1d6b442997a92e1961
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        SiteList-Enterprise.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                        • Size 2B
                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                        • MD5 SHA1 SHA512

                                                                        Edge Profile.ico

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                        • Size 70KB
                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 3KB
                                                                        • SHA256 f4c5e3caf8cc1e3ff768818c652e4e3269eec0a1a04514554e37ed794c15ee45
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 111B
                                                                        • SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 4KB
                                                                        • SHA256 8f608a8614743d6be1e709b57c1c224ba1b98267dd01afb3ee3c88d21573b53d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 111B
                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 4KB
                                                                        • SHA256 83bed4eb5d5222ac3a2ee851f7668e938bdfcae70006a91227a2fe4e5bca2665
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 3KB
                                                                        • SHA256 7cfbf7ffa2ef8fe0e6974da882b61506324b02846a949828e45d9dde0fb7b9b0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 4KB
                                                                        • SHA256 2432c780076363ebab0ece31d51147255fc5a77886433e3c7eb47abda4e36759
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 4KB
                                                                        • SHA256 f79fe23a9313dad46796a30909c69445dcfa6202f6780bec7cbd1f8135f9862e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 4KB
                                                                        • SHA256 189436243131f78b846ca1ad36e039253f808e143c87b7f042a51ce8635395c5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 4KB
                                                                        • SHA256 e69228066d67974906eb55b672c7747b235cc781f2affdb646ff2b9658ba01c0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 3KB
                                                                        • SHA256 df1b0a3eec3d154a1f559f2431c190dc3ca3c4029095ba91ec8e96e52f9a1fa3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 3KB
                                                                        • SHA256 6977a962de4a60978232a5c5c04240b107e13de95985a2ccf83b91edff804536
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 3KB
                                                                        • SHA256 8811c762850047c258797231ef8b8331b0b7ac040f2ca5c8104d066adf57886f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        SCT Auditing Pending Reports

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        TransportSecurity

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                        • Size 1KB
                                                                        • SHA256 26398cb03c65164945cd441d8ee71744cb4313bb6bf17486f3940802911a507e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        TransportSecurity~RFe6a9f60.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RFe6a9f60.TMP
                                                                        • Size 1KB
                                                                        • SHA256 2ecc235ae1a385aa3a93f22172986dc8365eb7ab9346f888cbb7b87a3ec96436
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 10KB
                                                                        • SHA256 35acdb4a5a99c48ecf080dc74b088c65132bc0eafa2f2a4ed04823db4f2cf4f8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 9KB
                                                                        • SHA256 c4a7f0e662552b762b0558c3f90c6c30fc1468bfa76e3bcb06dcff6a10df5c67
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 10KB
                                                                        • SHA256 5aa568abb25876a0004021aa41c9a55d98c348d17ae8d176d1bd91839339e99d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 10KB
                                                                        • SHA256 fdae1dd939ef5c6782606a384f0a8816d2f2d53520ca8f58baf09e158640bfee
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 10KB
                                                                        • SHA256 048024f302a399037c9d51fe1e60e4354cf1d75cb4efa058fa13babf6cdb5f06
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 25KB
                                                                        • SHA256 ed4f2f05b5192113e74557c50a6f917bcfb23330a5b5cf6448b9f2bfff5fa3c4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 25KB
                                                                        • SHA256 1e6db4f0ba60f04173dd2581619dfa4c2e6415f5cf905e5dfd1d5c04f691ff0b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 25KB
                                                                        • SHA256 c1a156de9dfc4d37070a4acb12aa5f1bfd978c331785906b2f3084a82186df0b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 25KB
                                                                        • SHA256 9871efde220929ee924233b4a3f04160bbfc401bdca27886e487de018aa63b8e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Secure Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                        • Size 27KB
                                                                        • SHA256 87af6ed557e1179c354cb5474b30b0b61341cd7459f683f8afd36c41c12e63d1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
                                                                        • Size 1KB
                                                                        • SHA256 d7afeab9a1ff17daa5388130a06bdea0beceab4311925881dec2ad9ce35b6812
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5cedf2.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5cedf2.TMP
                                                                        • Size 1KB
                                                                        • SHA256 06ccc7a8d2fe54c4001b48839fb9bd9bf92264dbd56fef6fcbea9dd70a31dee1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                        • Size 371B
                                                                        • SHA256 5ee01528dfe041ac332d549a75297dac7c61a291cdeaa57aeb2cbb943994fbab
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6cf88c32-4d83-4e60-bea8-d9f4c2ae5758\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 b24f8c75d326cf5962b49814d730f17284ad1c479335d483d420ed5cddf0c076
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe594bb5.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6cf88c32-4d83-4e60-bea8-d9f4c2ae5758\index-dir\the-real-index~RFe594bb5.TMP
                                                                        • Size 48B
                                                                        • SHA256 c27883924544c59278c90aac5d41ec57486232506ae4f316895c210c804f1d42
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6f0c8d98-e609-4293-b9dd-75d9797e9391\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 0b5c002a5a2778865d66e9bfde6609f9c0117581a114ac8b25526d9cc39d3795
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5976fb.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6f0c8d98-e609-4293-b9dd-75d9797e9391\index-dir\the-real-index~RFe5976fb.TMP
                                                                        • Size 48B
                                                                        • SHA256 4f580d4b178d3103638f8b88a2a7455b160fc321311cbdc8dbc52d8cb735755d
                                                                        • MD5 SHA1 SHA512

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                        • Size 229B
                                                                        • SHA256 53bf3baf689b734dcd029a68ca4031095dec12ab81c66e42a2ee145e109f9680
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                        • Size 233B
                                                                        • SHA256 5a3199f9cb04ff89eea7cc8b79f24876d27fd9bcc9408edef1090351c091db02
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt~RFe58b726.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe58b726.TMP
                                                                        • Size 138B
                                                                        • SHA256 42823b7861cf286fdea4ff665782cf219fe66bbde2a7dc7f56f59858d3d2623d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        sync_diagnostic.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                        • Size 4KB
                                                                        • SHA256 f7880050c19c96a1dee1e2d2d2b323f7cd25bba924b732d1573885697c95bde6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        e90ae748-2c19-44dc-95fa-41749cc53e71.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e90ae748-2c19-44dc-95fa-41749cc53e71.tmp
                                                                        • Size 22KB
                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 18KB
                                                                        • SHA256 8e2041a6b7ac52d583d3de13adf8dde210d14daca6fb581441e67981391ca2e5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 18KB
                                                                        • SHA256 e773a592cb29350b250b64b2d986fb8bf4752c6db672932e995343fa08886993
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 18KB
                                                                        • SHA256 e8ccdca71c3beaec8dcb9a563655c3a17521ca437189f595a236ec489b440a7a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 8KB
                                                                        • SHA256 a2ad48fd7cf3f8093393ff18d6fbbaec1926baf51dd58365b359c03defbef7d5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 26KB
                                                                        • SHA256 135781d55f9ea63760d167f3d70c032443a86c812bff6a6dc0db86b5d9030e58
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 26KB
                                                                        • SHA256 2f75b778cec92a7f96842800b3f62054a07b2b4aac10669e012f0087c9eb87cf
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 18KB
                                                                        • SHA256 41e7dc19983906995d3fac2e8aa26db4dc74f0881ed34a48d98b60cec00bc2ee
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 26KB
                                                                        • SHA256 4426eef3ddb348a0862f78a60f6281241f3df20b633de179f88cf91ca4fd1138
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 26KB
                                                                        • SHA256 a459fd2251a1fad65abd8c8583047d34ee540c45e0a19e142a9aedafc879e490
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 8KB
                                                                        • SHA256 315a8c5d3114556884eaa74d50e6c60aac287224ca96733e197423e20e6c1cd4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 b517f1885056f1d9db6639ce4f5658d4eaed22aa67b16d82b790cfa95a032e84
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 9e39bb90ab725502d7ef58618281275f87ed37e938a751f706a668bbb3b21824
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 bb34f21d75098b276e1eef38c5c13d9b725d4070f8c0fb8d5eb13a72149d9da3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 0fa8b9be4e951e6a90d4af62ecee44d64044e47f887a6e15f395e169f6946d24
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 d33bd87b1a991bf6e0a38a7a6ed9a5f630131e35a5d351b0f80cca4d1a7fe123
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 debdf07381bf402b43ec92c22bac39ac9d3d21fe5f8c75813aa4efaaace40fe1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 7aa2e0186d00e3dcff13953cc91d13069502849ef4a61b79fcd90bc5dd1a14ee
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 af6214f543755aa125fbfa2cb29ddba5015d83626c40c11b0a719ccb18d7a0cf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 c875fdfc29d64f291035a5c377960fcc444b9d72582a7d07ae6ad07c7f4c2e98
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 175039af6bbf16ef4430dcfce9106f331f812b9f11da2b0f71487e6fd0d1dc5b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 bb27eba87d4034b48d5d03d916dbb4b9d926678480c152a1414a82b3b4246617
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 66bc85b7e2e5e7ca575b34d8289415e9c7bbbe82e43492ec2272fc2e48434139
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 fa39d8f031d88a5fad327efea9d02e0016186a849ac3ac9a60471e886c65118d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 2085efb4191250b89c8d3270948cd7ba70fb8b89244b78f0b0a6f1ec6a4fb4b7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 8bcd357be5e44ef7e73513a3444a8cde700bc1d28f22daf2302f4194b8774e22
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 70dca78bfbbf6e8ae33917fb342c6fdae563c95fd384651aae460f0ca9b627b5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 1aabea22e47245068e0d23a35bc2318d4900ecfc7d961bde6ac9b2d1bf72a765
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 dfe59d31f0c15c66cf15c009f4808a976c892c61b9a43cd1a49e46e28cf03262
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 72204d81796d2a6435020e1c732a937d90a23fe48a82b6d2ac0342eb6297c4ce
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter~RFe595f1e.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe595f1e.TMP
                                                                        • Size 392B
                                                                        • SHA256 2081dc5c79bc7caac6791d053023ad59429a9f8b27f50bb46fb3304c8702fa21
                                                                        • MD5 SHA1 SHA512

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                        • Size 13B
                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                        • MD5 SHA1 SHA512

                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                        • Size 2KB
                                                                        • SHA256 365b24cca79cdc265bb9ff971945b61b64ae798e4bcb1e915635d8b531fe0d45
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        default.dic

                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                        • Size 2B
                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                        • MD5 SHA1 SHA512