Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1763s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 13:51

General

  • Target
    http://accounts.google.com
  • Sample261027-q58pbsdf97
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://accounts.google.com
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:928
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffb83f9c188,0x7ffb83f9c194,0x7ffb83f9c1a0
      2⤵
        PID:1452
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,170143981960641225,14602638502801115429,262144 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:2
        2⤵
          PID:3348
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,8433954210848399476,669238375986344387,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:11
          2⤵
          • System Time Discovery
          PID:2892
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,7193688583873528834,12735947627124209163,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:13
          2⤵
            PID:5984
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,5139900842047663066,2706632580289762536,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
            2⤵
              PID:2184
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3620,i,17005112729202250199,15724650547674150970,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
              2⤵
                PID:4924
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4340,i,4685623342417918178,14506295358422921702,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:9
                2⤵
                  PID:1724
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,15446412794451029094,13402205579605829854,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:1
                  2⤵
                    PID:4200
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3856,i,8035324332928366482,10148053245360914693,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
                    2⤵
                      PID:696
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5012,i,6921808369920309422,7846636205528405859,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
                      2⤵
                        PID:3440
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,17836265281223108725,12250544914984184536,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
                        2⤵
                          PID:796
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,17933749106425241872,2600678853237423033,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
                          2⤵
                            PID:3820
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,17883332696253806227,690469593880208061,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
                            2⤵
                            • Modifies registry class
                            PID:4112
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,1958220515586346670,14252007621630356194,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:12
                            2⤵
                              PID:6052
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,2434926981098601525,3125609165610863385,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
                              2⤵
                                PID:3868
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,2434926981098601525,3125609165610863385,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
                                2⤵
                                  PID:3684
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7112,i,14294584996492341823,14679166607787115462,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
                                  2⤵
                                    PID:5144
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=164,i,16005547540321512483,2397026808252597072,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
                                    2⤵
                                      PID:4088
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4320,i,13692203423721640225,7600619072956662557,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=7288 /prefetch:1
                                      2⤵
                                        PID:1156
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7456,i,10728089957867329491,9232232190465620216,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:1
                                        2⤵
                                          PID:4956
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,15947730875214153800,11026585278866930145,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
                                          2⤵
                                            PID:2132
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,7452765868940755883,8464533221070913765,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
                                            2⤵
                                              PID:2328
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,15805271800405238208,15866117528613706862,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
                                              2⤵
                                                PID:1172
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2088,i,12665355837403762059,3935723219457270843,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
                                                2⤵
                                                  PID:2200
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5940,i,2699234905463934742,15917938011620869193,262144 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:10
                                                  2⤵
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:5948
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=2796,i,14702225805901017586,2885141805842734919,2097152 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:1
                                                  2⤵
                                                    PID:2436
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,15674766354924138866,17692801246909762821,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:14
                                                    2⤵
                                                      PID:476
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,5013412024281337992,17543505771147530331,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
                                                      2⤵
                                                        PID:5616
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7796,i,1269689664602693596,8257571787357623767,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:14
                                                        2⤵
                                                          PID:5404
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7544,i,2754434802836261937,16663961418693299773,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:14
                                                          2⤵
                                                            PID:5956
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7536,i,11230473393724164125,13945858977345084065,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
                                                            2⤵
                                                              PID:4584
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,3805839465808600838,11742848360989755852,524288 --field-trial-handle=2500,i,3404769017932031746,5932855383769969477,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:14
                                                              2⤵
                                                                PID:3192
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                              1⤵
                                                                PID:5968
                                                              • C:\Windows\system32\svchost.exe
                                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                1⤵
                                                                  PID:5172
                                                                • C:\Windows\system32\svchost.exe
                                                                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                  1⤵
                                                                  • Modifies data under HKEY_USERS
                                                                  PID:2476
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                  1⤵
                                                                    PID:5024
                                                                  • C:\Windows\system32\svchost.exe
                                                                    C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                    1⤵
                                                                      PID:6048
                                                                    • C:\Windows\System32\SecurityHealthHost.exe
                                                                      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                      1⤵
                                                                        PID:1736

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            01603bb4-0921-43ab-9c5d-3c0b3d98bd2d.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\01603bb4-0921-43ab-9c5d-3c0b3d98bd2d.tmp
                                                                            • Size 392B
                                                                            • SHA256 3ea1d9f1589ce5780965442a1157fc1d034f607333b35430d0e63fd02d3cb378
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            0e7ef497-86a2-4fc0-bb98-0dd25a745c73.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0e7ef497-86a2-4fc0-bb98-0dd25a745c73.tmp
                                                                            • Size 34KB
                                                                            • SHA256 162cc3a60916e0f7f6d39a7fb93a01e44cdbabc85951e2b17e6e6b5c5b3f413c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            23de2bd4-1f6e-488c-afe0-692bfb91da78.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\23de2bd4-1f6e-488c-afe0-692bfb91da78.tmp
                                                                            • Size 392B
                                                                            • SHA256 f76d003077e246022b651782ca6282dc9885308f74b8736fc281e82c56dad5a6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            3fc48aa0-6fac-4bab-b155-c9c5025bc14d.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3fc48aa0-6fac-4bab-b155-c9c5025bc14d.tmp
                                                                            • Size 40KB
                                                                            • SHA256 2d8c31174011636ed2c3d2756b1226092932cd0a168015b8777187e36ed249ab
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            4d67ad4b-fec9-41c6-aa7d-d806d183f333.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4d67ad4b-fec9-41c6-aa7d-d806d183f333.tmp
                                                                            • Size 392B
                                                                            • SHA256 ed7a7b00c0209ab663466625978a5471d01da799463fa09a8845ec727349c6ed
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            5486c69d-f7c8-409f-8e1d-26a34740e0e5.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5486c69d-f7c8-409f-8e1d-26a34740e0e5.tmp
                                                                            • Size 392B
                                                                            • SHA256 ad5c0604cf77c44a89ebabb81c3c8dae85fa732f4d3c266a2438b9227835fdd9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            5c504803-e865-43d4-ae28-bae0bdda6e1b.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5c504803-e865-43d4-ae28-bae0bdda6e1b.tmp
                                                                            • Size 392B
                                                                            • SHA256 1c1f6597feba2cf6c237f27ba8bfc7990d3900847c9aaa74de424552fa4147ea
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            64d19719-860c-4295-8829-9950090ea020.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\64d19719-860c-4295-8829-9950090ea020.tmp
                                                                            • Size 392B
                                                                            • SHA256 37107158673f157a655c0f8f045b087abb4464a27fcab1f218cfbec799e3803e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            7d50e50d-997e-42ac-bec9-8007c03653b1.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7d50e50d-997e-42ac-bec9-8007c03653b1.tmp
                                                                            • Size 392B
                                                                            • SHA256 85864489d3f9d0be0f9937b653f23d04271f5c87258190168351ea4f5fe6242a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            812cbaa6-34d8-4ef2-b48d-1b892cf33156.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\812cbaa6-34d8-4ef2-b48d-1b892cf33156.tmp
                                                                            • Size 392B
                                                                            • SHA256 6ad8ce6e7823cb35f82e6ddb0c6380497fe2fdf361e8be14a6c057277bde587b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            8c20c43c-1326-438c-830b-64f485e381ce.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8c20c43c-1326-438c-830b-64f485e381ce.tmp
                                                                            • Size 37KB
                                                                            • SHA256 55b91f1a8772d0838a7442b5e2c01c7ab72651e98e47f7efd41a9f77956671fd
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            11f4ab4b-e993-43f6-8fec-d90406cf170c.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\11f4ab4b-e993-43f6-8fec-d90406cf170c.tmp
                                                                            • Size 14KB
                                                                            • SHA256 7cd32b104a7f50da60fece122d7440f3637545ee5221ef27afed81eed8093461
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            1208bd03-cc20-4e17-ba25-514c0a7a49ee.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1208bd03-cc20-4e17-ba25-514c0a7a49ee.tmp
                                                                            • Size 14KB
                                                                            • SHA256 b98f847a9048370be834e530c059cf68f2bdb7c73275ff67368fb94c400ed78b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            395f4614-dcd5-4a72-afca-63a86e35fd86.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\395f4614-dcd5-4a72-afca-63a86e35fd86.tmp
                                                                            • Size 11KB
                                                                            • SHA256 4447e7f8523a2a4952a9bd635d51d7a3fab4b916d5a50d85145289cf1ff15ce4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            49651e8b-24f8-460c-b2da-abb64f3c1a75.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\49651e8b-24f8-460c-b2da-abb64f3c1a75.tmp
                                                                            • Size 14KB
                                                                            • SHA256 2a347659b64d988e51fb007f169734a333f17e403179fd65aeeec644d0155e96
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            49ede63e-5a8d-4eb3-978e-70cfdef5f4c4.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\49ede63e-5a8d-4eb3-978e-70cfdef5f4c4.tmp
                                                                            • Size 28KB
                                                                            • SHA256 38083dcf66db67624c8458c46c76856247164347dbb4609a016463e7ab6d81c1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            6bee781a-cce8-499e-b6dc-52e123f8f7df.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bee781a-cce8-499e-b6dc-52e123f8f7df.tmp
                                                                            • Size 23KB
                                                                            • SHA256 9c71d24582565154164ffa1c22ca8453168dce757ba33220ffffb413f8272281
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            LOG.old

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                            • Size 331B
                                                                            • SHA256 41db0926b5ed4d16e6b05a71f5cb4a8289fa7bfa7c4c6da5c4a6ee3040adce1b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            LOG.old

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                            • Size 331B
                                                                            • SHA256 11369d6609df44d62a01c94f092b04c28322afe351db30eea8e301967df85da4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            LOG.old

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                            • Size 331B
                                                                            • SHA256 3fb4b2a9558cefecd219b9cb506b10a9df2305e7daa445d4929a1145639840a5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            f_000044

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000044
                                                                            • Size 53KB
                                                                            • SHA256 351ba345250baf98ce325b4017ac9b96c9498f6644937ef558dc5993af676f2a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000046

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046
                                                                            • Size 39KB
                                                                            • SHA256 99024f53be64e711811db950c2d503f42ae4596b45b39675e53b420dcaa2903c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000049

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
                                                                            • Size 28KB
                                                                            • SHA256 b860147b87e168341a039200f06349972eac9d49908a53bf9d9d82e5236dfb06
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00004b

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004b
                                                                            • Size 120KB
                                                                            • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00004c

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
                                                                            • Size 31KB
                                                                            • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00004d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
                                                                            • Size 101KB
                                                                            • SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00004e

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
                                                                            • Size 45KB
                                                                            • SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00004f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
                                                                            • Size 121KB
                                                                            • SHA256 97e056dfb23d5d7198d922daca21994e63bee534a38a07dce43359228e089cf8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000050

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                            • Size 240KB
                                                                            • SHA256 8649501bbb4c56331d227519c54e9206a3aa439d78a1af45c9780ba117b3ea1d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000051

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
                                                                            • Size 612KB
                                                                            • SHA256 f5fb34e7be443e056202d7f0e45bf7d05134581c840a59c17763686c722a0285
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000052

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
                                                                            • Size 102KB
                                                                            • SHA256 20bce100e19acab922d5019ee55c6dca965b584b716e0e3479990bb99ca89aef
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000053

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
                                                                            • Size 20KB
                                                                            • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000054

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
                                                                            • Size 16KB
                                                                            • SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000055

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
                                                                            • Size 36KB
                                                                            • SHA256 1e42cbbf4a86037acb0fa0d7ccf125044fe601702deb8a16bb8559f73d7aaab3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000057

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
                                                                            • Size 71KB
                                                                            • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005c

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                                                            • Size 16KB
                                                                            • SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                                            • Size 24KB
                                                                            • SHA256 61a68bab33afe5cc259bd17756c574217b61a01fef044f233e0edadba5af04b2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005e

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                                            • Size 16KB
                                                                            • SHA256 71560d451ec7c26865bd311c2dd866bd589cd7c8db7249bb4da38c88c95f79ea
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                                                            • Size 33KB
                                                                            • SHA256 e8e5b597f340afda078bdbd677a57db88a7531e95c9504aa65560678fc2aa023
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000060

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
                                                                            • Size 34KB
                                                                            • SHA256 1d257f67bf0d7a578e9446c56012141f81c506f7a74345ecf3a5f54c439eb18b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000062

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                                                            • Size 137KB
                                                                            • SHA256 4934664d9a7b8f85496eb7f5cfe049dea55d40ab2f4c49fbedfdfc1538526c06
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00006b

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
                                                                            • Size 38KB
                                                                            • SHA256 da334bf31df3b5b4f80b3f99639956c1eb822adfd851f30546875351bdc4785a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00006d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
                                                                            • Size 20KB
                                                                            • SHA256 4433076939bd87e83d9910dfec4cba297c7dbf3881626fda3eb8e66dc5de6866
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00006f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                                                            • Size 67KB
                                                                            • SHA256 c587d4a4b02d204a815ba7bc9d577f63b6b6315ecccc91bdf6b9f76eb4e8bb98
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000073

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                                            • Size 17KB
                                                                            • SHA256 b56da7f445073342950b17d79c68584c096b297cb13e56b186be96f3bcf8bf83
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000074

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                                                            • Size 39KB
                                                                            • SHA256 a3a6b80605e30311dcb005105df72e46ccfafc0e376efcfa142e602017868fad
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000084

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                            • Size 89KB
                                                                            • SHA256 11721a661ccd74af18b30d6a0be5a5a755d8121bcd6ec3812a27da4ad3ade8d1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000085

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                            • Size 43KB
                                                                            • SHA256 57210a5bf58036c2a5cf537635f92a2990ae04c41c996e6d6fb28a1cc8939217
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000086

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                            • Size 59KB
                                                                            • SHA256 6b3c32f050a2585faa55fb7b9723fb8e7015fb8fe8d6447196d45f1b59ead013
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000087

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                            • Size 57KB
                                                                            • SHA256 88dc54db94d2a6e222f2105a66581c4374c89b5451cc490d33035652f75ef511
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000088

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                            • Size 69KB
                                                                            • SHA256 a6fee48e6325ba1c68401bfe6add7204ca626e6178bd1b3bdae72c85b21c2c0e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00008a

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                            • Size 59KB
                                                                            • SHA256 3216e2fe98a180911e9c03fe60b247265acc2f6a20a239d8b767aef5b7003427
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00008f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                            • Size 68KB
                                                                            • SHA256 b7d23bcc864ba433bd984761d3c1ec266b3e4f03586a46ec93ae1c5fdfe82bac
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000090

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                            • Size 97KB
                                                                            • SHA256 d3ca0d134e2ab5335e987585708c3e1c9c7afc2b9b7a4c4e535da4fa11ce5c49
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000094

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                            • Size 39KB
                                                                            • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009b

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                            • Size 78KB
                                                                            • SHA256 6df1f3fe5aa4a17f51e0a40ea3ba0afbc696211450a59eaf7125ae38b9b4f549
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                            • Size 188KB
                                                                            • SHA256 7541e224eba0b3cb4e8c7412a94b9b364002b28da806f5f89d498be2f675d808
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00009f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                                                            • Size 137KB
                                                                            • SHA256 01e0a2dcc26aaa6c28899720bd258afedbbbcdaa967b06f1cca9bde4f7ab9721
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000a0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                            • Size 43KB
                                                                            • SHA256 f8d153cd351e88024800776a6eeb4cef0ef5c1350d0b2c80b926cb1d8f982589
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000ae

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                                                            • Size 91KB
                                                                            • SHA256 dab8f0ffae6777465b3a2f096ac1a09572f04dac30a32f2f99fdc03e8779b9af
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000af

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                                            • Size 80KB
                                                                            • SHA256 632b66d4665ccab600d12e5b234fc978b965baaf3dc0bb5d2b4c0716d6b39070
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_0000c2

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                                                            • Size 133KB
                                                                            • SHA256 620e410e85323c72b048adeaf1cc597344152e26a18bbd5002950a0b0a0ebab4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 5KB
                                                                            • SHA256 acabe9acb1a04d843d05e75a7953691c27e9ba1a14a3a0fc3f785aa0aaaaef83
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 5KB
                                                                            • SHA256 ce9301f4b605c6d444466fe3124da513a9d5efa82f570579c382fe5b4c0504f5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 5KB
                                                                            • SHA256 fbad76b13b2ad1f67478197e882abbc9ccc797c273d84a5b5e00d8d3e3f7b371
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 6KB
                                                                            • SHA256 f60bf9e40fca6eb612e706613479058c5d76b4e8a494dd767768be48d77638e6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 6KB
                                                                            • SHA256 160c026dc8df217dd78bc286003e5942a13532ad87ed44c87bcba0cd28b55e96
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 6KB
                                                                            • SHA256 6e2d9603d34b141719c43aec5ea6d1ad2e18e404cfe465cd0aba1ea9bc61d6ec
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            3a859417-38ad-486e-bc2e-c8086ddab15d.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3a859417-38ad-486e-bc2e-c8086ddab15d.tmp
                                                                            • Size 2B
                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                            • MD5 SHA1 SHA512

                                                                            Edge Profile.ico

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                            • Size 70KB
                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            LOG

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                            • Size 383B
                                                                            • SHA256 805828516f3b203f698e2372a06a52e75d151837ac2ef16ef1a1a033d1989f8b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            246a324e-5a2d-4dde-a73b-30d3f630cf08.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\246a324e-5a2d-4dde-a73b-30d3f630cf08.tmp
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512

                                                                            3390e9d6-92c5-4103-8b44-edff2643d143.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3390e9d6-92c5-4103-8b44-edff2643d143.tmp
                                                                            • Size 14KB
                                                                            • SHA256 425a7b60284cac68d1070d4f745dbee46520a8ae4dd9eeb93911cfe697258023
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            46ad240f-f9fb-45bd-ac03-1eaee819707a.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\46ad240f-f9fb-45bd-ac03-1eaee819707a.tmp
                                                                            • Size 40B
                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                            • MD5 SHA1 SHA512

                                                                            7be1a05e-87d1-45a2-b652-111789f98df4.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7be1a05e-87d1-45a2-b652-111789f98df4.tmp
                                                                            • Size 10KB
                                                                            • SHA256 60f61c8b959867978aa19787e6eb5857ef5afd482a7af6bbc73a01af8f15ee6e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            95b0d4e4-af2c-4a6d-9e45-53ebc434ef5d.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\95b0d4e4-af2c-4a6d-9e45-53ebc434ef5d.tmp
                                                                            • Size 10KB
                                                                            • SHA256 f81e0cadf589a356130061df98f26c00a876c544af67e5bf38e777a56500c0e4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            9d411f5a-e345-463f-ab9c-cd4f0af0f869.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d411f5a-e345-463f-ab9c-cd4f0af0f869.tmp
                                                                            • Size 11KB
                                                                            • SHA256 d07b73348776e2a3be62741cb40625753004173e6e839715018365078f4a2c6f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            TransportSecurity

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                            • Size 2KB
                                                                            • SHA256 34e81c46355aea51b642e67e66b84efbe29eda1c260782bbfd993608e80bc752
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aac8754b-c603-4b4f-9867-63e9c3cf073e.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aac8754b-c603-4b4f-9867-63e9c3cf073e.tmp
                                                                            • Size 2KB
                                                                            • SHA256 645233c7b4d4434b5381c62b2c98a5323d8ee4d9a139f5273b41c8c48f322775
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            ecbea558-2e87-4cfc-849f-eeceed6d0b4f.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ecbea558-2e87-4cfc-849f-eeceed6d0b4f.tmp
                                                                            • Size 10KB
                                                                            • SHA256 e27277783f2951889f81a54bfde4a59014714ba94dcbafe619377f96e62e5916
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\02ea485e-8688-4661-adb4-9913f40c7d8e\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 77948d5af872e2ebaa70199ffd96c824525a050fb84364b18bf338fe24daf557
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\02ea485e-8688-4661-adb4-9913f40c7d8e\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 8068f2cd7e8c075bbccd3df5a6c8fb8f7f0ddd3aa1b7e0fefa44f8b5aa554f2e
                                                                            • MD5 SHA1 SHA512

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0f602995-7ac1-4062-a237-c07e3daec1b9\index-dir\the-real-index
                                                                            • Size 72B
                                                                            • SHA256 8cedce278a3b97862b49966e9c0aa7a3f90e59aa7a7b87b3120ff9a58138b124
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\671a5eec-bf93-4eb5-8259-02ab98e52fec\index-dir\temp-index
                                                                            • Size 2KB
                                                                            • SHA256 a4b9da6ea2825af4ec98223e86573f715565387adcd9220ea19945188367e2cf
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\671a5eec-bf93-4eb5-8259-02ab98e52fec\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 29554656580875269d7aab7be9a6c2a355964d1a7a246376f55ac41157399d01
                                                                            • MD5 SHA1 SHA512

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b534d486-0221-4eb9-8d2d-e4682adb9aaf\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 7136e21a3be0218cbb7b194faab7f158b26ab270e0513a5fb50841fd88b8e119
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b534d486-0221-4eb9-8d2d-e4682adb9aaf\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 35255cc06d1e873a7eabe8bb9389dcc29768c68413eeffe2cc15445abe5de254
                                                                            • MD5 SHA1 SHA512

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 492B
                                                                            • SHA256 a91be1b021307e08a937a01f249f0486c9b45b187575ee2d642504ce09707b14
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 399B
                                                                            • SHA256 469039518b150036b12015e9aeef59082b2713ffe0d1ed6de148cff7f6031d04
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 258B
                                                                            • SHA256 1508331de7c773a713e418325d2e4b5cee8ad3413fa42123389616f63398986d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 161B
                                                                            • SHA256 8a06a649354ad7a1ab71ba0b6573e072a9d5f727d34d7e5bf7ccb713fd4f7e0c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 394B
                                                                            • SHA256 aa269dfbe4c7f5254b0e4519b3ad4c2eb136e8587f415672acf7070bf42e9cb4
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 385B
                                                                            • SHA256 2b3fece5b3ac04ebbc748104d3ac3654187d6b94b98009533b92634bda9e6957
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 281B
                                                                            • SHA256 735e625f501397da9211fdf3477d5717ff413c194f7f3ed64e0c753d4035a03c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            4cb013792b196a35_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                                                                            • Size 171KB
                                                                            • SHA256 3aec2cc4d18a1b385c959959f156cc34165a7e6275f6428ebfe9696e0a9f0161
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            4cb013792b196a35_1

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1
                                                                            • Size 367KB
                                                                            • SHA256 d2658bd4c5be8254dc958bc00aa8556366e80fe6cf302f451a212aa763fed3c7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 2ef5d218f947be8d49ab0963b74b6b79a136682610ccb680db0cf84e99d87e01
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 6e6eb8c218d4495d270b2409731f13f25a14a06a9f2eba8bff800141c64bb6fa
                                                                            • MD5 SHA1 SHA512

                                                                            05b5f59bcc22bfa3_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\05b5f59bcc22bfa3_0
                                                                            • Size 196KB
                                                                            • SHA256 bdc3375a09ec0c921d0055a09096f22de69c6b7c6e36200ae6a0813130e77012
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            9b352b8cea7e1b75_0

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\9b352b8cea7e1b75_0
                                                                            • Size 511KB
                                                                            • SHA256 5daff4a95fc99335654b8b1dca94b1bd166a5e0bdf88cfc7bd26425271ac83b6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                            • Size 96B
                                                                            • SHA256 5e815eb76216381dbe9b9e233b1fe85159f3232505e73d27e441183006be7b2c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                            • Size 120B
                                                                            • SHA256 32291a23f386b5e4a467447d369ea893fc51acb28929b728c6a5769775cf4dfd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            CURRENT

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                            • Size 16B
                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                            • MD5 SHA1 SHA512

                                                                            sync_diagnostic.log

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                            • Size 4KB
                                                                            • SHA256 d3b7677a93835578013d0d33b3878c8ab0d83861ca95063682cb5bca81ed9839
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MANIFEST-000001

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                            • Size 41B
                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                            • MD5 SHA1 SHA512

                                                                            a64f02b9-f999-4f2a-adb8-907f8f25001a.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a64f02b9-f999-4f2a-adb8-907f8f25001a.tmp
                                                                            • Size 14KB
                                                                            • SHA256 aa5dc23f78109c1a66a3d40063aca89ec65540fe7d1c70a6b22f26ad58a77427
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            c375e78a-46c0-45c1-b72c-7b1f6af66992.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c375e78a-46c0-45c1-b72c-7b1f6af66992.tmp
                                                                            • Size 13KB
                                                                            • SHA256 75e45dd5c81938d6f5aff5f99a97bd0b079c5da2cad4219efd5821713bdccc4c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            d80b5ad7-5258-41f0-8673-46e7f1fb9c48.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d80b5ad7-5258-41f0-8673-46e7f1fb9c48.tmp
                                                                            • Size 6B
                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                            • MD5 SHA1 SHA512

                                                                            OperationConfig

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                            • Size 3KB
                                                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            b28ca512-5c62-4983-a23d-1f2c5fa694a6.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b28ca512-5c62-4983-a23d-1f2c5fa694a6.tmp
                                                                            • Size 22KB
                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            RevisitationBloomfilter

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                            • Size 392B
                                                                            • SHA256 c6f7da430444b2204383c1750ba39809fd0726f247b20feb34a365c179fc8195
                                                                            • MD5 SHA1 SHA512

                                                                            a68c8611-f551-4932-83aa-0733308a2273.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a68c8611-f551-4932-83aa-0733308a2273.tmp
                                                                            • Size 41KB
                                                                            • SHA256 7a359d4e19ff28153876ba1c22abc2e213b68c5f79fb68d93292f626db3a57a3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dd2b7791-1b1c-4271-b39c-561cff0d1acc.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dd2b7791-1b1c-4271-b39c-561cff0d1acc.tmp
                                                                            • Size 34KB
                                                                            • SHA256 bde3f3043c2b703121d1b3864ff2ac5dbcdf53612ca4bd8d7164c2f7b6dc2c00
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            5112af8f-1944-40f6-adc8-d65aae99a902.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5112af8f-1944-40f6-adc8-d65aae99a902.tmp
                                                                            • Size 13B
                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                            • MD5 SHA1 SHA512

                                                                            f59430f7-267c-4662-9a1a-f23ecf114fa5.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f59430f7-267c-4662-9a1a-f23ecf114fa5.tmp
                                                                            • Size 38KB
                                                                            • SHA256 75eac5f443cb1e29c82728b40f3827e9f5108d77ab9ff93d28e1ba20a4e8429e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            default.exc

                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                            • Size 2B
                                                                            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                            • MD5 SHA1 SHA512