Resubmissions

05/08/2026, 21:30

260805-1csgraeb433

05/08/2026, 21:15

260805-z36avsgk7t3

05/08/2026, 20:57

260805-zrwx2sfr6s3

Analysis

  • user interaction
    yes
  • max time kernel
    59s
  • max time network
    62s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/08/2026, 21:30

General

  • Target
    http://www.fineartoffire.com
  • Sample260805-1csgraeb43
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.fineartoffire.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3420
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffa087cc188,0x7ffa087cc194,0x7ffa087cc1a0
      2⤵
        PID:4968
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,17156495933869668991,2297847743124357376,262144 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
        2⤵
          PID:1736
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,7324744411868974833,6628698757527739676,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:3
          2⤵
          • System Time Discovery
          PID:2952
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,9895659974331515463,11372076126464239827,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:8
          2⤵
            PID:4732
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,7737045897505751739,4501182129825484872,2097152 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
            2⤵
              PID:3236
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,5028592547064248884,16689248759659535275,2097152 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
              2⤵
                PID:1216
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,4477569160744795320,7303055742853112100,2097152 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
                2⤵
                  PID:4708
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,10585247489363401859,10728142537321950033,2097152 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
                  2⤵
                    PID:3608
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5040,i,15620738385579613631,17070700347312992959,2097152 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
                    2⤵
                      PID:1616
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,11346467330039043409,8728417870129963592,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
                      2⤵
                        PID:4768
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,4519189619530841403,9904143746412017055,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:8
                        2⤵
                          PID:3764
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7906826956973396141,17718696520073775664,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
                          2⤵
                            PID:2844
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,7906826956973396141,17718696520073775664,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
                            2⤵
                              PID:2920
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,11943428318670772251,14240475719222284360,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
                              2⤵
                                PID:5052
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,2131108598973751331,1396793066231326997,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
                                2⤵
                                  PID:1860
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,9594343763442643738,11676922541616624612,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
                                  2⤵
                                    PID:3168
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,11475518784859784885,3201506286364551168,524288 --field-trial-handle=2388,i,17135182543667761796,6010511828861245466,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
                                    2⤵
                                      PID:3584
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                    1⤵
                                      PID:692

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          blocklist

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                          • Size 105KB
                                          • SHA256 6ac1610274f1a1fe7efb487499493de9e02abb0353ede585200d27e7d566ceb2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 9aeab2c92c5f26a8ca39382cf1bb4652de05a24b8d0a9ed661920c6197bf4c98
                                          • MD5 SHA1 SHA512 TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 46246483d08868ff03d5f9bb48e547ca61f651c3e59a4138f5a5da74c69b3ae0
                                          • MD5 SHA1 SHA512 TLSH

                                          BookmarkMergedSurfaceOrdering

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                          • Size 6B
                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                          • MD5 SHA1 SHA512

                                          f_000079

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
                                          • Size 1024KB
                                          • SHA256 db808ecc33999839e1ed88d9b6f91603413f51ccbb568787ed7413b26954241b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007a

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
                                          • Size 1024KB
                                          • SHA256 754499d84884ae087fc65bd317891b320aac43a68f44fc8ebeb6a6c875e91a46
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007b

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
                                          • Size 1024KB
                                          • SHA256 ccfe7973fa4fb44bb5ca7269c4c96230d610e5e77b064b65c0fa869f0107bbcd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000089

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                          • Size 1024KB
                                          • SHA256 9964e855080ea01c48312e2d173ccf37ed9e4df7fdb2220722dc674fc68e11c0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008a

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                          • Size 1024KB
                                          • SHA256 5a6d5048289daae95985b1cc56850875bc4eed53874f555627179d6193015f79
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008b

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                          • Size 1024KB
                                          • SHA256 cdfe8c71eddfc19f2c688335875dc8ff115579b5076acd42b41074010ea5b49f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008d

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                          • Size 1024KB
                                          • SHA256 3acf058d272bd384f74aebf18ba9089c30313b458e7b74ba53c269698d396a6c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008e

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                          • Size 1024KB
                                          • SHA256 56401e357ff64b75606fbd2b7a47a8b5d270fdd6c224ac4f593ab6cda5f06b8e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000090

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                          • Size 1024KB
                                          • SHA256 dad760287432b2540740fe74aad870f9a6f552f0104b5df335bfadb378f128cc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000093

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                          • Size 1024KB
                                          • SHA256 ce1914202effc5903da2b122c7fc0d9a23a1b81d4190177f4da2132b0c91cd2c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000094

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                          • Size 1024KB
                                          • SHA256 ddee8158b2c889dc6ec380096a49f8e63d56c7bc708484df3ccdcb258ff296ca
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000095

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                          • Size 1024KB
                                          • SHA256 52865cea4c0313ea2e645f0301f95fa6d654c3c04b9c37ee8cea88e367ca730b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000096

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                          • Size 1024KB
                                          • SHA256 2691dcde5e93ebb50b0c814e5389a2d04e5782edd69156062fb0d883cae5e399
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000097

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                          • Size 1024KB
                                          • SHA256 91edc213b61f656f9a89a915c28839f029ccdb8b5bb4b17cd8121d753a6da585
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000098

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                          • Size 1024KB
                                          • SHA256 0b930cd52bec3be4377840981440513bf392960af0bf9e8c3057a9ca1c937df9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a5

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                          • Size 1024KB
                                          • SHA256 e9958c61a2ca0ad9220ce3f738f0a1f94c47a98dbf9740398e945e100fddabeb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a6

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                          • Size 1024KB
                                          • SHA256 48df90dbe5c29524b8597f1eaf1d70b390acff8046570213590ed1b756d2cb25
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a7

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                          • Size 1024KB
                                          • SHA256 21fcae0268124d3c3d60870330ae5f91bcbfc29952a25fab9cc3e355ba8ded07
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a8

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                          • Size 1024KB
                                          • SHA256 038f4f9081f58efbf97b0e1bbb38a7c6845c3c2afb0a274989d83cfed35729f7
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a9

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                          • Size 1024KB
                                          • SHA256 5633274e4cda12a5ac28b8add654166d913f3eea70444f217d411de91198e8dd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ad

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                          • Size 1024KB
                                          • SHA256 c6d06a9457200298f6d9b45d6bc0fbd5fe3c12ec04a8713ab931005e2d1fe6c1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ae

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                          • Size 1024KB
                                          • SHA256 cfc363b595326b7b3bce54a801e73ffb986283415724b47f6113012e12ee068a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000af

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                          • Size 1024KB
                                          • SHA256 1871ae04b91ce76a487ce532ee5ef2eb56e95f8d981b1d56f21bd6e6f4eb8464
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b0

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                          • Size 1024KB
                                          • SHA256 54ed2cc74db1d882a72441c98463354d23583501626d9790da53c91ad173df70
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b1

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                          • Size 1024KB
                                          • SHA256 17f62154b8a14a1d20b476d88e7415b02910047091f0175a92bd05d706dcdc81
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b2

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                          • Size 1024KB
                                          • SHA256 4d51f193dc1b9411612d766357c6e6bfb23683479b51ff45dc40c41569d375e1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b3

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                          • Size 1024KB
                                          • SHA256 f7524007118a9382a9b607189cbc904f27b3ef7699157ec412e48a79d9e42ff5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b4

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                          • Size 1024KB
                                          • SHA256 7776f45c946a7352b3b3feb779f5366c22bbc3be400ef60496b5a14e25b712ab
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b5

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
                                          • Size 1024KB
                                          • SHA256 89a8533747e1b56c7f0f80b7b7930a319560aa44ac44b840dc1db4e84c58eb78
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b6

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                          • Size 1024KB
                                          • SHA256 f1eaa2ab3807c77a5994686c9b861800b688a63c4ddcc635c6b080439ef675ab
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b7

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                          • Size 1024KB
                                          • SHA256 3be1fb58360bb2249f2677c3a8cdf0d0f56f6df56a61f99bd8afea540f2dc375
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b8

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                          • Size 1024KB
                                          • SHA256 a06d152c3b287b55b1ebcbab71edbaa5490ce1b703bb8d42a2cf2ca8ee952428
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b9

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
                                          • Size 1024KB
                                          • SHA256 c6cf0aa562b7b5b2218d480535518e596544a205af97eeba210d9e648ce6a666
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ba

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                          • Size 704KB
                                          • SHA256 a84207682fa83d76c63f0ba27bb51707fd225883b4d5f3831f717973378f0d45
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bb

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
                                          • Size 1024KB
                                          • SHA256 2cf69e899594d17bd2e2d3d612f85f1cf8b5304d463d444fb49d063d2a1e70ad
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bc

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
                                          • Size 1024KB
                                          • SHA256 bb818baeac5d999fc2c1c2a7a255682a49b5561d4b0347216b1171c90fa9b7aa
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bd

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
                                          • Size 1024KB
                                          • SHA256 6bdd8034823c903d9e5e2496a51ebb58603d853de1dbfd22f1c6c3bb0e705a2b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000be

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
                                          • Size 79KB
                                          • SHA256 08c9ca4f3c814bd57ef4c893b0b7c4c71bf3a901ae685554a002e2c4aab217e4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bf

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                          • Size 1024KB
                                          • SHA256 ee44a1363427234eda3a77fb0626a0d0ca2f5524a7b11ccbf07f1828be8245b1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c0

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                          • Size 1024KB
                                          • SHA256 7b14466bb393bf411ed7d8dba5aa022f939007562cd3209492094f807dccc7d6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c1

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                          • Size 512KB
                                          • SHA256 75cd1bbc1816dfe1033bca38500fefdf5ffe647ac2b67034924a4f874ad15b23
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c2

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                          • Size 960KB
                                          • SHA256 51e18108a5798072f80261e1908699c1518aee040338f60c1b24099db332f3c0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c3

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                          • Size 591KB
                                          • SHA256 9496d6a9781559b674fdbcf3e0bfb1cd99ca242bfb3e7b6c94e58eaa541c8370
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c4

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                          • Size 1024KB
                                          • SHA256 1a18ade387f062b1e0ec6733f423f2539f434c237d47501edfccdeeb0abe186d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c5

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                          • Size 1024KB
                                          • SHA256 c1112166820004cc5f0495736ade7b35d9bcba1d75b7efca4fa196107116f3d9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c6

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
                                          • Size 463KB
                                          • SHA256 c21e05cc4bf933cfc3e104b69da0f7d22f2e55138b32b7101a73d1ce4550d71d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c7

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
                                          • Size 768KB
                                          • SHA256 fafe8a5b84035d5e0971edcc71c1486a4a2b5f9119b3e3398ed59c86ab9bfea8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c8

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
                                          • Size 831KB
                                          • SHA256 bea7703eb9fa262b7734e7f999351602bf36134058c106167dbd88c238224499
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c9

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                          • Size 431KB
                                          • SHA256 7781c4fc1e3d1427fb688ac7fb27e732e9cb94893183dce2a0bf3f5b92a23bb1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ca

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
                                          • Size 1024KB
                                          • SHA256 b512a39bcc9e2cb59b53ebc5777aaf98088a6e20381da95dd6335a33a5657fa8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cb

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                          • Size 1024KB
                                          • SHA256 0deddea73c5d08892692fb3e324a87927db9300d8432d7f8c6defacea1929f76
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cc

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                          • Size 1024KB
                                          • SHA256 26445fafb37575fea5eb2251e0805924ce278dfe3521435156e9bdea5ef56061
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cd

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                          • Size 1024KB
                                          • SHA256 4f2103c5bfa172884cb130c9a24778115e11797c4938fc18342bb7f9f2ed1238
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ce

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                          • Size 1024KB
                                          • SHA256 0355b0391d5aff2313b3fae481c73e40f1542011cb2f6f89d870d292baf61b86
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cf

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                          • Size 471KB
                                          • SHA256 9ed9927ed356c753a9653c8135ae853f9b2de2f4789be9e1f5eb67b65540230b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000d0

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                          • Size 1024KB
                                          • SHA256 7d2d6a1e536dbb734313b70094e44ea352e95ac04b731648a453df17f7d4a591
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000d1

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                          • Size 383KB
                                          • SHA256 dbce44d77db1301b40b409747a450213161e16cad566673b1d7641c70a959b48
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 4KB
                                          • SHA256 9089c30d3e49717e1205051f797fbfafc52e3509a4c3569d407c37bbe30cd593
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 4KB
                                          • SHA256 b5eaa6c929e85e220a378d5d54aea0858f2573b5e5aa5df29080e8d155843b5f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          the-real-index~RFe58e6c1.TMP

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e6c1.TMP
                                          • Size 3KB
                                          • SHA256 5aecb4f2fa471013438f31bf8a9208746671fb67c16fc0b658fca29f8fc4e69d
                                          • MD5 SHA1 SHA512 TLSH

                                          SiteList-Enterprise.json

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                          • Size 2B
                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                          • MD5 SHA1 SHA512

                                          Edge Profile.ico

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                          • Size 70KB
                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Network Persistent State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                          • Size 111B
                                          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                          • MD5 SHA1 SHA512 TLSH

                                          SCT Auditing Pending Reports

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 12KB
                                          • SHA256 151d6bb63c04b33f00780a665c14a8d1ba0f44199e067c67c4b76afaac493763
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 13KB
                                          • SHA256 52c4a99fdd15a4de3ccf8a390593092191e89f4217ad630592442a9cd9ca301d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Secure Preferences

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                          • Size 30KB
                                          • SHA256 8e71dfe6e8427c6c91e3ea7ba6bd3060eb69240ac35369b1335e64021e41c06f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          sync_diagnostic.log

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                          • Size 6KB
                                          • SHA256 69f44fedc2cf4e6d2733022fef87d27ef43d51041564d9ec090d9381716f076e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 12KB
                                          • SHA256 72d8733470f359d041517eaf25aa90d7ec75168f7c21586cf8a2c1b262717819
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 8KB
                                          • SHA256 8ae008a5d99b22064b646a53a3bbef60c8791fe31319e84a712668330c41e911
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 8KB
                                          • SHA256 ea34e15f37a71c8824631d09b1c46fb22e1943aaf8e7831e44f00c417c73f4c9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 20KB
                                          • SHA256 cae9593a267ec42cd1c22ee05c458b0fe6c3c5428b7f2324aa991b39c701baff
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          7927bbe4-6477-4f73-9c0b-4bd872302d8e.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7927bbe4-6477-4f73-9c0b-4bd872302d8e.tmp
                                          • Size 13B
                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                          • MD5 SHA1 SHA512

                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                          • Size 2KB
                                          • SHA256 07d6a69501b595b41dbb56b3cdaa8dc3d4c670bd5a5800b0db2fe3fe82355901
                                          • MD5 SHA1 SHA512 TLSH