Analysis

  • max time kernel
    13s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 12:17

General

  • Target
    BOROS.html
  • Size 22KB
  • Sample260804-pgd95sah74
  • SHA256 a663e66eeba38f023415888fe2199ad423a85358c13e414c9f97824b75b1ecc5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 40 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\BOROS.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4248
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffc6abdc188,0x7ffc6abdc194,0x7ffc6abdc1a0
      2⤵
        PID:5012
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,2650896913928582674,14470316043436540853,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:11
        2⤵
        • System Time Discovery
        PID:1984
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,1271225033513234411,17673899811462092593,262144 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:2
        2⤵
          PID:6000
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,14513096192569196375,2991245938994392446,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:13
          2⤵
            PID:1936
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3576,i,12495268664499083723,14561000953212988237,2097152 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
            2⤵
              PID:616
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,10108048000300234688,7828410285746344906,2097152 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
              2⤵
                PID:5588
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,6966965460175342612,15102077195636161124,2097152 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
                2⤵
                  PID:5864
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,15986553194554283130,3298867864240331067,2097152 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:9
                  2⤵
                    PID:5148
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3848,i,13463355743149972265,301482794011589886,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:14
                    2⤵
                      PID:4732
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3836,i,12764992742746310492,4420458855600350490,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
                      2⤵
                        PID:5992
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5788,i,5381990761836097366,14716304889623482006,2097152 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
                        2⤵
                          PID:3948
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,13919398226189589513,2568428818701835692,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:14
                          2⤵
                            PID:5708
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,13128991216934448508,17731938510768770554,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
                            2⤵
                              PID:2212
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6280,i,17350794351535477244,3418594261510956187,2097152 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
                              2⤵
                                PID:1232
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7136,i,18409645791367490595,669920666191880678,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:14
                                2⤵
                                  PID:4680
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7136,i,18409645791367490595,669920666191880678,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:14
                                  2⤵
                                    PID:5256
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7376,i,12407939945412501367,7223577231777748767,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:14
                                    2⤵
                                      PID:5340
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7380,i,12066036695781524259,5127606291584426418,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
                                      2⤵
                                        PID:5000
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7384,i,13575340894308304438,2791424636275876593,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
                                        2⤵
                                          PID:5800
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,3840055588321834322,5582333404858811648,524288 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
                                          2⤵
                                            PID:3272
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7388,i,10587546708020648663,12044545272797609595,262144 --field-trial-handle=2096,i,10195920598920393043,15731939064448011739,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:10
                                            2⤵
                                              PID:3396
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                            1⤵
                                              PID:2472
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                              1⤵
                                                PID:3636

                                              Network

                                                    MITRE ATT&CK Enterprise v16

                                                    Replay Monitor

                                                    Loading Replay Monitor...

                                                    Downloads

                                                    settings.dat

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                    • Size 280B
                                                    • SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
                                                    • MD5 SHA1 SHA512 TLSH

                                                    settings.dat

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                    • Size 280B
                                                    • SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f_000083

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                                    • Size 49KB
                                                    • SHA256 0bb3a0eaee937040a097ab9620d7a347a95b232a38daf0b7b782dc03bfd3109a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000086

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                    • Size 67KB
                                                    • SHA256 99125e416a8d053827bc51004d15324a50d6284fd5e8f6f6400399549f130524
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00009c

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                    • Size 22KB
                                                    • SHA256 31383bf9199a7b20176c21f4528615184ef3738607483f6215cd9d2ec00730da
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0000a9

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                                    • Size 68KB
                                                    • SHA256 b7f0d0204d272b20adb77e9888018fc2211016eda00f1f70460aa4f8b9ba7200
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0000ac

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                                    • Size 21KB
                                                    • SHA256 c6fc0b52d392c765a14d604364635c6a225cdd95aee7afa9d2e51ab31a00c3cc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0000bc

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
                                                    • Size 111KB
                                                    • SHA256 ac65be9553425f2e5f483f1be59fdb4a107b7a24fa30963b88f1621d630a9272
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0000bd

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
                                                    • Size 38KB
                                                    • SHA256 3f8f9525549debf785717244ffdca8d4d83e7e4bf38be5b8271da668ba160995
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0000c7

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
                                                    • Size 33KB
                                                    • SHA256 0de3b955eeffed270a1458597d343daa66ea1d5274d90af768a9062dc37fc1b0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0000d3

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                                    • Size 18KB
                                                    • SHA256 ab052221c76b2545ae451139541897aaa8c08779e559fd2f5880f15f54c84b9a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0000eb

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
                                                    • Size 29KB
                                                    • SHA256 6d5438630b764fac9c51b9b811aa8cdc34a3d57fd5640ccfd3949c5cbfdd3f77
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000118

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000118
                                                    • Size 52KB
                                                    • SHA256 0e9e58d00fe6579c69c2085b2b66078d1f3a403752966226b3cace42c0f63c90
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000136

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000136
                                                    • Size 16KB
                                                    • SHA256 f346db31de7652ae69a5dc81b4a0d3011cf1ccd0d6ea4d330405187bdda11a01
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000144

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000144
                                                    • Size 53KB
                                                    • SHA256 7d95f66d08296e6c013c8c7d32c14b7dea10294a343487ce23013cb9a2b38588
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000146

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000146
                                                    • Size 37KB
                                                    • SHA256 27e3652be9ec736e4130f7567cd893e669291764cf5769e40aba67b9875df391
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00014b

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014b
                                                    • Size 27KB
                                                    • SHA256 354acef25f19de4e6d1f8cc1d57f091d5b7e2fcda3dc2f0cdc051c4891ee7bbb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00015c

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00015c
                                                    • Size 23KB
                                                    • SHA256 11a43fd1f277471df08a7c387dfe73af6c39015d6bd5de69b0ac4c1bb6a11054
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000167

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000167
                                                    • Size 29KB
                                                    • SHA256 7ad07e62fbc14b39e3c6d8d7e34df72ce422cae54e844aa03c40d533705a2310
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00016b

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016b
                                                    • Size 69KB
                                                    • SHA256 677052a7e8d805189124751890ce13068add3369c83bb7ea016a5d588da7a50e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000172

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000172
                                                    • Size 58KB
                                                    • SHA256 6dc4eeeca2b3961a54fb1f8a8f96bedef771048e0acc45d37d00f25b6526ba71
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000173

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000173
                                                    • Size 20KB
                                                    • SHA256 301e50a16ea0ba0a2faa07f0da08044b06ddd4627033e8f86ee27e0bd85192e6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000177

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000177
                                                    • Size 18KB
                                                    • SHA256 1f7827304aa894939fed85a6cd7d1ed18d0720be62fd98e5b335ebfd6e3b19c3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000186

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000186
                                                    • Size 20KB
                                                    • SHA256 e5c0a3e85da1a91fa35c167aec45ad3c543b71fd98e6574ea6531a3f5d7a8706
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00018f

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00018f
                                                    • Size 16KB
                                                    • SHA256 3caf5044d7d2487cb06802dbcc1986aa8879d31276068d670f84b31f6b7a5384
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000194

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000194
                                                    • Size 17KB
                                                    • SHA256 70c58435f56d2c7d25953b6f545006bdaf1e46be932bcbfe31cbdda0095dc369
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000198

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000198
                                                    • Size 80KB
                                                    • SHA256 2f84c77550b68614f732e745439018f2cd816e601f55a9a86a8f81cf7a1aab9c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0001b8

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b8
                                                    • Size 60KB
                                                    • SHA256 244113977633355b625ae6659ac935eeaa5324ebe3223525cb38c8362387616e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0001f0

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001f0
                                                    • Size 37KB
                                                    • SHA256 b4fccc72d7fc688cc21fd0609f4a101b0bfe97d42a96fedeebb9ced1844a5c6b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0001f3

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001f3
                                                    • Size 35KB
                                                    • SHA256 67ae191dad77f75fdd52a069b1e93edd2d17fb58bcefc262e9dfa1a0d9223497
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0001fc

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001fc
                                                    • Size 23KB
                                                    • SHA256 2fb9bb1286a561e8df4ea5c58a7e1a9a27efdc5adf00d4765625d5975a8bc13b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0001fd

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001fd
                                                    • Size 45KB
                                                    • SHA256 452eb50d96585ac794aa72fac36018224291ccdeb5948e3928b0f6b7c35d23fd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000226

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000226
                                                    • Size 25KB
                                                    • SHA256 fa054a6d442fb26ced0b5caf1617379497c5155cb876e099ca5abdcb6e32e1ba
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00022d

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00022d
                                                    • Size 20KB
                                                    • SHA256 314cf53ee85cd8a69b65a8497e87a32e8581af7913cd9e0dc6d2f121e5fa233f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000232

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000232
                                                    • Size 21KB
                                                    • SHA256 4aa0353bc1733aa93b0c160415ece25c02e0937f18059327748169552cf98550
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00023a

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00023a
                                                    • Size 20KB
                                                    • SHA256 f8e0ef56ac9be117e1c3d7e1dc48e42bda237fc2cb70a30c4869fc8bf96d2c30
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000242

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000242
                                                    • Size 61KB
                                                    • SHA256 07f628172151becf4ea1f22385a1e5643ab7d1a78f8aeb6216beaf6e81d9d834
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000244

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000244
                                                    • Size 113KB
                                                    • SHA256 8b7441fc817ca97ca0ecc74e1b565a9027cc43bd941ddf572269d6bf0a1e2937
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000245

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000245
                                                    • Size 151KB
                                                    • SHA256 2c40d1ac09c5c3295640ac36980ab6b29c55d9c80a4d9a1a5a01102a10168aff
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000246

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000246
                                                    • Size 42KB
                                                    • SHA256 e9cfe875a36e25860dce130f920ccbe3b5114c5626a37021570974d1ae4673bd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00024e

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00024e
                                                    • Size 60KB
                                                    • SHA256 38553bc0e1c7f227ed234ccffa5a10f9efc54da18f9bee8ca534d9f69e45f7e1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00024f

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00024f
                                                    • Size 23KB
                                                    • SHA256 bcfdebe8336b463092d4f1381addae818959a6a81d9620702d85a034673e1c58
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000266

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000266
                                                    • Size 16KB
                                                    • SHA256 65f9197e5110cc1fc05fc0c873afb0d228b07e7f03b099a7b91746f46f7c7a25
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00027f

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00027f
                                                    • Size 48KB
                                                    • SHA256 71f35b8b663cd6d266f6ab0024ae9773418a4ded0b2855f76c8cd930b7429932
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0002a3

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002a3
                                                    • Size 79KB
                                                    • SHA256 de905d69f76929b7ea2a382e53dedf7c7012f71658adc58be4035e6659a62038
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0002c7

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002c7
                                                    • Size 27KB
                                                    • SHA256 638af7f4602f1383cf1607c1f24bb930cc8005eb5a492cb383698bbe3da8028f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0002df

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002df
                                                    • Size 16KB
                                                    • SHA256 7234c736804c3883709ba2091169e6339aeb251257b1e61691bcaf4ba04a6ec8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0002ff

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002ff
                                                    • Size 58KB
                                                    • SHA256 2ee75163f10c3f3ac8d9028c12d2ac199579f58df129a364a07f6bdadcaff012
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000314

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000314
                                                    • Size 41KB
                                                    • SHA256 25cebb7484a7f76f0eb1ddaa283d0c504bb1a5718ac8a116dd541c01ec0e3ed5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00032b

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00032b
                                                    • Size 21KB
                                                    • SHA256 bbf98251aa085fe0bfce7d31ace7570bbb9ed0681fab4d26d8000c4e8fe8eb44
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000345

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000345
                                                    • Size 29KB
                                                    • SHA256 a8baf30d083dfadd8a79ffd1f81f60f97a11133a5efd07afda53ce0821f2417a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000357

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000357
                                                    • Size 34KB
                                                    • SHA256 ebd1323ffbbd9a2337fae88f8c8ddd4ccd8f466e1568ef15b363745b62e4eb4b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00035b

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00035b
                                                    • Size 43KB
                                                    • SHA256 5793bbc50bf4a701055f79bcea83a80ff6b45dd3c65a1b8f75d676cb5f39d845
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000388

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000388
                                                    • Size 70KB
                                                    • SHA256 10b382e18ad82cafb2702aeec19c36756d348f5599238e9077a8d258f3851acd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0003cf

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003cf
                                                    • Size 19KB
                                                    • SHA256 8a098db1551a3775678d2d3517485f118d6f00136dc7e0333019bc2f3cbb1aac
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_0003e3

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003e3
                                                    • Size 33KB
                                                    • SHA256 508e04273367b317e614cfca9fa0a10dcecad3e7203450916822bbc8a511d0e0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_00048a

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00048a
                                                    • Size 28KB
                                                    • SHA256 72099defa282bba068dbe19482faaea47c68465e0428ab3c56a4e438a4b696b1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    the-real-index

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                    • Size 3KB
                                                    • SHA256 40b5e4b95edb42c24c5620ccd339a47e05e42f9a21cf9919c7acaff0b69fd5a7
                                                    • MD5 SHA1 SHA512 TLSH

                                                    the-real-index~RFe595efe.TMP

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595efe.TMP
                                                    • Size 3KB
                                                    • SHA256 cea92ce9e5524d7aba36a66f938d6f22ce72b94f3add244c7f955def8d356597
                                                    • MD5 SHA1 SHA512 TLSH

                                                    SiteList-Enterprise.json

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                    • Size 2B
                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                    • MD5 SHA1 SHA512

                                                    Edge Profile.ico

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                    • Size 70KB
                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Network Persistent State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                    • Size 3KB
                                                    • SHA256 2188fb6f51a2a0cc9a29e13f244faf408a777d492e99c95ad045aec2e3fc9ba3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    SCT Auditing Pending Reports

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                    • Size 2B
                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                    • MD5 SHA1 SHA512

                                                    Sdch Dictionaries

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                    • Size 40B
                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                    • MD5 SHA1 SHA512

                                                    Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                    • Size 11KB
                                                    • SHA256 c8c88efe9d360ebe668197fb6ad0683ccdafb39b9cda2b1624f95bdcf433158c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                    • Size 11KB
                                                    • SHA256 2977258eb695ff1ec58082169fe1bf972241394dc6d216715b71dc600ef63780
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                    • Size 11KB
                                                    • SHA256 ecda73fac07ff1b37575dd918d39a7e96293d6e26d5d514cfe31b7e4d7ac45b1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Secure Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                    • Size 23KB
                                                    • SHA256 86b69947e14cf9fd2927e5973b0ba83a820b0d5b062c49bff317d1327d7af4c4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    sync_diagnostic.log

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                    • Size 2KB
                                                    • SHA256 302a1747e9898c36d6dbbbf037ac874315040678875cda67d0a73de4d205006a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    sync_diagnostic.log

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                    • Size 3KB
                                                    • SHA256 a18860ef08cea7ed4c7480aedd6664566111cf012c956095b8f036ad5d08c596
                                                    • MD5 SHA1 SHA512 TLSH

                                                    CURRENT

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                    • Size 16B
                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                    • MD5 SHA1 SHA512

                                                    MANIFEST-000001

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                    • Size 41B
                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                    • MD5 SHA1 SHA512

                                                    1f380e27-7143-46b0-ac48-e6f472473435.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1f380e27-7143-46b0-ac48-e6f472473435.tmp
                                                    • Size 22KB
                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 38KB
                                                    • SHA256 78bc164ec8821a2f32a04da76e8e705e57a7ab5624877f7842cb640a83122528
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 38KB
                                                    • SHA256 aab74e2a036e0780f0a0077e54129c1b0b7d8ff64ce7a29f54e16eacf1c24866
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 38KB
                                                    • SHA256 966896759196353ee9a4b65eba61ccb5727af14972bf77f69481880f201a8de8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 41KB
                                                    • SHA256 6f7cd85aa52dcac1e1adf5e48bfc44eca3b82c3722619eea47090640dcd4c001
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 38KB
                                                    • SHA256 bbbc38592f0164c2ed8dcd4b85325bbb931ca0ce42b29fc74b69c670052986f6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 38KB
                                                    • SHA256 95180c933a955c4fd581dd63c7cf3ec91544776fdf983d3b10493569e1318981
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    71499b88-6712-4f22-a7ff-b9965851061a.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\71499b88-6712-4f22-a7ff-b9965851061a.tmp
                                                    • Size 13B
                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                    • MD5 SHA1 SHA512