Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/06/2026, 07:01

General

  • Target
    http://blackrockdiner.com
  • Sample260623-htazxsbs8w
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 35 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://blackrockdiner.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1384
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffb767dc188,0x7ffb767dc194,0x7ffb767dc1a0
      2⤵
        PID:3456
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,12993489179324736463,17622466637074164097,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3336
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,2491085497771197986,17412375999134907004,262144 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
        2⤵
          PID:4980
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,15679616017423424930,2435465423220809421,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:8
          2⤵
            PID:1044
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,15809005381190090840,3527515517786023799,2097152 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
            2⤵
              PID:4916
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10686696313962726112,6269834273305197884,2097152 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
              2⤵
                PID:5020
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,12106644599641466049,15830042938917552542,2097152 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
                2⤵
                  PID:4128
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,5103588813579964671,9277454007591466514,2097152 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
                  2⤵
                    PID:4280
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3596,i,14267624266066456444,6027016840884574013,2097152 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:1
                    2⤵
                      PID:4152
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,13667638793186271466,6926179927491562391,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
                      2⤵
                        PID:2956
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,8182033794666343005,16376071707284191784,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8
                        2⤵
                          PID:768
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,11457331457374647521,17774290684883217943,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
                          2⤵
                            PID:2672
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,13998380476742633744,12010602817651265913,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
                            2⤵
                              PID:1804
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,13998380476742633744,12010602817651265913,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
                              2⤵
                                PID:212
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,1757537518965854006,4984023444369949276,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
                                2⤵
                                  PID:4060
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,9792376755242316281,13954339606317725059,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
                                  2⤵
                                    PID:2292
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,16227828785347469765,7184794991772869613,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
                                    2⤵
                                      PID:100
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,17151916230370948085,18135868164970558173,524288 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
                                      2⤵
                                        PID:4156
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5680,i,15101527812345563416,5418977098141995693,262144 --field-trial-handle=2232,i,735123204355997011,17411340953068656711,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:2316
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:468

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            blocklist

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                            • Size 105KB
                                            • SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
                                            • MD5 SHA1 SHA512 TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
                                            • MD5 SHA1 SHA512 TLSH

                                            BookmarkMergedSurfaceOrdering

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512

                                            f_000087

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                            • Size 1024KB
                                            • SHA256 0104431e548a91f8cf36feea23aecb7c842fa1b262c82e5a4dee631069f19875
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000089

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                            • Size 461KB
                                            • SHA256 30e83fd0d6fdac209927ce8c91161e512eb619e99f8cc285141b9bb502adeec4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008a

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                            • Size 1024KB
                                            • SHA256 de4bacf37cb302e2894f36c5e72881b1424b97ff2b032a9848c2e66d37eb7f93
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008b

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                            • Size 1024KB
                                            • SHA256 4c33c92894ba3fad85af7a361588dd945e4468ca750c4afbedc69af3b01ccdba
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008c

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                            • Size 1024KB
                                            • SHA256 ba49840a07e0bbb84acc661491f8b718613733062c8a5d1ff3fd4681bc0e2985
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008d

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                            • Size 1024KB
                                            • SHA256 1d409f7ee7a02f72f0ec3eae9f3d34665e4623ed99126110cee859475cd7a37a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                            • Size 1024KB
                                            • SHA256 b45b4ea6b8275943dd13164b828174a6ec35d2596954ccd969d9432302a01454
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                            • Size 1024KB
                                            • SHA256 e87ab31208edabc6914f9080a2663214a925d070be30b899067e428d8b5250f4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000090

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                            • Size 1024KB
                                            • SHA256 1c47f178a3df674b19e7b00e05c0a8ef6c150621d8720561f4454b7b27b165f2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000091

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                            • Size 1024KB
                                            • SHA256 953990e86cc9391e1f279d4599d24a4afb5785c1213be20991cc5bd35c8bc175
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000092

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                            • Size 1024KB
                                            • SHA256 4635b1cffd9d466c19f9f0660a3d12d93d3b518c4fddf4af0b6eb9072afd27f0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000093

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                            • Size 1024KB
                                            • SHA256 593c4110adf774cac703d0f5059ac145876926c224d9b2b73a6644b34d2e6f40
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000094

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                            • Size 1024KB
                                            • SHA256 8fe580929b1ea3b2bc2e085c7b539196f245a3b2667778bfa0ff7779516c7b99
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000095

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                            • Size 1024KB
                                            • SHA256 88b3966bc856074b0c94d2a9cb2e1802dda2319486ea209728fcb248ddff9b76
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000096

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                            • Size 1024KB
                                            • SHA256 82e752092694ba8300510d91a5092903ac5761f33f9e72cd781ae8ac53f9f857
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000097

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                            • Size 1024KB
                                            • SHA256 a8f382538549a5926f5c0b65ff934635f2e9ee0f78ac46010075f3240631a9c0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000098

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                            • Size 1024KB
                                            • SHA256 5eb8182d6f836350ef4149eee841b4c1b4c499b422aa63a2dd7e4561f8b4f9fa
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000099

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                            • Size 1024KB
                                            • SHA256 2af9af04aa3298cc8843c8e9bb2ce07f329b2418159283d0bcda0be6cf37ae88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00009a

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                            • Size 1024KB
                                            • SHA256 b6ffac498b30baa7c93376ee809a0b2349eb6548df7b635960ea0607d67ad918
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000a4

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                            • Size 1024KB
                                            • SHA256 fd22bcbeaa29c45e7a02090bf65fa1a261f764b2a62cae9d3b967f112ae21652
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000a5

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                            • Size 1024KB
                                            • SHA256 2e6cae6d61d5d920b0a53f8d32987857bec33fd9ca8d83482feaf21ea16fae2a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000af

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                            • Size 1024KB
                                            • SHA256 009f9cfe8937bab3d2536221bc8bc84dce61f1c6b5978fe912cf2ce5439337ec
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b0

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                            • Size 1024KB
                                            • SHA256 723a233cdc0ee8a1230df66dad5940bf1144b12dc407f21f4ea2f67456937355
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b1

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                            • Size 1024KB
                                            • SHA256 cf3198485ac03cab88351b10019369f54d066b47358d0587cdb12803ec9e751b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b2

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                            • Size 1024KB
                                            • SHA256 1af78665ca9ff203662c282f1521188b05bc934e427825232e7fd459bd7ebbc5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b3

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                            • Size 1024KB
                                            • SHA256 b39015e0cd4a9a14563dca4df0bdaeec19a1a9651a3ffdcc57c7409553a96f62
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b4

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                            • Size 1024KB
                                            • SHA256 2119a192a9866a63e8946993e159458af679ca7c8cc0e44a84ff4d8d1bc29682
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b5

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
                                            • Size 1024KB
                                            • SHA256 0fcd62bc5abe3e3867b6259489102097bf178f66ddc46f65fb27ee945c7dab7e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b6

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                            • Size 1024KB
                                            • SHA256 70771f9fea1bca5d322da29e0b3086ccfde5c119107006fc45db02ba3387df7d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b7

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                            • Size 1024KB
                                            • SHA256 a7d7195076015e684475e065f3c0b4998e5a909bb003331f4a5ab52fe0b04211
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b8

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                            • Size 1024KB
                                            • SHA256 58f5f396c2f52057583b4af161bf844868de57d9c787991c11bd3afe1fd9e04c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 3KB
                                            • SHA256 33b93d5212d56130dd03bcf71f0cbb5e49ceb7988dd110fdd6deae68322d3638
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index~RFe58be98.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58be98.TMP
                                            • Size 3KB
                                            • SHA256 0344e84f303c469af4f94713b10839ff799962ffd683544f9d4e0b86c083aa89
                                            • MD5 SHA1 SHA512 TLSH

                                            SiteList-Enterprise.json

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512

                                            Edge Profile.ico

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                            • Size 70KB
                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            HubApps

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                            • Size 106KB
                                            • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Network Persistent State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                            • Size 1KB
                                            • SHA256 e238d15d94b110b84d99d20f839f0f10a65d85743779fdc82104ba61b21b8fec
                                            • MD5 SHA1 SHA512 TLSH

                                            Network Persistent State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                            • Size 111B
                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                            • MD5 SHA1 SHA512 TLSH

                                            SCT Auditing Pending Reports

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                            • Size 13KB
                                            • SHA256 99cd3ce42d6a5a7a63c464be405b2037b2d2e2dd594c1a0384d3104402a7ee2e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                            • Size 13KB
                                            • SHA256 d9bf5807d8d17649c0a017473d91983f4188d5abe4fa9b57bceefa58fbb045d9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Secure Preferences

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                            • Size 30KB
                                            • SHA256 20a4c68e6529343593e6c78240c459f0197301f09b847d44d7482025efb2301c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\758583742c54cc2d15d2f348e344a97d8ff37eb5\c6fb0bdc-c126-454b-86d0-7aeb06a6a749\index-dir\the-real-index
                                            • Size 72B
                                            • SHA256 fab63f8f6b66c529af1b6ce851e439b3b2da2dd34be0e94f947ec8ea775ca34d
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index~RFe58d00d.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\758583742c54cc2d15d2f348e344a97d8ff37eb5\c6fb0bdc-c126-454b-86d0-7aeb06a6a749\index-dir\the-real-index~RFe58d00d.TMP
                                            • Size 48B
                                            • SHA256 33e83f4f4bf3460301189d49166f54e43cc9d10e90943d45a5efaf258421af9f
                                            • MD5 SHA1 SHA512

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\758583742c54cc2d15d2f348e344a97d8ff37eb5\index.txt
                                            • Size 256B
                                            • SHA256 bdf29157ff2864c223d5b2353c04b4e6242103ad97eba2ac8774d43a2f38879f
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt~RFe58d03c.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\758583742c54cc2d15d2f348e344a97d8ff37eb5\index.txt~RFe58d03c.TMP
                                            • Size 261B
                                            • SHA256 0eb310d04676619b61f06dfdd00e516d6dd5d5ac94be5ee3548337c6887dd52b
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 72B
                                            • SHA256 810ccd04e2d8b3badf7b7c450287777157c52c7e543af1313a941b57b12bc918
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index~RFe58cfaf.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58cfaf.TMP
                                            • Size 48B
                                            • SHA256 bc02a7b7ffbe81591b3fd335cc53b66d0c56a087a504f5e017e3cb921886a60b
                                            • MD5 SHA1 SHA512

                                            sync_diagnostic.log

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                            • Size 4KB
                                            • SHA256 b732894278d681dfe4ef2c620f744d7179b0f703d058c1edb984b01803e21b1d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            08f6fe11-e538-4219-8f0a-ed783305db66.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\08f6fe11-e538-4219-8f0a-ed783305db66.tmp
                                            • Size 22KB
                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 19KB
                                            • SHA256 6be51c204ec3f43972fd211c1be80fb8b420a7a94e00e12b0562ed98b3a429b7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 27KB
                                            • SHA256 fb0c0f9baee5a97c9d8ab8a9eddf67ca43edf1d47e5c97cc677917f8b27c3873
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 8KB
                                            • SHA256 22e1aff96d17959f88eace06f5c42654c9154c72c7117155d8ae7ba99109edfc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 8KB
                                            • SHA256 42440a21a9516f6a98e15aac569a26e470d74bce7766c718c74fd56942105d39
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 19KB
                                            • SHA256 be3b0af95018365470bf8c176f3243e874966dd8ccd050c6ee04068c67b182dd
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            498bb645-9560-4658-b91a-884b55e76d9f.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\498bb645-9560-4658-b91a-884b55e76d9f.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512

                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Size 2KB
                                            • SHA256 47f6fde27b8218b06e88b760dad9902364540d8476ce52284aea001312100201
                                            • MD5 SHA1 SHA512 TLSH