Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    12/08/2026, 18:12

General

  • Target
    sample.html
  • Size 942KB
  • Sample260812-ws51kacn21
  • SHA256 5e67c65314d0200270aa98e8f0898480e2ce323a90431d36b208166ff03ed0b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2344
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7fff9d66c188,0x7fff9d66c194,0x7fff9d66c1a0
      2⤵
        PID:3724
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,13087936695868308179,2947218711278516398,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4204
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,14455397404319830265,3647990950938115910,262144 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
        2⤵
          PID:2088
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,7929062791908317057,13025343882534356428,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:8
          2⤵
            PID:3980
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,11660112650790238233,17372920181317382967,2097152 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
            2⤵
              PID:3368
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,17959908536605511748,12027449819647244411,2097152 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
              2⤵
                PID:4396
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,1970744040550129906,8030836111959801528,2097152 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
                2⤵
                  PID:2020
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,11568471612473186002,12375093038273490073,2097152 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
                  2⤵
                    PID:3164
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5112,i,12035514092620912248,6425865143428469010,2097152 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:1
                    2⤵
                      PID:2268
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,3838931463611200626,13764026165652857996,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:8
                      2⤵
                        PID:1224
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,14756006162940452202,6738456364404659680,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
                        2⤵
                          PID:2896
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,7573685200422410231,18060821943736042181,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
                          2⤵
                            PID:4100
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,7573685200422410231,18060821943736042181,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
                            2⤵
                              PID:1880
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6436,i,15782034723356430991,10788365678672206277,2097152 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:1
                              2⤵
                                PID:3436
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,10450372120942535250,7374201276376059187,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:8
                                2⤵
                                  PID:3016
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,15651856390020616865,5959357764516674086,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
                                  2⤵
                                    PID:3144
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,12059931723865863809,13348952215549336683,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
                                    2⤵
                                      PID:4996
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2892,i,16228085032287270174,14721388136078891782,524288 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
                                      2⤵
                                        PID:2564
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6416,i,7005525967399771948,9548009317792985656,262144 --field-trial-handle=2288,i,14183260246837406214,10113197186207247753,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:624
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:1988

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
                                            • MD5 SHA1 SHA512 TLSH

                                            BookmarkMergedSurfaceOrdering

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512

                                            f_000087

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                            • Size 104KB
                                            • SHA256 a498117b925c614c81ce929012c1ca5e77e9ea1caebf7ab34d28509e87897f0d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 3KB
                                            • SHA256 1add7d82e3c16f0eb82137914759f05bba9939abd0a18fb5303addcaf7296cbf
                                            • MD5 SHA1 SHA512 TLSH

                                            SiteList-Enterprise.json

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512

                                            Edge Profile.ico

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                            • Size 70KB
                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Network Persistent State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                            • Size 111B
                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                            • MD5 SHA1 SHA512 TLSH

                                            Network Persistent State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                            • Size 8KB
                                            • SHA256 a8522960c59281ea9ed013138c4e7a66cd05121144607d4d528d291044d1628b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            SCT Auditing Pending Reports

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                            • Size 12KB
                                            • SHA256 78a96f9cf9aaaf490184c453bac225d72982219a779db94911cc13f512245fd5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                            • Size 13KB
                                            • SHA256 040fafdea18ea1999303d7193e36c3eebcfe17f22c2ee85f66d413b0545cb053
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Secure Preferences

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                            • Size 30KB
                                            • SHA256 19e38ca7217577f2d2be9985105aeb15133a1678a30859b906434e617610dfb6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 72B
                                            • SHA256 6531e38d5476ec7cefcdd858fa9aa42cacc8daf79167d9511688559e0a482041
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index~RFe58cb79.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58cb79.TMP
                                            • Size 48B
                                            • SHA256 82334293eabbdd189718b83f6b1f9ca0b1517c25188ccdc2c8befd857fe796fd
                                            • MD5 SHA1 SHA512

                                            sync_diagnostic.log

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                            • Size 5KB
                                            • SHA256 b7e032fd2e598ae07e2684be27e1c36e5ba8c57066117d479690d72581e55bc0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\5bf30c2b-cf1d-4834-9339-694d28582cdb\index
                                            • Size 24B
                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                            • MD5 SHA1 SHA512

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\d39823e1-76ea-4691-8d9b-075abb1784a8\index-dir\the-real-index
                                            • Size 120B
                                            • SHA256 7e9aa982f274710177d48b6e5506bdabf8a8b02ae01bb93b1a215aba102e956b
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index~RFe58e039.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\d39823e1-76ea-4691-8d9b-075abb1784a8\index-dir\the-real-index~RFe58e039.TMP
                                            • Size 48B
                                            • SHA256 477f8730152c40585fa5b63ef1ce5006b4ba049c2698f30777f448bf63afe9c2
                                            • MD5 SHA1 SHA512

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\d555a659-6d7e-4f30-985a-bd01b9950315\index-dir\the-real-index
                                            • Size 14KB
                                            • SHA256 f46231a228a84e89e3226b10d54e0abc533fe9b83a855b11022ed2de0e8a8925
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index~RFe599d21.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\d555a659-6d7e-4f30-985a-bd01b9950315\index-dir\the-real-index~RFe599d21.TMP
                                            • Size 48B
                                            • SHA256 d7fb933126f86e1ac1464cf8172d55570b0cfe87de67fe2525be95c0f5254b92
                                            • MD5 SHA1 SHA512

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 423B
                                            • SHA256 6b40e5d8741945476a4da524bdde4abb4d5e986b2a0fac54e6a87b6c102cd626
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 673B
                                            • SHA256 806dca58ed14f7e8956cc89c8b2d2dd26e9c81632d0bfffbeb4e2e0a1a52615c
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 944B
                                            • SHA256 649ba74e5097fb0af6aa7b160bb91f9ec814969a76b4f16a8cfb2144e97d8394
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 1KB
                                            • SHA256 6a27e1c9147a3770d06dcd08b0c567c815252611bc42e3bd0c208bd0c7694b88
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 1KB
                                            • SHA256 2d1e16c281c5c2dfeff6d66be8f53a7ec7192f433ab18f3fd6cfc34564c5d940
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 1KB
                                            • SHA256 9a1d52fb8181fcf9124636324a9693ed8486396ed76889e56787429cbd475b02
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 2KB
                                            • SHA256 8b2e5f304af1b7a9289d5d74aed5479f20929e16798331817c94a9f2a33ca263
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 2KB
                                            • SHA256 6f246341399ee65bbcdecbf33b38d5f38c25b390bab8bdd57667aab3a1e5886a
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 2KB
                                            • SHA256 1d11aea07de79718fab1a65944cf47f9c12db192234a7246b3744ab5d17f951a
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 2KB
                                            • SHA256 8bc1dec07d180f78823c0400731c42ca9d2bf84c930a1ed267935605e71b1ff8
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 3KB
                                            • SHA256 4a3a0100164a7936a7555adaf107d415f77117c2532562b4210fb8831b129f0e
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 3KB
                                            • SHA256 8d0a286e17d8f7d97c2a257d434001c1cc66404fb1860b4a8e90580b47c42643
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 3KB
                                            • SHA256 93493a02f14cd481846f263a813f6f9cd2fde1483200cbbc5213a3be3a59f7ff
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 3KB
                                            • SHA256 a4850d31d3bdb1b0ded33962be2b33d1b3aadba295907983faef567685e2dd88
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 1KB
                                            • SHA256 fe92e4ed537d3579639fd852c1efa8eb4eeb5999907edb9cc8501f9a1ba9f6c0
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 3KB
                                            • SHA256 8ea535734d25032b1d656e9519b8d8b61b51747cad1e940556b1692f02b8c665
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 1KB
                                            • SHA256 8ebe80d525a2e6779b58d054f82b4e3f19bbf47066d8fb7399b9c28df2979f50
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                            • Size 2KB
                                            • SHA256 2391888eadaffd170162b78fbd5b7f0363397f051585c06dd96e8288ef92d123
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
                                            • Size 2KB
                                            • SHA256 1025e23ceb1f2c96e2be0bfda815fcfc86361613ece349b1e199dd0f8ce7ba42
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt~RFe587e72.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe587e72.TMP
                                            • Size 177B
                                            • SHA256 7c39f7080cf5b60dd5f9188be14bfda3fc24dfc2fbe157c104afaf819e4593ae
                                            • MD5 SHA1 SHA512 TLSH

                                            OperationConfig

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                            • Size 22KB
                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            OperationConfig~RFe594f10.TMP

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594f10.TMP
                                            • Size 3KB
                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                            • MD5 SHA1 SHA512 TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 15KB
                                            • SHA256 903bac3be3ef4640f325d3a31fbb50023ca08a07f9890c43e610671add4af9ec
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 18KB
                                            • SHA256 c034187e5e3b6cbb1bd228a71936203524f135fb5493d33fdd25fb31aeac7c09
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 8KB
                                            • SHA256 f29ed358749fbe6720951096495a45e5c4fb6cf0f134a172ce25facae2db5e3f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 9KB
                                            • SHA256 be717c765d58a4b26322767b656906b0f4bb18b2481e2661ff6680cb15b63aa5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                            • Size 15KB
                                            • SHA256 e59b1b7285b376b164fe26557e9ce47ba40e85971d7fe240df71a1e285e390d9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            9aaf359c-ebae-4a99-a690-490c8f1428c1.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9aaf359c-ebae-4a99-a690-490c8f1428c1.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512

                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Size 2KB
                                            • SHA256 1719f98fd5171cb3899cf0a88781cad801f5875eac81cbeadd41a44632693de4
                                            • MD5 SHA1 SHA512 TLSH