Analysis

  • max time kernel
    12s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 12:17

General

  • Target
    BOROS.html
  • Size 22KB
  • Sample260804-pgd95sah75
  • SHA256 a663e66eeba38f023415888fe2199ad423a85358c13e414c9f97824b75b1ecc5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of FindShellTrayWindow 40 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 26 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\BOROS.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:6428
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x25c,0x260,0x7ffb88b1c188,0x7ffb88b1c194,0x7ffb88b1c1a0
      2⤵
        PID:3788
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,6163634175993019997,5195055103276471627,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:11
        2⤵
        • System Time Discovery
        PID:1736
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,9840084833520376503,3742440778831148614,262144 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
        2⤵
          PID:4636
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,6054915228090295757,2232069441864956640,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:13
          2⤵
            PID:3172
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,5900677933468663382,14092204560905440531,2097152 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
            2⤵
              PID:4860
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,396755988234009962,14631644140453039195,2097152 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
              2⤵
                PID:4784
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5200,i,8865908008235443538,7722767683321799111,2097152 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
                2⤵
                  PID:3036
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,7015065818118587436,9433466603693705032,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:14
                  2⤵
                    PID:1784
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5672,i,5605603512507023881,3214126206915165176,2097152 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:1
                    2⤵
                      PID:2828
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,7978379216739881161,13663113720938391231,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
                      2⤵
                        PID:5788
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,14308648643313382447,1975326280189392915,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:14
                        2⤵
                          PID:4244
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,17546464557597823450,17601173556000370090,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
                          2⤵
                            PID:6560
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,2278729661723282555,8076532412629975320,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:14
                            2⤵
                              PID:2112
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,2278729661723282555,8076532412629975320,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:14
                              2⤵
                                PID:3752
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7032,i,17583434014774634695,12304696726051391948,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:14
                                2⤵
                                  PID:4328
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7036,i,6129348862897909552,13434804526314693171,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:14
                                  2⤵
                                    PID:1484
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7044,i,2094702310499565096,11391455907731242378,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:14
                                    2⤵
                                      PID:2228
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7040,i,4030604951648695629,15930602410947375743,524288 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
                                      2⤵
                                        PID:6888
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6092,i,11810603875527659379,11170575628089635420,262144 --field-trial-handle=2200,i,8053376143524492636,16097178910813381783,262144 --variations-seed-version --mojo-platform-channel-handle=1952 /prefetch:10
                                        2⤵
                                          PID:5708
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:2756
                                        • C:\Windows\system32\svchost.exe
                                          C:\Windows\system32\svchost.exe -k GPSvcGroup
                                          1⤵
                                            PID:3860
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                            1⤵
                                              PID:6936

                                            Network

                                                  MITRE ATT&CK Enterprise v16

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  settings.dat

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                  • Size 280B
                                                  • SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
                                                  • MD5 SHA1 SHA512 TLSH

                                                  settings.dat

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                  • Size 280B
                                                  • SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
                                                  • MD5 SHA1 SHA512 TLSH

                                                  BookmarkMergedSurfaceOrdering

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                  • Size 6B
                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                  • MD5 SHA1 SHA512

                                                  f_00006d

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
                                                  • Size 16KB
                                                  • SHA256 e340e273c242ae0e5449ba485b4dbf4c9aea4b7f125cda1ece641ebc831dcdb6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00007a

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
                                                  • Size 29KB
                                                  • SHA256 fc361dfbb1258f7dfb4e038663f47415923bd07c7df9dab05d0bdef6446c49a3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00007f

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                                  • Size 31KB
                                                  • SHA256 f7080c7d652189f333b3e565d8cb4a03a39bf9e134aa4f23663a098710650115
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000081

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                  • Size 45KB
                                                  • SHA256 09375ca960f1cb21d23c434f39d1e0e6a019846bdc9656bebc13ad9dbde2fc53
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000a8

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                  • Size 81KB
                                                  • SHA256 71f8c1406336b0c606345d894189e430d30b779c87641b2dd1898d0b28fe6172
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000ae

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                                  • Size 166KB
                                                  • SHA256 77e0d5e75dc5c8d1ef4263c0bd6dbe6fa16512b6a010d156f087b45faeecaaa2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000c1

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                                  • Size 56KB
                                                  • SHA256 72a4c179ff1af91b2b3a2d9ebcfb428ddfb002c90054e7d5dd1d2a94da19a55f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000c2

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                                  • Size 42KB
                                                  • SHA256 4b5d7e608d49bd67548db052f4fbfef4450db045aec1685e3a921c17b0ae8a32
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000ca

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
                                                  • Size 104KB
                                                  • SHA256 804c0fc94dda8a8b42ed363bc35f9e9e35a6a0548a553ca62a82989aba4b31e4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000d5

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d5
                                                  • Size 61KB
                                                  • SHA256 4a23a6a4fe0013c2d68b538bf97e5132eac1aaa0526d2c426a0928b2d75e68cd
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000d9

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                                  • Size 59KB
                                                  • SHA256 0b188d0a10d02cf0d90e85d094dfdc8d59f43c252e301cdf32e1efccc573c70e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000dc

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
                                                  • Size 16KB
                                                  • SHA256 0c1c035a1167a43c13986f66b121dbd2901fd9442bade55cd7e046ff8ae6651f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0000e4

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
                                                  • Size 44KB
                                                  • SHA256 d5d59c73c2722ccccb21d28a5f154d2970021a69f6007231e71e99af5f80891c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00010c

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
                                                  • Size 85KB
                                                  • SHA256 03875ab0d2cbdcbf725f9bc979db6e52cc08623ee31781f3ed33f8579b266b7a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000110

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000110
                                                  • Size 17KB
                                                  • SHA256 79596347d5502eb1f1404f1d651b729c5334cc41b22eef400f98c08207b3df31
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000113

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000113
                                                  • Size 19KB
                                                  • SHA256 d8b23b12a0d5de334072a8d095becc3b9cdd9110d3d3e3e5566a105a3f45540e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00012c

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012c
                                                  • Size 22KB
                                                  • SHA256 1a9633e943f6f72f4b0fe97f68d974edfb2bc7203937be9ebedebf38974de907
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000151

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000151
                                                  • Size 31KB
                                                  • SHA256 fe843a51ff344f379604ea7768a429ea84e80b8074669bc436820b3b2b218fa5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000172

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000172
                                                  • Size 48KB
                                                  • SHA256 96d7bd635658872ebbe2c25611c63d0bbb08dab987bf286e79fd448b1e8e6419
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001b7

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b7
                                                  • Size 68KB
                                                  • SHA256 46e6abb434d5217cf6d3d82aa628555e3c7d4a13705407b3bf0441c2ce18b502
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001b9

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b9
                                                  • Size 82KB
                                                  • SHA256 f8f584118645b96faf43a9da61936a7b30855b54605f8cde93cb2bf495a38bdf
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001bd

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001bd
                                                  • Size 19KB
                                                  • SHA256 16d174a42bbee210ded46d4778b2f9730ddf3f5ac0af3bb49a6b45c0e2feda72
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001dc

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001dc
                                                  • Size 20KB
                                                  • SHA256 4ca7c3434b97a003039ed8d553bec3668ae2ff77591f4ef25da9552c0f4d522e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001ee

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001ee
                                                  • Size 31KB
                                                  • SHA256 e07d13c044e15a2a00838744376093179a7e974b37862b88645596cb1cba3645
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001f3

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001f3
                                                  • Size 25KB
                                                  • SHA256 f3046c576b83aff2689633c08ede9126b26de1c8611a4e46d13dce282bfd8a10
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001f5

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001f5
                                                  • Size 18KB
                                                  • SHA256 20e8fd2dc986ec1f100e000aad9c80cdf8b1eab3a6d1d814072aa72c3924d5b3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001fd

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001fd
                                                  • Size 24KB
                                                  • SHA256 33448130c68b92a1dd11162739d3c6fef24f9ac7bd2c185f2a46a4574c2f61bf
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0001fe

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001fe
                                                  • Size 114KB
                                                  • SHA256 224100b4c9b9b4339704a753a42f743e9a8f70070923cb6c0d18f0da16a93dbc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00020e

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00020e
                                                  • Size 18KB
                                                  • SHA256 0f1264e5ef2536e3d5739e3273819183c63ed81e6e7732003b527eacaa79bba6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000214

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000214
                                                  • Size 18KB
                                                  • SHA256 0e5c65b1e3266a5102e0abbe556178f25ded71f9f93bbc7ab9539f62fee048be
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00023a

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00023a
                                                  • Size 20KB
                                                  • SHA256 a9ef9c8250553798f9481e8f26af2e0366f9d1dd0de16eda25a70f111199761d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00025f

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00025f
                                                  • Size 41KB
                                                  • SHA256 16aca2b8cdeef66e46f982b8054b85dcf7614863dcd0394cf99264c2c584257c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000263

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000263
                                                  • Size 20KB
                                                  • SHA256 3b31412a4a9a663bcf9121e154eb9c65099ec133afe08eb35ee17babb818b344
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00026c

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00026c
                                                  • Size 18KB
                                                  • SHA256 98c57846f415023d1bf86aef0d6ca0a8db89a7ea80ce45ad52a1a890d309638e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000272

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000272
                                                  • Size 42KB
                                                  • SHA256 73c3de1d4c99cec3c5f6f60f7c2737cd7bec3fd536ecabc821d5d0cbe62cf3e4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00028d

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00028d
                                                  • Size 45KB
                                                  • SHA256 eec1f73448f18fb4e2cd1694559db7308c23e1b7b8043c490f12c0dcd020f269
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0002a1

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002a1
                                                  • Size 44KB
                                                  • SHA256 3a6ebb898dbdfb47be1788d446996fd6ab479fa8565e40618f1595e2a8f010b1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0002c9

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002c9
                                                  • Size 35KB
                                                  • SHA256 b48e41481904a55c7faa268f0723b37b45bab1f3e8077d068348cdb7526b721d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0002d0

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002d0
                                                  • Size 73KB
                                                  • SHA256 3f783aff29185c956487bf7551329e9908eebf0c5f00b4ed8e02ff53750cd728
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0002dd

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002dd
                                                  • Size 57KB
                                                  • SHA256 15d8b0a81bf738c30899945a074f520b9bb22b3109b8825017208992d9b22167
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0002e7

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002e7
                                                  • Size 36KB
                                                  • SHA256 6a9dc53beb2f9d11fdc58935783084d7530a2803e6a4db4432f18a207f1b68cc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0002eb

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002eb
                                                  • Size 22KB
                                                  • SHA256 d093af478ba7ad80ae14c7e34e0e2a68a812c390dde11106c00d9e90e74ee464
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0002f9

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0002f9
                                                  • Size 24KB
                                                  • SHA256 45b36f296adc64d4e07a8958cb4719d3b3a666b1818aa0455c3f5171379eb279
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000306

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000306
                                                  • Size 22KB
                                                  • SHA256 6f992b18946e5d069b3ca8b055e75f222384c7dabd53ab5a7be79e6e95bb538c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00032d

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00032d
                                                  • Size 24KB
                                                  • SHA256 3a6126af23b6d2831489c53a309f7422a38e6831a924f82c8e8908059f027a03
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00036e

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00036e
                                                  • Size 77KB
                                                  • SHA256 fea29364905bf08e34494d0fbbd467f416af44d71b25a82e1c8158f126aed02e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000370

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000370
                                                  • Size 58KB
                                                  • SHA256 25f7476d35edf359c191e55bbd51b21bceac657c43d7580fccbb938c5eabdee5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000373

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000373
                                                  • Size 55KB
                                                  • SHA256 f786f64f87aa2761f79fa2553c3996f61bd8a857951cf72a5c03e6b3ed50becb
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000378

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000378
                                                  • Size 26KB
                                                  • SHA256 338f6b221492e9225a8f6d3f69d2eb9c85d34cd4602dd233931adfba0ea4ab93
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_00038d

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00038d
                                                  • Size 17KB
                                                  • SHA256 8f7c9e20c075d5c0cd3fe28278e2d3ee9a7e75763f9d3a8fc6f346f4daf396e1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000399

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000399
                                                  • Size 17KB
                                                  • SHA256 ef46899d3af5e9afeb7f4761fa696fc2850e092bdc936813f76c9fc33ad38455
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0003bc

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003bc
                                                  • Size 59KB
                                                  • SHA256 bcdeb2da90d5b76c5f9c4744de38e1ac150360c5efec14b89c385453ea12aa41
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0003da

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003da
                                                  • Size 25KB
                                                  • SHA256 630c76b56960110005df523ac311619dd88903bbb876ab314c42dcc7eca686c9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0003f1

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003f1
                                                  • Size 57KB
                                                  • SHA256 35474e95458505b2acc17c314360b928423b9fbe8c3bf4e577ba4144deed65c4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000426

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000426
                                                  • Size 102KB
                                                  • SHA256 02a6c5c277b47aa06e90392d169a13bdcc55fa3683daeb3a5a9a4d8bd8df8702
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_000456

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000456
                                                  • Size 29KB
                                                  • SHA256 32b4a9dc8bad0bb3adfbc1abbe89b98a1b16a15b63566e3e2b313ecb1acb2788
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  f_0004b1

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0004b1
                                                  • Size 38KB
                                                  • SHA256 8992c2af29d976b592a6a4e02a205317a573c2d414f136eabb430d36d1b9af27
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  SiteList-Enterprise.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                  • Size 2B
                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                  • MD5 SHA1 SHA512

                                                  Network Persistent State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                  • Size 3KB
                                                  • SHA256 d310fa224a3f809ea78370cb93c8e42da87746cc41b0c46d6eeb18139aa1838e
                                                  • MD5 SHA1 SHA512 TLSH

                                                  Network Persistent State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                  • Size 2KB
                                                  • SHA256 568c25ba5a5f6ba24324abd14c8ef19618f591f0438fa44f8fd93cd6370a068f
                                                  • MD5 SHA1 SHA512 TLSH

                                                  Network Persistent State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                  • Size 2KB
                                                  • SHA256 345568c549399e6fbf1665190d419ccd96acff7ddcc30951418cb7ce95f4b83a
                                                  • MD5 SHA1 SHA512 TLSH

                                                  SCT Auditing Pending Reports

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                  • Size 2B
                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                  • MD5 SHA1 SHA512

                                                  Sdch Dictionaries

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                  • Size 40B
                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                  • MD5 SHA1 SHA512

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                  • Size 14KB
                                                  • SHA256 c38f96a0138617ac6b14c0135e3d5e9629f953fbf079af46bb756a08ec3851f4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                  • Size 15KB
                                                  • SHA256 7cc4ae380717d1493653c3e0dc721ed86d7b9d0f7a2088eb082d68107d7af77e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Secure Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                  • Size 27KB
                                                  • SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  sync_diagnostic.log

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                  • Size 24KB
                                                  • SHA256 21dd9b00a4ea995bdba8d79f54514a784be0eccdbd62deb04cfeae63fb30db4e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  CURRENT

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                  • Size 16B
                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                  • MD5 SHA1 SHA512

                                                  MANIFEST-000001

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                  • Size 41B
                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                  • MD5 SHA1 SHA512

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 24KB
                                                  • SHA256 0c254d037a91609465fffdf55f865daea33867edd310d999f60867b1d6afd6f9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 24KB
                                                  • SHA256 ab9c37780704f3cdfe102cb1713e78ec8ffb6fc16a78b7a82a15a599d4acfbe1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 28KB
                                                  • SHA256 c624f6eefcb1419c216c8e525bd95128ceef073b69ffbd6e7c3c0b4959c35a75
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 24KB
                                                  • SHA256 d52ab6c3600c8229cf5fd770c92cb74d45a1a5c04ef3271974cb151ce4755679
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 24KB
                                                  • SHA256 cf0e598a8e313bbaaa83e6ad70dae6db3dcc99479de8ab9a87f5464903cb0295
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 26KB
                                                  • SHA256 3d95e5563163702b85dccf6a0f2ddc5d4922e6c3b33087b0b6868194d0004bd0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH