Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/06/2026, 18:24

General

  • Target
    https://app.smartrequest.com
  • Sample260623-w2a7jsfv31
Score
7/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: [email protected]
  • A potential corporate email address has been identified in the URL: [email protected]
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 39 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://app.smartrequest.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2872
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffa051cc188,0x7ffa051cc194,0x7ffa051cc1a0
      2⤵
        PID:2948
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1852,i,6764084931388243385,10198938642527606138,262144 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:2212
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,7454210558834796496,12138147327935557678,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
          2⤵
          • System Time Discovery
          PID:1676
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1384,i,5469134662790209035,12702318065546750101,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
          2⤵
            PID:3880
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,814219902271280432,17823229013180728412,2097152 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
            2⤵
              PID:4744
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,15815044122940814170,1332855256907896120,2097152 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
              2⤵
                PID:916
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,4978995316677408345,15359435131074759261,2097152 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
                2⤵
                  PID:1192
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,9779362155308309935,9871175861154841650,2097152 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:2
                  2⤵
                    PID:4088
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,933186531616510195,8775218634830712276,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
                    2⤵
                      PID:4664
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,5593056507351743827,6931270025213971552,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
                      2⤵
                        PID:4636
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15713694003704490900,3712497635556118653,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
                        2⤵
                          PID:4760
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15713694003704490900,3712497635556118653,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
                          2⤵
                            PID:1884
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6252,i,6889718120791077330,8330868716663905844,2097152 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:1
                            2⤵
                              PID:4176
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,10781650956949429662,16730596785610881656,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
                              2⤵
                                PID:984
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,14017042781848363464,15613887588945926505,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
                                2⤵
                                  PID:2328
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,17785820906420287865,7140521515527996545,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
                                  2⤵
                                    PID:1400
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5528,i,7266884426729014866,7719216958594656114,2097152 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
                                    2⤵
                                      PID:2896
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3504,i,145121276748960761,4442485137892055334,2097152 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
                                      2⤵
                                        PID:1164
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,7096100028184744566,3608348996651866773,524288 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
                                        2⤵
                                          PID:1316
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5976,i,4600735277171701670,6986250175390078793,262144 --field-trial-handle=2272,i,2999525521239426358,15771206432333460969,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:3596
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:1212

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              blocklist

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                              • Size 105KB
                                              • SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
                                              • MD5 SHA1 SHA512 TLSH

                                              BookmarkMergedSurfaceOrdering

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 3KB
                                              • SHA256 9c9b6375dd32fbc9958294ce5d14d5e5b49c016aaa31303a9c5c4ff1552f4602
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 3KB
                                              • SHA256 680fd7ceee28474faaa58f49356d97c286a5132c6e241e4f009c52cf4bfb7b18
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index~RFe588a88.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588a88.TMP
                                              • Size 3KB
                                              • SHA256 435b87564aeffa65a1b584785fb90c63378c53cedc90dd382763e2ea78d39be0
                                              • MD5 SHA1 SHA512 TLSH

                                              SiteList-Enterprise.json

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              Edge Profile.ico

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                              • Size 3KB
                                              • SHA256 f4ceba9210a5240135d1ab64734fb356de034762e6587c2f94042633f79b7d9f
                                              • MD5 SHA1 SHA512 TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH

                                              SCT Auditing Pending Reports

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 d028a057c9aa5e1d61717172eacb35df2b96f078986b8773a028b571d14cf390
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 14KB
                                              • SHA256 f8e1b6c77eac461e5d864eb5389fdfbbaaeb981b02e6aaf938e855d6739e677e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 14KB
                                              • SHA256 db8a1c004b0c05eba6751a8941ac4c72509d780427b4b3f2d18bc3bc45479b41
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 a28e3380c13fedeb021834abccae0c87959cb77dfe18c124dbe424bacae42325
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Secure Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                              • Size 30KB
                                              • SHA256 ccf3a6f027cf6d3c0341d333de7d076f0e17dffb091c1918742e0747d945e13e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 6KB
                                              • SHA256 a91fe752e1dc465086310632d72e99ee24bc5aa800f2a65679d6235dc6db3ab6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              eed42e81-bf42-467e-9ed8-e49b064f0e8c.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eed42e81-bf42-467e-9ed8-e49b064f0e8c.tmp
                                              • Size 106KB
                                              • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OperationConfig

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                              • Size 22KB
                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OperationConfig~RFe5910ee.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5910ee.TMP
                                              • Size 3KB
                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                              • MD5 SHA1 SHA512 TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 19KB
                                              • SHA256 ae86214e0aa187a116d850393ffe6e99bba75107fd57371ae869b718c718f1e0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 27KB
                                              • SHA256 94d6a39d43f4bbb7abc8315758a1f6c90fab4e0bb86a3443b41927271038efc9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 19KB
                                              • SHA256 abf8e555f3b1d8bcf082ee8c8c9bd9bf6f74f86e767ce5196b5fd8efef77bdb7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 cdf1fab8c67ac7b86323fadb551a08838beb0270070186d20286dd6b383cf0d6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 da194d8ebee86b438a1e49e205dbac282938c355e7bcb14543eeb952c3f2572b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9d4988be-b70f-44b3-8a62-5b69348e59ac.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9d4988be-b70f-44b3-8a62-5b69348e59ac.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512

                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Size 2KB
                                              • SHA256 44cf241667b8001b515d611ce3fdca0c30d3e3de43033651df6f02bd7df7c017
                                              • MD5 SHA1 SHA512 TLSH

                                              default.dic

                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                              • Size 2B
                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                              • MD5 SHA1 SHA512