Analysis

  • user interaction
    yes
  • max time kernel
    152s
  • max time network
    153s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    24/10/2026, 22:22

General

  • Target
    BDK-Steam-Hour-Farm.html
  • Size 284KB
  • Sample261024-2apthsev8k
  • SHA256 0043170430079d1a32b94339378d5fdc7b99c9b2bd3b1710458c7b5ca266f889
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 3 IoCs
  • NTFS ADS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of FindShellTrayWindow 61 IoCs
  • Suspicious use of SendNotifyMessage 28 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\BDK-Steam-Hour-Farm.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4200
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2a0,0x7ff8e588c188,0x7ff8e588c194,0x7ff8e588c1a0
      2⤵
        PID:4236
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1640,i,12721672013131285916,7694308287467473300,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:11
        2⤵
        • System Time Discovery
        PID:968
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,3258958504335555634,11375729130926738911,262144 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:2
        2⤵
          PID:2756
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,6731511834915783367,6062634860675409812,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:13
          2⤵
            PID:5604
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,2834460891028233477,13644800000227710437,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
            2⤵
              PID:4060
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,17590792677778388486,6192734043597180478,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
              2⤵
                PID:6000
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,15970920997120555380,11274460204375764114,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:14
                2⤵
                  PID:5760
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,17976650088227261208,11583121540808117270,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
                  2⤵
                    PID:2328
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,16620180331100648115,4175065142091271237,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
                    2⤵
                    • Suspicious use of WriteProcessMemory
                    PID:2696
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                      cookie_exporter.exe --cookie-json=1128
                      3⤵
                        PID:3572
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,9143924606040558963,751394739189123000,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:14
                      2⤵
                        PID:3976
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,9143924606040558963,751394739189123000,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:14
                        2⤵
                          PID:4708
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6320,i,2875828676443701649,11598160374708709061,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:1
                          2⤵
                            PID:3996
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,13587674398002323115,16205839759153540980,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
                            2⤵
                              PID:5176
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6716,i,9792326939139797784,17242864487161035436,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
                              2⤵
                                PID:1984
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,15320901534603196119,2011463563361443395,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:14
                                2⤵
                                  PID:1700
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,17201189186624164306,7531374341303872039,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:14
                                  2⤵
                                    PID:1920
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6940,i,1424899093993958949,17389569869345785008,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                    2⤵
                                      PID:4104
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7036,i,4777516408538821069,5568682276048168655,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:1
                                      2⤵
                                        PID:5480
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6792,i,14890068862979817541,468713478120337443,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
                                        2⤵
                                          PID:5500
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7128,i,16230783100773287423,4630693908952629836,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=1972 /prefetch:1
                                          2⤵
                                            PID:3004
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6952,i,8641387774529273566,18298412022362697470,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:14
                                            2⤵
                                              PID:3976
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6976,i,4483018065730629750,9700966503203844220,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
                                              2⤵
                                                PID:332
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7372,i,9317310311134453559,5237280823256131990,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=7376 /prefetch:14
                                                2⤵
                                                • NTFS ADS
                                                PID:4088
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7380,i,1573821431276953891,1076923721069540792,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:1
                                                2⤵
                                                  PID:1816
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7488,i,12288416280698912042,17610649421071093042,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:14
                                                  2⤵
                                                  • NTFS ADS
                                                  PID:5224
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7484,i,5947442531282411479,3301777774696131999,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1
                                                  2⤵
                                                    PID:4732
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,3553105698788370425,15116147561541749326,524288 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:14
                                                    2⤵
                                                      PID:2440
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8004,i,11337108374481027651,10879791298830431003,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
                                                      2⤵
                                                        PID:1900
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5592,i,14785372125296586512,3807672230801960780,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:1
                                                        2⤵
                                                          PID:6100
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=1984,i,15419930663856032571,11725568631247387742,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:1
                                                          2⤵
                                                            PID:5028
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7332,i,14188301800572869548,16316864472883654728,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:1
                                                            2⤵
                                                              PID:4344
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8140,i,18305799303019737177,17944543547001918666,2097152 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:1
                                                              2⤵
                                                                PID:2388
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5556,i,18428119117765796269,14195924479145206617,262144 --field-trial-handle=2052,i,5781274730918789136,17977521834810192209,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:10
                                                                2⤵
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:1508
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                              1⤵
                                                                PID:3740
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                1⤵
                                                                  PID:2308
                                                                • C:\Windows\System32\rundll32.exe
                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                  1⤵
                                                                    PID:2972
                                                                  • C:\Windows\system32\OpenWith.exe
                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                    1⤵
                                                                    • Modifies registry class
                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:2280
                                                                  • C:\Users\Admin\Downloads\BDK_Steam_Hour_Farm_v1.1.0\BDKSteamHourFarm.exe
                                                                    "C:\Users\Admin\Downloads\BDK_Steam_Hour_Farm_v1.1.0\BDKSteamHourFarm.exe"
                                                                    1⤵
                                                                      PID:4440
                                                                    • C:\Users\Admin\Downloads\BDK_Steam_Hour_Farm_v1.1.0\steam-idle.exe
                                                                      "C:\Users\Admin\Downloads\BDK_Steam_Hour_Farm_v1.1.0\steam-idle.exe"
                                                                      1⤵
                                                                        PID:4016

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            08424864-20fa-47ef-b984-e7a7f7dfd6d3.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\08424864-20fa-47ef-b984-e7a7f7dfd6d3.tmp
                                                                            • Size 27KB
                                                                            • SHA256 95dd3d178036d8e65db3dc90df546de0ccc4d799436298594016d805a9e6c765
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            09aa210a-1da6-4aa9-8b2a-8262495738a5.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\09aa210a-1da6-4aa9-8b2a-8262495738a5.tmp
                                                                            • Size 392B
                                                                            • SHA256 94b75b93b4df66d31955e3069e7f572fcaaecf5b7ae9989b8100779cc77ad015
                                                                            • MD5 SHA1 SHA512

                                                                            0e92be16-34ec-43ff-b298-4ffb01adbca3.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0e92be16-34ec-43ff-b298-4ffb01adbca3.tmp
                                                                            • Size 27KB
                                                                            • SHA256 a1493c82abf20cf8fd00cc93f0f59a255f893cd7476bd1a676f65bb46746725e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            24dfc448-a9cd-4474-af38-30ca87201193.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\24dfc448-a9cd-4474-af38-30ca87201193.tmp
                                                                            • Size 32KB
                                                                            • SHA256 477d39ab1351b92053296a1edf12b550e2fcb765ca237f47c6e8189a60417f64
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            2a1eb482-0152-419b-92f2-dd293fc30740.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a1eb482-0152-419b-92f2-dd293fc30740.tmp
                                                                            • Size 27KB
                                                                            • SHA256 64e41f4a82b1b4c4bf8767c7903665eb054f51d53d55fcd3ac261a1857e0768d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            316adec6-a378-429f-be86-a59b06ec1107.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\316adec6-a378-429f-be86-a59b06ec1107.tmp
                                                                            • Size 27KB
                                                                            • SHA256 261169dd70a5a290a04a7fb2b3b49d20666cb8b6d386f7559c00baa5c49e5a50
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            449f04f2-5753-48c4-8c0c-14b0a4bb722a.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\449f04f2-5753-48c4-8c0c-14b0a4bb722a.tmp
                                                                            • Size 392B
                                                                            • SHA256 c2a2a82e8c6ec42236438cec1ef488e6cc19bd264f315e976f589c8c7a444987
                                                                            • MD5 SHA1 SHA512

                                                                            49f341d2-095f-4502-a4c9-69972842badc.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\49f341d2-095f-4502-a4c9-69972842badc.tmp
                                                                            • Size 26KB
                                                                            • SHA256 4dc58bb1a726ee01e2fd7afe8978dd9ca3a3cbd6be0220d688ba1322b1099db0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            64437525-666c-40e5-a567-2063e058bb3f.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\64437525-666c-40e5-a567-2063e058bb3f.tmp
                                                                            • Size 392B
                                                                            • SHA256 a092c0b102d4417db2baf463d41a3fb6327a968f7966df529c1be33fa448367d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            75931ac1-6570-491a-8426-2ebd843e09e3.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\75931ac1-6570-491a-8426-2ebd843e09e3.tmp
                                                                            • Size 392B
                                                                            • SHA256 2d28f4eb03ab54d9cb41129f3e9adf2b5c87ebc5a9543e4a504bc2e8bf0f8a2c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            7e6a46ad-3463-49c8-aa5c-0173ff3b4532.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e6a46ad-3463-49c8-aa5c-0173ff3b4532.tmp
                                                                            • Size 392B
                                                                            • SHA256 63328c522a95ec6575f603273bac7f85ba0558167a8fd6018b1ab2505d2647cf
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            8cc5e11d-3810-4234-a949-b0eb98eed271.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8cc5e11d-3810-4234-a949-b0eb98eed271.tmp
                                                                            • Size 25KB
                                                                            • SHA256 fb6e206d3c22fe3cc51e9ca969f53e01321f5f38c063410f512fcf2bfa512d24
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 00fd53d4e341ca585361bfbe699a2c8a3fdbc255133db935051b0958a30a7abf
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 ef8e0a91cc3656fe639527b7c461215de3584a9b32168d8efc58c800c3fcf45a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            2ff20840-6e03-4472-8f51-b5a4e3400e17.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ff20840-6e03-4472-8f51-b5a4e3400e17.tmp
                                                                            • Size 14KB
                                                                            • SHA256 d74be358ac6b8c5011050be37673d02dc62a1ff1c2c2657dc4fb77362bb2cd26
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            4df4c52a-4ce9-4e43-bb10-7bd12b5074c2.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4df4c52a-4ce9-4e43-bb10-7bd12b5074c2.tmp
                                                                            • Size 18KB
                                                                            • SHA256 16f7f5df76529c97d8feda011f44d370bbbbc1a5e43968393ce71d99be0dfd61
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            5194f585-0413-4010-ab1b-29604be3990a.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5194f585-0413-4010-ab1b-29604be3990a.tmp
                                                                            • Size 6B
                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                            • MD5 SHA1 SHA512

                                                                            57f206e3-d5a9-4e63-b60e-1e49d0fa789a.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57f206e3-d5a9-4e63-b60e-1e49d0fa789a.tmp
                                                                            • Size 12KB
                                                                            • SHA256 85a7ee0f551908717efe9fe5a3935076e17b480ffd0a064f1894906f6c73b174
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            5a63f74c-b787-43c9-b05d-ea4ad90c3a23.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5a63f74c-b787-43c9-b05d-ea4ad90c3a23.tmp
                                                                            • Size 414B
                                                                            • SHA256 6f990a731f3561febde66e921782a332f2ed5e4cb0f63fabbc7d0e0575785fbd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            88c8a934-8882-4382-8e70-0b366df1da71.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\88c8a934-8882-4382-8e70-0b366df1da71.tmp
                                                                            • Size 14KB
                                                                            • SHA256 0f4639a06dbb9cc4d2a4d730de9d8dab1598cbceccc2f3c2b916840257e09ee2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            896e85b9-f521-42e6-9685-58640dbfade9.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\896e85b9-f521-42e6-9685-58640dbfade9.tmp
                                                                            • Size 17KB
                                                                            • SHA256 c14d505a105481e43aaf2ecd154bf00f3a5eff5e347ee03e96248ed0902a7084
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00008c

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                            • Size 27KB
                                                                            • SHA256 f517e3c6facb8c02c6d4598e03aa12e148a20d36c7913b9bbbaeae9289b1569d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00008d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                            • Size 120KB
                                                                            • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00008e

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                            • Size 31KB
                                                                            • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00008f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                            • Size 101KB
                                                                            • SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000090

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                            • Size 239KB
                                                                            • SHA256 bf4a68d6c736d7ea8dc9967c378b4e19bd60053cf0e5c400af4a92c64d334892
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000091

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                            • Size 45KB
                                                                            • SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000092

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                            • Size 611KB
                                                                            • SHA256 bc7272745c77ab02c606b72b922878c5ca9c4869b3d4eddffa3148eb70192ecb
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000093

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                            • Size 102KB
                                                                            • SHA256 20bce100e19acab922d5019ee55c6dca965b584b716e0e3479990bb99ca89aef
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000094

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                            • Size 120KB
                                                                            • SHA256 56a1a84a7988e317043fbdea13ea9b37d584002192a9e87368941f9bec070991
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000095

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                            • Size 16KB
                                                                            • SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000096

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                            • Size 20KB
                                                                            • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000098

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                            • Size 71KB
                                                                            • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000099

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                            • Size 36KB
                                                                            • SHA256 73ab8b2905a87ad861c032cbec7c56dfbb7edfa4ef9fc06aab056a37e4e6f09d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009a

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                            • Size 127KB
                                                                            • SHA256 3130734ea42f13a59af1154e29bd1ad970468295ab5d11186b8ef9f15d6a5bc6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009b

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                            • Size 16KB
                                                                            • SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009c

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                            • Size 23KB
                                                                            • SHA256 523593dcb39470941570b5260c68108d06376205ccb358925c5c1720aca7802a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                            • Size 16KB
                                                                            • SHA256 71560d451ec7c26865bd311c2dd866bd589cd7c8db7249bb4da38c88c95f79ea
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009e

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                            • Size 33KB
                                                                            • SHA256 e8e5b597f340afda078bdbd677a57db88a7531e95c9504aa65560678fc2aa023
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000a0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                            • Size 34KB
                                                                            • SHA256 9c97edae08844b4e106a5cb38fb49c37232e942e8e1a000332e85840c0eb2cd0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000a4

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                            • Size 20KB
                                                                            • SHA256 4433076939bd87e83d9910dfec4cba297c7dbf3881626fda3eb8e66dc5de6866
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000aa

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
                                                                            • Size 17KB
                                                                            • SHA256 f329e1ce9c8f7fcdc2d391533bb940bc2731de4d7238697daa9fd01fb1b21b99
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000ab

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
                                                                            • Size 39KB
                                                                            • SHA256 cd522e57be6d484abf0ee0b34a98b46cec33ac240df81363667ae993ab7f9d9c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000ac

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                                                            • Size 192KB
                                                                            • SHA256 e0e99bb4037d8a7e73135e59d708b5b4e16e09ae335e87c0581ba348dba8cf2b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000af

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                                            • Size 47KB
                                                                            • SHA256 b3475e2c99bdb2c9725265de329aa1fc7c6175070ea3a5d41b22488b269c563f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000b0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                            • Size 30KB
                                                                            • SHA256 053940e89e81a3e6755944471c54c280c0dc0c059a2668f9c8cb9f242a5519a2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000b1

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                            • Size 73KB
                                                                            • SHA256 79aaa6be7a0f87282ead2553144b5614d736206e56b7659621a75aeb61b2a9e7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000b2

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                                                            • Size 43KB
                                                                            • SHA256 e1cd9e55dc028cb3af0d1609c512ff2e031877c5071a52045959b3a0475378b5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000c4

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                                                            • Size 93KB
                                                                            • SHA256 eec141cc11de279c83615a1adc76567120692436669ec952bb4114b4586dab2a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000ff

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ff
                                                                            • Size 37KB
                                                                            • SHA256 2a9ac8d739fb1dab6a4c649b1b773410c9f954208b27c3faa8fe95277ee7d53d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000108

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000108
                                                                            • Size 121KB
                                                                            • SHA256 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000109

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
                                                                            • Size 119KB
                                                                            • SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00014f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014f
                                                                            • Size 37KB
                                                                            • SHA256 9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00015f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00015f
                                                                            • Size 114KB
                                                                            • SHA256 e975de0b881da4b3e4330a12c8361e522f63fd8d85764798c2f2c870e4119f49
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001ad

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001ad
                                                                            • Size 60KB
                                                                            • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001ae

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001ae
                                                                            • Size 68KB
                                                                            • SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001af

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001af
                                                                            • Size 19KB
                                                                            • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001b0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b0
                                                                            • Size 63KB
                                                                            • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001b1

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b1
                                                                            • Size 45KB
                                                                            • SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001c4

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001c4
                                                                            • Size 346KB
                                                                            • SHA256 0f8a0722302d1b8e1050f1c7882af2c0feb056752c3feddcc0b4316891d60d44
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001c6

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001c6
                                                                            • Size 54KB
                                                                            • SHA256 933f63bda859241008d41c684a59ef737e79fbf0578b235ffc0d0d885eece2e4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0001c7

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001c7
                                                                            • Size 27KB
                                                                            • SHA256 7755b27390678d2d72e4e20722e37d56386d8f01224e625d67bd4404f43600b8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            1fc2a84f88c9b2af_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1fc2a84f88c9b2af_0
                                                                            • Size 324B
                                                                            • SHA256 2785a7b2879efe30bb1c506df75303cb751dcb632e93007138daba5ce5960a48
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            3fc54b8acde9a654_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fc54b8acde9a654_0
                                                                            • Size 12KB
                                                                            • SHA256 aeb0d569d3e6117a9594c10558227afee01f20f400d95b1b9e59d89d8584e2bc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            50a7520f666af8ee_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\50a7520f666af8ee_0
                                                                            • Size 309B
                                                                            • SHA256 ac9be832f06797f69b86f3476664a99a7734f2bd6f88ea788f41d1e46d42d01f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            56d792eea8fef3e9_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\56d792eea8fef3e9_0
                                                                            • Size 5KB
                                                                            • SHA256 1dcaf5ea40381fb5ecd0dec6562d4245d831ff994e4503a0788bd38ad8a96788
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            7510febf1a1e6890_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7510febf1a1e6890_0
                                                                            • Size 3KB
                                                                            • SHA256 bd4a19372856a95baf47b9c31cacbadde0be871d846dc86d98475db43a3a7ba1
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            940eebdd8f670f0c_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\940eebdd8f670f0c_0
                                                                            • Size 332B
                                                                            • SHA256 5df850d795cdb2c76c232d7df2309ce5b51089daa12c2675748b584855b8815c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            bb466b24f4dd3207_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bb466b24f4dd3207_0
                                                                            • Size 14KB
                                                                            • SHA256 f3a3d5d8f05bdc7f5bd2dccdb11c7032ef39b8a2797c5496d9dabaa606eeef47
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            c9af0664411b442c_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c9af0664411b442c_0
                                                                            • Size 5KB
                                                                            • SHA256 49ef76fee6317240e340d3f241fdb879aa77aa7cb59a6c51bd0ff6a64f03914c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d1e7e200d8f66273_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d1e7e200d8f66273_0
                                                                            • Size 3KB
                                                                            • SHA256 80416242f32af04eb6a5fdab9942e2397cf51d44230ffe916aa8ebf9e8a76c05
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 6KB
                                                                            • SHA256 26a8c00e32151ebd22825c2143b57974da6372b13aedb061e18fda753c7e1b9c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 3KB
                                                                            • SHA256 79ca49800ddf9072fb1742af870769d61caca0cc7bde8c852be2138a0a5449e3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            f29aae15-e797-46eb-8c66-79353be47b2a.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f29aae15-e797-46eb-8c66-79353be47b2a.tmp
                                                                            • Size 2B
                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                            • MD5 SHA1 SHA512

                                                                            7fcc2d9d-8e42-4ce1-9622-6de90d45b662.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7fcc2d9d-8e42-4ce1-9622-6de90d45b662.tmp
                                                                            • Size 40B
                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                            • MD5 SHA1 SHA512

                                                                            c6d3751c-222b-4801-9e0c-ea4a55ec6c3e.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c6d3751c-222b-4801-9e0c-ea4a55ec6c3e.tmp
                                                                            • Size 1KB
                                                                            • SHA256 f6606a55aa561cb566e047c5ad615c1a7ad723e1b5bebc1085f03b2941653d01
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            d16cd1f7-da48-4307-99a9-86f5208ad371.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d16cd1f7-da48-4307-99a9-86f5208ad371.tmp
                                                                            • Size 6KB
                                                                            • SHA256 2b4c80de5357a70a64d54f3198b6287dcfaa59fc86016a19a4c8b5dc82b2b9a1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f1c766c9-98b4-4ca1-8cf7-2830ab512a3e.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f1c766c9-98b4-4ca1-8cf7-2830ab512a3e.tmp
                                                                            • Size 1KB
                                                                            • SHA256 b4e7d60bfd42e33d126b4c21626873fec221add211a0cbf76d4d340bfb30f3fc
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            fb94ef40-f804-4541-9581-fe1a7766c0b6.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fb94ef40-f804-4541-9581-fe1a7766c0b6.tmp
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                            • Size 11KB
                                                                            • SHA256 b98213c184da1688e6dce98aa4efa6ffc57c8cb85d9f0c234d4d5f5c4ccb0375
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3655f330-f620-444c-9aa8-5eb8585d86dc\index-dir\temp-index
                                                                            • Size 2KB
                                                                            • SHA256 bbc07e8c9410bd561e5d806b8268ca18fc8d800b4849207e02e25f4087e8d21b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3655f330-f620-444c-9aa8-5eb8585d86dc\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 3cd575266bced563aed6e455f408c9c94a90ab1737111e0b19779439c359f396
                                                                            • MD5 SHA1 SHA512

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7b6272ae-1c5d-45b9-8a17-12714adebf0f\index-dir\the-real-index
                                                                            • Size 72B
                                                                            • SHA256 c778f87b8802f12c45c72474911b6a4a1861dbe4eee10133a8636bcc8941bc0b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8d3db259-caa6-481d-b78e-c0b9fdbf21a6\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 e77e791d8c05a8971f7de488891aa569b0dd21dbfacc05bba433db7f56cc7d4e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8d3db259-caa6-481d-b78e-c0b9fdbf21a6\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 bafe71c11b14c28dbeb6cf6c4957a53163de9733aadcfd76776445a3dbb17df9
                                                                            • MD5 SHA1 SHA512

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b090b715-a817-4e63-95de-513a1d53634b\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 349a257fd1a0e507e6dcd57071f15960cc39d7099135652ba185fe48f35e9fc5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b090b715-a817-4e63-95de-513a1d53634b\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 aaed77fab0250150f5dc834fa86bc08374fa7998b5e7c51357a42695ea0df0e0
                                                                            • MD5 SHA1 SHA512

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d3bb4403-4629-4f95-9275-60cde5062f6d\index-dir\temp-index
                                                                            • Size 2KB
                                                                            • SHA256 608cb7ded1c8586162de6ab6e26b5e0eb618f2817119eafc73ec97f18e82a9ce
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d3bb4403-4629-4f95-9275-60cde5062f6d\index-dir\the-real-index
                                                                            • Size 2KB
                                                                            • SHA256 ad2474a452dc8805a7647b61ac96a7eb7ad1bd28b9a537b4efb0f1c807e89709
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 281B
                                                                            • SHA256 b7013ec5b4bba365dcba60f97b77e4e7113216b660806427f259ada4394810b5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 259B
                                                                            • SHA256 2a2dc47cd97299a69957b0257a2a833882a210eadc4c922d488dfca143dd06ec
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 161B
                                                                            • SHA256 5863be00070ab70a0a58f854b5848def57f59d21f90b36874618fff50927619b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 488B
                                                                            • SHA256 30069c4aa6feca2bce791b05b3023f1f264c52fa5cf1f5156f2d75ae0fdec706
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 399B
                                                                            • SHA256 b31a56fb28e620bcd61e230304856304939f5feb04c59a89165a58831919deb4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 386B
                                                                            • SHA256 8e276aab4d3812091e3733986c546c3b8a39d0ba0bf62b18d6f2bf22fed8da59
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 394B
                                                                            • SHA256 f57c21ac64f987acf284d3f156b1e60882f955ccb3ec6f84790ff51c5303a300
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            ba23d8ecda68de77_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                            • Size 171KB
                                                                            • SHA256 a750bf973936315286561afd8ac4eca3dad7e9098e97a92e6900cd97f59e6819
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            fa813c9ad67834ac_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
                                                                            • Size 178KB
                                                                            • SHA256 de69b82192b43af8e2c2d6c9bd110a2612f446d0eda8072d77916093bc15762e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            fa813c9ad67834ac_1

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
                                                                            • Size 232KB
                                                                            • SHA256 74e2fb12bab621c591e25284859bf9bdfa112504d1c82c3b2164b8673bab6a52
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                            • Size 96B
                                                                            • SHA256 a17e224f91733c77048e820848990e4d7552fdab12a61742d5e0169d7786b7a0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 963b9d712103881d01e1f559572db96411cffd216de684223986d4a72dfbb6a4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 9c75aade9c68ebe1e17633112157d0a1caf5b7c654364747d26bc58336b95ede
                                                                            • MD5 SHA1 SHA512

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 d22684ac6526550c29707369ff09ed78cacb57d74747ad5dd97120885f759c07
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            CURRENT

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                            • Size 16B
                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                            • MD5 SHA1 SHA512

                                                                            sync_diagnostic.log

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                            • Size 23KB
                                                                            • SHA256 33e8576df2aba79497b9db0df56eaef653b1e36c85f4ca2cb4726d916ebc6458
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MANIFEST-000001

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                            • Size 41B
                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                            • MD5 SHA1 SHA512

                                                                            bce21a89-3a9a-4070-a57e-979ded9b7801.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bce21a89-3a9a-4070-a57e-979ded9b7801.tmp
                                                                            • Size 28KB
                                                                            • SHA256 fab72c4fe3c99ab9934eee2cfcc91283a80567fca7823fdade8be2534bb752d6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            RevisitationBloomfilter

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                            • Size 392B
                                                                            • SHA256 7ff3191c7108baa2d8f6399c20556776e367e2a5d0c78e7bf15e8217134547ac
                                                                            • MD5 SHA1 SHA512

                                                                            a6eb3e31-28ae-461b-8c3a-fe4e9478dd50.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a6eb3e31-28ae-461b-8c3a-fe4e9478dd50.tmp
                                                                            • Size 392B
                                                                            • SHA256 26d9728525556268e79f3ed8d0661a54bcbaa8279147dd6444d535019f152864
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            0f71522c-a070-42c0-a433-52436d4a9e8d.tmp

                                                                            • Path C:\Users\Admin\Downloads\0f71522c-a070-42c0-a433-52436d4a9e8d.tmp
                                                                            • Size 12KB
                                                                            • SHA256 26e8599911a7a7124bb59f5211b65ef7ae6037fc5dfe06e996e727aaf17b052c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            BDK_Steam_Hour_Farm_v1.1.0.zip.crdownload

                                                                            • Path C:\Users\Admin\Downloads\BDK_Steam_Hour_Farm_v1.1.0.zip.crdownload
                                                                            • Size 304KB
                                                                            • SHA256 638e24fb430bf37d1af30ab47f65f3a555b797cea9444db2af31688bc22a4783
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            BDK_Steam_Hour_Farm_v1.1.0.zip:Zone.Identifier

                                                                            • Path C:\Users\Admin\Downloads\BDK_Steam_Hour_Farm_v1.1.0.zip:Zone.Identifier
                                                                            • Size 143B
                                                                            • SHA256 848974a161b60e54f4c8f4d6afe66b1f306468bc6f3edccb151266c6495a3edf
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            steam-idle-error.log

                                                                            • Path C:\Users\Admin\Downloads\BDK_Steam_Hour_Farm_v1.1.0\steam-idle-error.log
                                                                            • Size 158B
                                                                            • SHA256 0da1b6558dd0ce3ffb871a10aaa606b667f9000576e7b3f8a2a0cbf2004914c8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            memory/4016-1526-0x0000017BA3E80000-0x0000017BA3EC2000-memory.dmp

                                                                            memory/4016-1527-0x0000017BA4360000-0x0000017BA43C2000-memory.dmp

                                                                            memory/4440-1515-0x000001A6CAD00000-0x000001A6CAEB3000-memory.dmp

                                                                            memory/4440-1475-0x000001A6B04C0000-0x000001A6B04CE000-memory.dmp