Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 13:41

General

  • Target
    https://www.terabox.com/sharing/link?surl=4y3VEAmz_uwgsBJ4jobD1Q
  • Sample261113-qzcppswt5q
Score
7/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL 24 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs
  • Suspicious use of FindShellTrayWindow 36 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.terabox.com/sharing/link?surl=4y3VEAmz_uwgsBJ4jobD1Q
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2764
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff84a39c188,0x7ff84a39c194,0x7ff84a39c1a0
      2⤵
        PID:4104
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,13461523284290286163,969837422431394420,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:3
        2⤵
        • A potential corporate email address has been identified in the URL
        • System Time Discovery
        PID:1112
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,4289459703034517514,2796363190993997882,262144 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
        2⤵
          PID:1404
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,483218868926700820,18320169154125265365,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:8
          2⤵
            PID:4632
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,5809807733660560225,11153149151482816280,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
            2⤵
              PID:5012
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,2902356820744498362,4793037973338304507,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
              2⤵
                PID:4448
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,18352408389396341948,1931286758705185392,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
                2⤵
                  PID:4484
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,9521840521712744345,3426980529110136801,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
                  2⤵
                    PID:1576
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,5706544030531245301,13301787538140120479,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
                    2⤵
                      PID:2324
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,10691345573445433675,543564229234326102,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
                      2⤵
                        PID:3008
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,2381548548122611763,16094049755232184372,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
                        2⤵
                          PID:4844
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,2381548548122611763,16094049755232184372,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
                          2⤵
                            PID:2172
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6232,i,12326753643254164047,17230814779687033147,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:1
                            2⤵
                              PID:1288
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5888,i,1226426648197370624,12662431632500865470,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:1
                              2⤵
                                PID:1724
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4448,i,10403500915069643908,6613462285093722440,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
                                2⤵
                                  PID:2944
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6852,i,4155758377512997013,14894460129273619420,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
                                  2⤵
                                    PID:1852
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6952,i,17635844392236785699,5658815030198161759,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:1
                                    2⤵
                                      PID:972
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7052,i,16379795015916065302,15443765912186765012,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                      2⤵
                                        PID:1152
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6984,i,18130333578090136729,6461427090997555810,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
                                        2⤵
                                          PID:1600
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7712,i,11575142621265533299,3565129112255517045,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
                                          2⤵
                                            PID:5480
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7732,i,7783666303483899014,5990508258045423925,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:1
                                            2⤵
                                              PID:5496
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7808,i,9059253551516368992,6483909390819529000,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7812 /prefetch:8
                                              2⤵
                                                PID:5888
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7848,i,15698210693526434639,12110690147265288143,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7840 /prefetch:8
                                                2⤵
                                                  PID:5896
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7828,i,1866741616883632219,10941432444644422972,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7844 /prefetch:8
                                                  2⤵
                                                    PID:5904
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7932,i,7767313122864600438,17837565284993680574,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:1
                                                    2⤵
                                                      PID:5944
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7800,i,7869376583138216391,5651019029938969540,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:1
                                                      2⤵
                                                        PID:6096
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=2140,i,10767408398280772589,9403464737262802402,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:1
                                                        2⤵
                                                          PID:5212
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5148,i,8607109871337119110,16971846434100715009,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7708 /prefetch:1
                                                          2⤵
                                                            PID:5280
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6816,i,10841894039018805565,4207240666708604491,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:8
                                                            2⤵
                                                            • Modifies registry class
                                                            PID:5228
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,15742461112814725225,13423209567116256032,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:8
                                                            2⤵
                                                              PID:5380
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2120,i,17481352420956785914,10850231810250773767,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
                                                              2⤵
                                                                PID:5928
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7364,i,13832445090235590068,1863024848718905638,524288 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
                                                                2⤵
                                                                  PID:5124
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8304,i,558329836617982638,13011583377775131263,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:1
                                                                  2⤵
                                                                    PID:5016
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6364,i,8171550767852678717,14319835026881247765,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
                                                                    2⤵
                                                                      PID:4192
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6760,i,11068126713340509484,11533340187811436181,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:1
                                                                      2⤵
                                                                        PID:4572
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=4564,i,17585598373418212155,5167466995530904251,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
                                                                        2⤵
                                                                          PID:4484
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8056,i,9048263128153943628,6221063623169982387,262144 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
                                                                          2⤵
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          PID:6076
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7920,i,17529965938518828826,1376870414879133501,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
                                                                          2⤵
                                                                            PID:5840
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=5312,i,9901516157732104734,1446399867402523026,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=4024 /prefetch:1
                                                                            2⤵
                                                                              PID:4360
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8392,i,13000566243366724440,9160202174803357699,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=8452 /prefetch:1
                                                                              2⤵
                                                                                PID:5456
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=5256,i,8603089027239979586,10240160028289118538,2097152 --field-trial-handle=2388,i,18381499842985709834,8257780575710916146,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:1
                                                                                2⤵
                                                                                  PID:1412
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                1⤵
                                                                                  PID:636
                                                                                • C:\Windows\System32\rundll32.exe
                                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                  1⤵
                                                                                    PID:5760

                                                                                  Network

                                                                                        MITRE ATT&CK Enterprise v16

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        1ba55d76-c57b-4a7e-aee0-8120276ead83.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1ba55d76-c57b-4a7e-aee0-8120276ead83.tmp
                                                                                        • Size 392B
                                                                                        • SHA256 d4c8ce9930d6da55c44ab1a63bb5b1f8a2acf2805b67068c0797b360a2a907af
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        21a05986-33f4-4864-aeb7-f605c15679b3.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\21a05986-33f4-4864-aeb7-f605c15679b3.tmp
                                                                                        • Size 18KB
                                                                                        • SHA256 cbb93b82242764a4ce4755c284ad6236f2dfa963c5b311f8127e5cf0d1ca3dba
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        21d437db-34eb-4b9d-8edb-121955115566.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\21d437db-34eb-4b9d-8edb-121955115566.tmp
                                                                                        • Size 18KB
                                                                                        • SHA256 24e5ec9bcfefcfc807ca699f98272b0a96ad54443a73984974569894061925a8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        68c63b38-357d-4de0-9cc6-3f23401ed971.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68c63b38-357d-4de0-9cc6-3f23401ed971.tmp
                                                                                        • Size 26KB
                                                                                        • SHA256 7b9d58193abf61c204ea79401c846720731fb9a7cdbf72101fb700d2ac8258bb
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        6ed80636-078c-46f5-97b3-abb1e9fa09cb.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ed80636-078c-46f5-97b3-abb1e9fa09cb.tmp
                                                                                        • Size 392B
                                                                                        • SHA256 14db7e99ec104af9cb2dbaa15ed4e74cbc21821acfeb75c753ecddf88c278bc6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        73965682-59db-4003-ab08-273a6bc750c6.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\73965682-59db-4003-ab08-273a6bc750c6.tmp
                                                                                        • Size 392B
                                                                                        • SHA256 5b6e080ac501339ceb5bfe71e53b1219bdbc2cd90b6cef159aea1ea3bf0ba38f
                                                                                        • MD5 SHA1 SHA512

                                                                                        9e585e87-0115-44d5-a2ab-ead573ea536f.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9e585e87-0115-44d5-a2ab-ead573ea536f.tmp
                                                                                        • Size 8KB
                                                                                        • SHA256 11cd0aec14768b8f0c8275d4ca6c1b859b8f655cf3c6e7c5c0a3cddf7999f6a7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        settings.dat

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                        • Size 280B
                                                                                        • SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        settings.dat

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                        • Size 280B
                                                                                        • SHA256 49ad6872da0e53fa2156de2ab29aae15d756e399214100166ee3b981776c9e71
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        settings.dat

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                        • Size 280B
                                                                                        • SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        0357a059-fcea-4d13-84ca-6fac8cf892e8.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0357a059-fcea-4d13-84ca-6fac8cf892e8.tmp
                                                                                        • Size 17KB
                                                                                        • SHA256 3d516bca7e7b726c87c727eed1285b56fe99b009f1a40f9ecfb21c9f0b016d22
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        29d71159-9ecf-435c-a782-f5af3dbd07ea.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29d71159-9ecf-435c-a782-f5af3dbd07ea.tmp
                                                                                        • Size 70KB
                                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        47ea221c-c6ab-4c25-b3f4-e1b53b3f146b.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47ea221c-c6ab-4c25-b3f4-e1b53b3f146b.tmp
                                                                                        • Size 16KB
                                                                                        • SHA256 55d781544f74a7d89abd986ed7ec2f468c5436d1856a89e7fa90c0e5e1257cb8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        4b1266b9-a81f-4d26-8e45-b6f55ca34731.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b1266b9-a81f-4d26-8e45-b6f55ca34731.tmp
                                                                                        • Size 16KB
                                                                                        • SHA256 9d91de14e2f5b34ac186b2d8af8b3a962d49c530f03530250f411e90b00e2d48
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        4b956405-3661-450d-b12b-2f4ce980d7de.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b956405-3661-450d-b12b-2f4ce980d7de.tmp
                                                                                        • Size 9KB
                                                                                        • SHA256 0857c90b57b34837ceb769c59166d2ecbeb2b3a74ddc02caf072d1b648152eca
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        50bb65a0-95ae-49af-bf27-434fd2f71850.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50bb65a0-95ae-49af-bf27-434fd2f71850.tmp
                                                                                        • Size 14KB
                                                                                        • SHA256 85d8702c41961386e20a73c1dde6dd08ec8d3f0ee5346160ebcda940325193e0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        5aab8c3c-e49e-4232-92c3-151154877e40.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5aab8c3c-e49e-4232-92c3-151154877e40.tmp
                                                                                        • Size 16KB
                                                                                        • SHA256 8d674aee8980c709a08226cad279e3983a2dd1d2847e992dbf3377ff88adbc75
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00004e

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
                                                                                        • Size 79KB
                                                                                        • SHA256 f2aaaf92c32cfdc75153327911d58e20a5554b7fefdf21ce623b2fc9ce37d99c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00004f

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
                                                                                        • Size 24KB
                                                                                        • SHA256 eecd9fab4c9e137ec82164d7b151b6ca7b3fd03a1732bbb423552400a649a577
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000050

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                                        • Size 245KB
                                                                                        • SHA256 17b6c6547b7df87685094c31160e9cfeb475a71af5ca72dae00f12494fa492ce
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000064

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                                                                        • Size 351KB
                                                                                        • SHA256 3fe90e0e5787638faec9dbbe15ffed7f89575f952316d1aa1b4b1efd7f311f9e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000065

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                                        • Size 27KB
                                                                                        • SHA256 1506211a1ffe08a9a478b55872a3b9b00a34f4bab25a90370c41b4cccaa76cb8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000066

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                                        • Size 120KB
                                                                                        • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000067

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                                                        • Size 121KB
                                                                                        • SHA256 e911914548f5ecac24e0787314dabfe8bb1c82338cfabbc0c5e4f16365ce01d1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000068

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
                                                                                        • Size 24KB
                                                                                        • SHA256 7e170ea7f2ac873c595b9f72cf35b8c15af17b5bfd3488b101bb5aca034d07cf
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000069

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                                                                        • Size 259KB
                                                                                        • SHA256 3df87ed3fa2313bd591a1121215a32f13474b65f45c3c83e7c2d321a3eb9d113
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00006a

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                                        • Size 102KB
                                                                                        • SHA256 1027c1fd63d1c619daae437c8583a7ed5e8c476980c0e21bd0ebdda4420a8bb8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00006b

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
                                                                                        • Size 45KB
                                                                                        • SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00006c

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                                                                        • Size 628KB
                                                                                        • SHA256 e8723c97a91cf48419c1e181e8afcd4f84abaff7664742233161e8a0b15f6fb0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00006d

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
                                                                                        • Size 102KB
                                                                                        • SHA256 20bce100e19acab922d5019ee55c6dca965b584b716e0e3479990bb99ca89aef
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00006e

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                                                                        • Size 20KB
                                                                                        • SHA256 3938e6eb3154d70cdecb0d9f9a671d5ccf69694a128b977a715fd5e3e8508134
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00006f

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                                                                        • Size 16KB
                                                                                        • SHA256 337e833eeec5d082813ced903aa54622827f234f3dede039ff9214db457f1fd5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000070

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                                                                        • Size 36KB
                                                                                        • SHA256 b3c622445678ddc9dddfb67e7f343ce4693170f502b9410740b944195c402c24
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000077

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
                                                                                        • Size 16KB
                                                                                        • SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000078

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
                                                                                        • Size 16KB
                                                                                        • SHA256 8138b10e611b0b6a53ac2b0bfcb46273c0cc970413cd7d8e5f4e86ee419b6a22
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000079

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
                                                                                        • Size 24KB
                                                                                        • SHA256 5808e3d67994190c25c8b31baa0e57d1527ae5a6685877d05bee4a4908dab56e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00007a

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
                                                                                        • Size 33KB
                                                                                        • SHA256 6606a3c6fbeca5d3217efbc6f2573db239f80500ba16450089f594ef1b84986a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00007d

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                                                                        • Size 35KB
                                                                                        • SHA256 db945d0c2fc7d6b636a90dff8da1c5ef1efb095bebcf279c2333944cd12f7d6f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00008b

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                                        • Size 137KB
                                                                                        • SHA256 4934664d9a7b8f85496eb7f5cfe049dea55d40ab2f4c49fbedfdfc1538526c06
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00008c

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                        • Size 17KB
                                                                                        • SHA256 b159e2a1ed7b474ad983ebf646dd0e108b41b11e8101ea1eaca8f852e48435e8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00008d

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                                        • Size 41KB
                                                                                        • SHA256 6f32dd3791bdb95d7fa1fc7c94e24964c3588bccfe454f6b0fc579572fdafca0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000095

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                                        • Size 60KB
                                                                                        • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000096

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                        • Size 68KB
                                                                                        • SHA256 2033d4c0dcdab8b765e78c9c1845742d2589b0f1c56a06b701e91f536035f85c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000097

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                                                        • Size 19KB
                                                                                        • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000098

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                                        • Size 45KB
                                                                                        • SHA256 44c44c5e9cca81e4e3a8b88e6c45ef531d9ec84d198955739a4e3ca82e76f0f3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000099

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                        • Size 63KB
                                                                                        • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                        • Size 7KB
                                                                                        • SHA256 afb18bfcba3ac3e3068a2c83dc52c8288a7425a26603d8804dc0ba902939842b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                        • Size 7KB
                                                                                        • SHA256 944b851f22c3ef0fff36e7d8ec0027826fbb3a71320e2bea9f3bfb5c0ad4e09f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 2KB
                                                                                        • SHA256 1de7ca1fc0852699b0f53efe10916cb2ffa07c9bc50b83214c2ee83091ac4960
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        8e670fac-8578-4c55-b8bb-4b2c8a39a9ed.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\8e670fac-8578-4c55-b8bb-4b2c8a39a9ed.tmp
                                                                                        • Size 2B
                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                        • MD5 SHA1 SHA512

                                                                                        LOG

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                                        • Size 383B
                                                                                        • SHA256 3a4642daa55b36563ed942e1ff8c08b6356ec79cbea1e1b001277504f6a676e6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        CURRENT

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.terabox.com_0.indexeddb.leveldb\CURRENT
                                                                                        • Size 16B
                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                        • MD5 SHA1 SHA512

                                                                                        3c1d5188-5dd9-429b-b327-ac1e6fa12be5.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3c1d5188-5dd9-429b-b327-ac1e6fa12be5.tmp
                                                                                        • Size 111B
                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        4dae12f4-1510-47f0-b3bc-b39a5bdaa6fe.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4dae12f4-1510-47f0-b3bc-b39a5bdaa6fe.tmp
                                                                                        • Size 210B
                                                                                        • SHA256 5219ac476d8106e5315aa9000ba7a86b63011baec1f557c180e424576175a8d3
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        89f1d67b-293b-4d3e-b7aa-5c67181e2f46.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\89f1d67b-293b-4d3e-b7aa-5c67181e2f46.tmp
                                                                                        • Size 2B
                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                        • MD5 SHA1 SHA512

                                                                                        Sdch Dictionaries

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                        • Size 40B
                                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                        • MD5 SHA1 SHA512

                                                                                        b52591cd-4a47-46fb-b821-ff4563704954.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b52591cd-4a47-46fb-b821-ff4563704954.tmp
                                                                                        • Size 18KB
                                                                                        • SHA256 5a142b5167dab1c236d4bd9a1b7d632ef4699717c74f02122c8b092ff0beb7df
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\42641971-b8e7-46ad-bea1-084201bcd213\index-dir\temp-index
                                                                                        • Size 2KB
                                                                                        • SHA256 6ae51af2dc7c6e1f096d7bddb5e9c356a03519fdc8896631568ba7cda7b29fc8
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\42641971-b8e7-46ad-bea1-084201bcd213\index-dir\the-real-index
                                                                                        • Size 48B
                                                                                        • SHA256 40aa4474bb409149d3fcdaa1a21e14d5cc61f79f0adec755f3409360e4b30413
                                                                                        • MD5 SHA1 SHA512

                                                                                        index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6902b0e9-3a68-4052-a592-fb2633e38fa2\index
                                                                                        • Size 24B
                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                        • MD5 SHA1 SHA512

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6902b0e9-3a68-4052-a592-fb2633e38fa2\index-dir\temp-index
                                                                                        • Size 72B
                                                                                        • SHA256 8579f040e63b2f151e873e6b6e2770c0eb009e4b9060eaf0e5ab1677ecadb58f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6902b0e9-3a68-4052-a592-fb2633e38fa2\index-dir\the-real-index
                                                                                        • Size 48B
                                                                                        • SHA256 53cce52675ad72026fdf03bfe323246489f5560c9abf8ce67e9a2df6763a1df7
                                                                                        • MD5 SHA1 SHA512

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6c35db92-eefc-4671-9b7f-85d3aa932a14\index-dir\temp-index
                                                                                        • Size 864B
                                                                                        • SHA256 edfff494c79d0a110ecb70ae378490a909402041873b77a63c45be66bb427bff
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6c35db92-eefc-4671-9b7f-85d3aa932a14\index-dir\the-real-index
                                                                                        • Size 864B
                                                                                        • SHA256 fc582a46b5d252d602e9e556acc85ae52cdfeeadc4652d7f1c9aa4d1d9802388
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cfcf7629-7968-4660-b249-1218d57d0f56\index-dir\temp-index
                                                                                        • Size 72B
                                                                                        • SHA256 56f52ef645148049401d45d6575e28200485a851920533419485869fe8cf496a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cfcf7629-7968-4660-b249-1218d57d0f56\index-dir\the-real-index
                                                                                        • Size 48B
                                                                                        • SHA256 b67daba9ff988224ef2866a9563c368bb097c42b11acaf81f512215ed56682ea
                                                                                        • MD5 SHA1 SHA512

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f50b91da-e952-4b79-a820-4c0665a4fb27\index-dir\temp-index
                                                                                        • Size 120B
                                                                                        • SHA256 14d1a499aa8434df7f956b52b1b3bf35e71af96796dd11da4782036cfc130ff5
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f50b91da-e952-4b79-a820-4c0665a4fb27\index-dir\the-real-index
                                                                                        • Size 48B
                                                                                        • SHA256 ab2aa932988add75ab592522bd5ac8d2e491502e5f51a690bf6453002bad7de6
                                                                                        • MD5 SHA1 SHA512

                                                                                        index.txt.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                        • Size 492B
                                                                                        • SHA256 629f98abc82c9f420b1d76aabe97ae36382ef5ff72296056ff945548719be9fb
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                        • Size 647B
                                                                                        • SHA256 9dfd1927b430e245d5633c0058ba805f250ff268b9e99d53c0216e2fe7b5147a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                        • Size 875B
                                                                                        • SHA256 bed5903a6863f96cfb84e2100386a58d78a1233d1914ff80c257ac0ef5ff6965
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                        • Size 760B
                                                                                        • SHA256 f4a83be45d4ba7f8b90fd4a6e062e5dd5ba4d24f32738cdd7afabec2af096e4b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                        • Size 880B
                                                                                        • SHA256 3764b5546929d53c2aee8152a0d555b9fbcfb1866761cf668d874b38ce95b974
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\590ba50953652ab41026afd32520971dcc363703\cf0ec277-7675-41c1-b2ec-5a39e6a2fae6\index-dir\temp-index
                                                                                        • Size 216B
                                                                                        • SHA256 d0e769209c9bbbe8b01b4c55c934842e4618b0607da91a962e2676d48f240283
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\590ba50953652ab41026afd32520971dcc363703\cf0ec277-7675-41c1-b2ec-5a39e6a2fae6\index-dir\the-real-index
                                                                                        • Size 48B
                                                                                        • SHA256 da9be935dd4182d30ad525cd3e278e8d5c3073b0b4c2082f942936b77be7acef
                                                                                        • MD5 SHA1 SHA512

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\590ba50953652ab41026afd32520971dcc363703\index.txt
                                                                                        • Size 152B
                                                                                        • SHA256 ae7fa96ed38614341a1041269174b49b79612df0c412d446fc8adcf8a77ec208
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\590ba50953652ab41026afd32520971dcc363703\index.txt.tmp
                                                                                        • Size 147B
                                                                                        • SHA256 60ed0f132160e882de1045d697f0c476491d99bb4e089726f2a00ba437532fa4
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        temp-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                        • Size 96B
                                                                                        • SHA256 3f9a4ba87876d039c6e49294218ecffe5f2399c7352c34b8b0422d605e6b347d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 48B
                                                                                        • SHA256 f68325e70ffabb6ae7c2279ed945bf858128cb179087294124a691ab04596c44
                                                                                        • MD5 SHA1 SHA512

                                                                                        sync_diagnostic.log

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                        • Size 6KB
                                                                                        • SHA256 f688e8e1dc4780685f664f01b3fbdeb88fa1404df66369da6e3326a9ffa50c10
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        a0e741bc-7e3e-433a-b60f-7c90a8ee88dd.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0e741bc-7e3e-433a-b60f-7c90a8ee88dd.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 167e1b33ebf9d94b00209c98dfc0c6dcc7ba20b28b49406e61a583ce96431a9a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        a6b9d7be-c547-41fb-bc44-65b1afdef5b2.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6b9d7be-c547-41fb-bc44-65b1afdef5b2.tmp
                                                                                        • Size 11KB
                                                                                        • SHA256 ad36296fd24d5632981421da897aebf551da8e8a7d57aa74c833b9d52d45b503
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        bec168cc-b647-4c63-b507-9c7305e7ab09.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bec168cc-b647-4c63-b507-9c7305e7ab09.tmp
                                                                                        • Size 15KB
                                                                                        • SHA256 8d979bb9d730f3969fa57908b081047d2b795c095b67722092949afd6a4135d8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f81b4316-d044-4a3e-9837-d86bf93b1527.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f81b4316-d044-4a3e-9837-d86bf93b1527.tmp
                                                                                        • Size 6B
                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                        • MD5 SHA1 SHA512

                                                                                        f97ef34b-775a-4113-9533-df736a3434b7.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f97ef34b-775a-4113-9533-df736a3434b7.tmp
                                                                                        • Size 16KB
                                                                                        • SHA256 e73cd9ffbfb6bd361a276e58d1559d50cf284a1c0f7374e097c99a8d430d3a34
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        fee9937c-d1d5-4fdf-bf17-cea3f79af9d6.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fee9937c-d1d5-4fdf-bf17-cea3f79af9d6.tmp
                                                                                        • Size 16KB
                                                                                        • SHA256 c867ba931e1ccc69b03540ad424a09eb9d57f0fce38ec43fdab6a7d67f248e80
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        72ca2d06-9f8a-4366-acbe-8dfcc61e9175.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\72ca2d06-9f8a-4366-acbe-8dfcc61e9175.tmp
                                                                                        • Size 22KB
                                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        RevisitationBloomfilter

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                        • Size 392B
                                                                                        • SHA256 c2e2d912915d9df7a18dc1d04994d8a1658933105c6fe7f9e0769452f051762d
                                                                                        • MD5 SHA1 SHA512

                                                                                        cee7b3e3-0348-4fe0-a97f-7c139e2e5175.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cee7b3e3-0348-4fe0-a97f-7c139e2e5175.tmp
                                                                                        • Size 18KB
                                                                                        • SHA256 0321373b3fd2e8365f70284a11a4c0659c50cfd0edd097330883b796b1aa2e0d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        d6212ff9-a298-4ea5-926a-9ddb2045a745.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d6212ff9-a298-4ea5-926a-9ddb2045a745.tmp
                                                                                        • Size 8KB
                                                                                        • SHA256 007521b3f385980497e2e04cef35343c6f644b08543634cfaf50127991b12e18
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        8ba0eb58-f365-4725-bb6c-6af67303eba2.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8ba0eb58-f365-4725-bb6c-6af67303eba2.tmp
                                                                                        • Size 13B
                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                        • MD5 SHA1 SHA512

                                                                                        f52cca81-add1-4cdd-9ec1-0bc6d564f893.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f52cca81-add1-4cdd-9ec1-0bc6d564f893.tmp
                                                                                        • Size 26KB
                                                                                        • SHA256 28c89afcd072345d5f6cb9586e82a3c959fe3eaa7e8b8bd67ce006a2f846a841
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                        • Size 2KB
                                                                                        • SHA256 d8841b6c59ed0cc51182aa7a1f1777335a17d2e792bab0817f564709c41b5e7b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        default.dic

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                        • Size 2B
                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                        • MD5 SHA1 SHA512