Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    12/07/2026, 01:47

General

  • Target
    https://t.co/6d8OyJyh00
  • Sample260712-b7htcsby4p
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 40 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://t.co/6d8OyJyh00
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3624
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffaa95ac188,0x7ffaa95ac194,0x7ffaa95ac1a0
      2⤵
        PID:4952
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,8908568316880497339,5144242421088832757,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4848
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,1571953785592315713,4504852556376748957,262144 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
        2⤵
          PID:1508
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,373878593738339846,424745981857629264,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
          2⤵
            PID:2232
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,5167274703422099694,14970825451254820582,2097152 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
            2⤵
              PID:2040
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,17940524791523373866,15552193445076880077,2097152 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
              2⤵
                PID:4928
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,9257225348444365450,823057220853470084,2097152 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
                2⤵
                  PID:5096
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,14396636277389171218,4542247794327541672,2097152 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
                  2⤵
                    PID:760
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3528,i,17452800956046047354,6036315571772732501,2097152 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:1
                    2⤵
                      PID:2380
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5264,i,6390393298251151879,9316525144818529330,2097152 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:1
                      2⤵
                        PID:5088
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,4089655528056092956,4512004215765907178,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
                        2⤵
                          PID:2140
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,3873427831633362260,8830539187724918097,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
                          2⤵
                            PID:548
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,14112296888438972738,6421400360429451667,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
                            2⤵
                              PID:3044
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,14112296888438972738,6421400360429451667,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
                              2⤵
                                PID:1544
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,7229338588883366773,10028247950693186255,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=140 /prefetch:8
                                2⤵
                                  PID:3968
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,4640043658787055046,6656636748220750106,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
                                  2⤵
                                    PID:1948
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,3966789194455757862,16545956632846985234,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
                                    2⤵
                                      PID:2268
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,6837061426640195853,16339444103442880095,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
                                      2⤵
                                        PID:3040
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6204,i,621047614281892187,4629591720544872544,2097152 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
                                        2⤵
                                          PID:1180
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,11775788851671827471,11535808377487196277,524288 --field-trial-handle=2232,i,10419400217443677897,1722826867638078303,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:8
                                          2⤵
                                            PID:3212
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                          1⤵
                                            PID:4556

                                          Network

                                                MITRE ATT&CK Enterprise v16

                                                Replay Monitor

                                                Loading Replay Monitor...

                                                Downloads

                                                settings.dat

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                • Size 280B
                                                • SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
                                                • MD5 SHA1 SHA512 TLSH

                                                settings.dat

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                • Size 280B
                                                • SHA256 8b98c8b6b381e81c2bbf54b9caa68f2c18c9e88f35c3a0ec4606ce6913bec6fb
                                                • MD5 SHA1 SHA512 TLSH

                                                settings.dat

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                • Size 280B
                                                • SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
                                                • MD5 SHA1 SHA512 TLSH

                                                BookmarkMergedSurfaceOrdering

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                • Size 6B
                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                • MD5 SHA1 SHA512

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                • Size 3KB
                                                • SHA256 d034bdf60feaba9eb44c036b2ec01a5d3c92ee9d9917b1208c27680c2705d181
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                • Size 3KB
                                                • SHA256 83016a6b7a9da2343449b1df0081b3f9b1ecc7ec8151496376e3d2f3659a553e
                                                • MD5 SHA1 SHA512 TLSH

                                                the-real-index~RFe59137e.TMP

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59137e.TMP
                                                • Size 3KB
                                                • SHA256 49e76d1ea5e1b92fa8bf3d80e66ed3488567e95820c7e0508853d8f6da651045
                                                • MD5 SHA1 SHA512 TLSH

                                                SiteList-Enterprise.json

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                • Size 2B
                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                • MD5 SHA1 SHA512

                                                Edge Profile.ico

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                • Size 70KB
                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                • Size 1KB
                                                • SHA256 832cad8ee087b5b38c062cce73f4b569f4b1d46b3157f8b6e670510b4c9c3e94
                                                • MD5 SHA1 SHA512 TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                • Size 1KB
                                                • SHA256 3b04bd4c53f9393502b8b584885789e2c5fcbc1bc31b7fe3b56e089757a888c8
                                                • MD5 SHA1 SHA512 TLSH

                                                Network Persistent State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                • Size 111B
                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                • MD5 SHA1 SHA512 TLSH

                                                SCT Auditing Pending Reports

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                • Size 2B
                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                • MD5 SHA1 SHA512

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                • Size 13KB
                                                • SHA256 1557f0111a4b3c1882ccb0629f07e057207556b81367c5185a19b7ed8a49b9a8
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                • Size 14KB
                                                • SHA256 16d0e040587d83d503827b8cbe49b7774a739a62ca7c8da308058c0cfca8f243
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Preferences

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                • Size 15KB
                                                • SHA256 b3b2e2c95610f87a5ce82978be8f0b2f5275973fdf4fe66ac72eed46a6b41786
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Secure Preferences

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                • Size 30KB
                                                • SHA256 07aeaa4e4caec2e99aa1b5dbfc4208448bb103513d2532e90ab55c88e4c84a76
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                sync_diagnostic.log

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                • Size 4KB
                                                • SHA256 1de325a9d29ea1471a7200bf289f5000b81e5e7a0d98afc8bdd4ff8e1fb608ce
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                OperationConfig

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                • Size 22KB
                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                OperationConfig~RFe59af70.TMP

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59af70.TMP
                                                • Size 3KB
                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                • MD5 SHA1 SHA512 TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 19KB
                                                • SHA256 d05c57f54e0f57de2a948af43250405b0debfa676d65c442093d583ea7b9e85b
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 27KB
                                                • SHA256 eea77458d18497fe41edf41c5241e2e5ff172ff2dbdf88336d45e9b9cbd17e88
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 33KB
                                                • SHA256 574483119d36aff3de89bd56137be9d1f5abe283a08f65406e9b23ef0bddea08
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 8KB
                                                • SHA256 d71239477dc7a62708867878e170bba6e2a271120526a8b7928c500bf67e113f
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 19KB
                                                • SHA256 993b32aaaeeaf7d598baab7dcddd895a94082de08db0778e449a6f7e12e51c69
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                Local State

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                • Size 8KB
                                                • SHA256 d32ace502f92a78728f48f4d59c5157ed9a9cf20f72a21bf89b400adf89749b4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                data_1

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                • Size 264KB
                                                • SHA256 2a11f87836ed7dddfa19bab5a7c73cac4e2ef35009c85d9397d93460eff8326b
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                metadata.json

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                • Size 13B
                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                • MD5 SHA1 SHA512

                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                • Size 2KB
                                                • SHA256 faf486d51693ab54effa486e2a6dd4b83320a056dab47eb8a903ece3c38a9a1d
                                                • MD5 SHA1 SHA512 TLSH