Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/10/2026, 10:09

General

  • Target
    https://kys.linkvertise.lol/vm/Z/1?info=Link+Is+Sandboxed!
  • Sample261002-l6331swaje
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 33 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://kys.linkvertise.lol/vm/Z/1?info=Link+Is+Sandboxed!
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4524
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff86466c188,0x7ff86466c194,0x7ff86466c1a0
      2⤵
        PID:948
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1924,i,15923174361579639802,8834595982177999730,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4724
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,2367506154926677536,16582447888918076886,262144 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
        2⤵
          PID:2180
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,2408535168294937821,8192594706013513812,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=1712 /prefetch:8
          2⤵
            PID:4268
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,14465622000409308680,11064707640184535855,2097152 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
            2⤵
              PID:4680
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,2222695821227318518,10748169780622789278,2097152 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
              2⤵
                PID:2804
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,11670874890359559336,13091328644022859003,2097152 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
                2⤵
                  PID:1616
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,8111328638921271193,5408127224984528820,2097152 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
                  2⤵
                    PID:3804
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,9838248722819109023,3094693104580516288,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
                    2⤵
                      PID:2340
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5446465219629729601,2420198158863953377,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
                      2⤵
                        PID:2552
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,12498584230925205896,18258688615040595541,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
                        2⤵
                          PID:5056
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,12498584230925205896,18258688615040595541,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
                          2⤵
                            PID:4152
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,11084192370220888663,14296518686116290302,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
                            2⤵
                              PID:4840
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,13233116790717528183,1821876241835466783,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
                              2⤵
                                PID:3508
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4804,i,8040101394836926313,5011823830057323565,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
                                2⤵
                                  PID:380
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4044,i,5865561094942375752,16408187858829674454,2097152 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:1
                                  2⤵
                                    PID:4976
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,5168806538472946540,18232536574225989430,524288 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
                                    2⤵
                                      PID:5676
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3048,i,7034206279816286443,3405916097587722654,262144 --field-trial-handle=2252,i,8177326350970924496,9105927070632431771,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:4544
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                    1⤵
                                      PID:60

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          2931b999-f4df-4ad1-a9cb-072c2310c62a.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2931b999-f4df-4ad1-a9cb-072c2310c62a.tmp
                                          • Size 8KB
                                          • SHA256 8cd45d37f6dcde36db06b73b918ef16b338dc76d440e535a126a3f99dc119b45
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          410de7a2-4afb-40e5-8ca2-42db416d462a.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\410de7a2-4afb-40e5-8ca2-42db416d462a.tmp
                                          • Size 8KB
                                          • SHA256 6eee39f6630eb0643032c17a58a014f38ba07a59f466a99b2e41cbbcdccfceea
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          59a34f95-997c-4199-9436-b27330e7ff87.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\59a34f95-997c-4199-9436-b27330e7ff87.tmp
                                          • Size 18KB
                                          • SHA256 4587a58b72191db0f2eb33868a97c0cb841323c8aeaa0237b9926e3c591b740f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          99e94b14-5310-44cc-b9cd-252579137a06.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\99e94b14-5310-44cc-b9cd-252579137a06.tmp
                                          • Size 26KB
                                          • SHA256 be48e2759509a2d6fa5d1220201396a5c28d36c655cbdd9a32353914be2471d1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
                                          • MD5 SHA1 SHA512 TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
                                          • MD5 SHA1 SHA512 TLSH

                                          1379c24f-507b-4b1c-b4e5-eca952da45fd.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1379c24f-507b-4b1c-b4e5-eca952da45fd.tmp
                                          • Size 12KB
                                          • SHA256 d4be6521bf018a6d296666914ca72bd7b92ede52c6855bf2cbd80f84dc126539
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          3a23c86c-ce9a-4679-bc04-7abe91621abd.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a23c86c-ce9a-4679-bc04-7abe91621abd.tmp
                                          • Size 70KB
                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          57039b3f-388e-4838-8995-2f2caa760a11.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\57039b3f-388e-4838-8995-2f2caa760a11.tmp
                                          • Size 11KB
                                          • SHA256 6b32aa2a8454feaf67085c267af9d165e4a38f811cc6bd5f6aa9ec0b5cc3aef8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          9fe49cca-7795-4228-99f5-ddd7b171de80.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9fe49cca-7795-4228-99f5-ddd7b171de80.tmp
                                          • Size 9KB
                                          • SHA256 a6afeeac60857cbd844988fb2bc49285ef92a0689667fd1b869b7ceb7eb02bf2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000079

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
                                          • Size 418KB
                                          • SHA256 676d4a63ae67ef87cad323b26340c67848995ac2683780243a52c98904c57132
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007a

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
                                          • Size 70KB
                                          • SHA256 937ba85886091685ee70eb6bc643fefa7e2d2c0e1f03505221d6a48d46ffa37f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007b

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
                                          • Size 206KB
                                          • SHA256 89c383c8627f2ddd5eb3193ef0278621610dff452b56586c5d998e7da3fca57d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007c

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                          • Size 27KB
                                          • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007d

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                          • Size 78KB
                                          • SHA256 22d31bc2ae591382f2445d2b5e976928961b2bb70ae28e3207f761e716717099
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007f

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                          • Size 59KB
                                          • SHA256 85593f2fc51b4fefad47011db0b02371cd5ee1c78796b37756cdb53c5c150104
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000082

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                          • Size 72KB
                                          • SHA256 64e006e29b797b081fd55052037613695818ff7dd221536402900f7cc380ea01
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000083

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                          • Size 256KB
                                          • SHA256 ee820160c0242e2f55aa571f70dd454c0b3348f5da39790217e95f0ac41a5366
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000086

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                          • Size 256KB
                                          • SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000089

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                          • Size 32KB
                                          • SHA256 eb50394bff61780ac41f95fbcf13783045a4682651e0f13e0440d8e4bcd89b79
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000093

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                          • Size 39KB
                                          • SHA256 b05847904e965e8a62eb81e89bee907f7cf9754c343cfd863c0716ad9f5fc829
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000098

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                          • Size 32KB
                                          • SHA256 f7b5af64a771f6f0468af614e047361e053c91b0a46d1f01db377ee1a807a045
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000099

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                          • Size 32KB
                                          • SHA256 282fcd6267e200e7995bdd565ca8843f609002eac8e1d1ea67042811f56403a0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009a

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                          • Size 32KB
                                          • SHA256 82cad0e10ca7de046a207e128ae893e33b766dc1657237f11f21f9ae5f9b809e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009b

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                          • Size 38KB
                                          • SHA256 0a230534392182936c2044382c7d01f56d4c85078e472517869f91f4aa7b4064
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009c

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                          • Size 23KB
                                          • SHA256 58c1d0b76cc002985c39919bf749bcd47b529614a05079c4cf3c09b4aac25ad2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009d

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                          • Size 22KB
                                          • SHA256 b615fa18ca60014720976fe1343fabe753d5dd4bde2a7fa7e97170bac4888859
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009e

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                          • Size 34KB
                                          • SHA256 36693b4651d09733db44edc0da0d9f6d765fc4f4fa74b2d4bc443e60fd97c5ba
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009f

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                          • Size 52KB
                                          • SHA256 f12b55445b78dc35a1c0c158017ac8f3f9e91a5246667257ff610cdccc982acd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a0

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                          • Size 31KB
                                          • SHA256 c5f9afad92956e71f3495b4e9cb2cea6bbf8e1bb6f17c042224853e6ea618cc9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a1

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
                                          • Size 37KB
                                          • SHA256 1012cbb9f48d743253c5c0e5799f85a44afdf9ebd14fbdcaffc2c5a048f2e15a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a2

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                          • Size 49KB
                                          • SHA256 e3332b3d63593e2f5c504a0a8e700ae27420e1adb5dda19bb1865ddd73959c48
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a3

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                          • Size 29KB
                                          • SHA256 10812af8fc44cd70bb68742f62f9c13e23dd2f5f0168e28bf2bb0c08dd82c107
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a5

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                          • Size 79KB
                                          • SHA256 91b5164f6f1ab78a390fa6e4ba956501544ffd308440a8305721dd5beee8b38e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a6

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                          • Size 35KB
                                          • SHA256 70080c76e9de4768868366a3ec57fef738a2e60949ff967dd3203a8676367da1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a8

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                          • Size 122KB
                                          • SHA256 709bf28dfecf3e240e366cd4b5d8ebb896fe3ae0c77bf3cfaa605f5cf10b4a19
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a9

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                          • Size 45KB
                                          • SHA256 6c1bc67d91725ecb765354dc273d8f9a50287160e6cc7eef46b6b9cf936c6a02
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000aa

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
                                          • Size 16KB
                                          • SHA256 454d6e6f37852a28fd5c57a91e8975d8b667b3f7ab98d81f12c4c9ee9035a927
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ab

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
                                          • Size 21KB
                                          • SHA256 2f47925e7f73a8f12acf899df1fc69a2559f54e3e8ba983036713c3162eeddc8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ac

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                          • Size 20KB
                                          • SHA256 1acbcc6b1dcd54cceeee7720c7887b611ad125d08f493a1b959e6e89103eca56
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b3

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                          • Size 23KB
                                          • SHA256 0b7b529b80742d59862a4128b8a427ac364f2a225b1268ca6702337b0ff56728
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          temp-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                          • Size 3KB
                                          • SHA256 270698f90e754f38bf74be0bacd7d57cc70a2314fe908843ad6cc1d39d68189e
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 5KB
                                          • SHA256 cec8a5bba48b0c319348acc16df50ed39442a08192457da8b1df2a9d6c4f6f3a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 3KB
                                          • SHA256 566243dcb7e2d915138c479367bc7561cd900d9761847100ba330f032346c24a
                                          • MD5 SHA1 SHA512 TLSH

                                          554f4bea-dcbb-4831-998c-dfb8af8d9395.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\554f4bea-dcbb-4831-998c-dfb8af8d9395.tmp
                                          • Size 2B
                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                          • MD5 SHA1 SHA512

                                          17c4a03d-6252-419a-8351-af1f3fe8bda2.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\17c4a03d-6252-419a-8351-af1f3fe8bda2.tmp
                                          • Size 4KB
                                          • SHA256 d48756feddbd4582b01738ab3576cc181f94974a4d50b43b78c330ba6c0ec87d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          638460b0-5599-462e-81ba-a2427b278b5f.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\638460b0-5599-462e-81ba-a2427b278b5f.tmp
                                          • Size 4KB
                                          • SHA256 4cb19f519e3219c0a4cef85fae70b5e1194e711af0b7d84e6c17a54b9d9d5484
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          6bdc298a-5e71-4b25-9adc-dc57d14abb4a.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6bdc298a-5e71-4b25-9adc-dc57d14abb4a.tmp
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512

                                          993f94d8-730e-47f3-ba2e-667829ce1b3a.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\993f94d8-730e-47f3-ba2e-667829ce1b3a.tmp
                                          • Size 111B
                                          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                          • MD5 SHA1 SHA512 TLSH

                                          temp-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\temp-index
                                          • Size 3KB
                                          • SHA256 c5e77576501d25281660bbe075d8e153943f2438104ca771bf2ed6c7bc4d48f5
                                          • MD5 SHA1 SHA512 TLSH

                                          temp-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\temp-index
                                          • Size 1KB
                                          • SHA256 1cd84c61fb83dbf88b3ab7ceb5b8babdd335bfc29e2c0864e05855a9e1a5b1b8
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\the-real-index
                                          • Size 1KB
                                          • SHA256 1bbe55111ce13bae7657be574204bf5291db762b5a6e216ff3184703705b9fa3
                                          • MD5 SHA1 SHA512 TLSH

                                          temp-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2a544f4d-a007-4f3a-b210-5e4ea2a29b4a\index-dir\temp-index
                                          • Size 72B
                                          • SHA256 bc44f6b203eaeab894c44dd105fcea44d05ed90d0ac7652f3773ce27c0e33957
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2a544f4d-a007-4f3a-b210-5e4ea2a29b4a\index-dir\the-real-index
                                          • Size 72B
                                          • SHA256 dfa441756ab44d74e29e252095fb37f4d166782f8573b0fb7e95aad20b478723
                                          • MD5 SHA1 SHA512 TLSH

                                          index.txt.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                          • Size 371B
                                          • SHA256 ba462715df3fbbbbae6fe0e1947062e08ba37f8e491aed2f2c8df9d9599a7787
                                          • MD5 SHA1 SHA512 TLSH

                                          temp-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                          • Size 72B
                                          • SHA256 4690c1188b5236948733aa3d08f09e6325a2404df417588bcd057041ee6d455b
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                          • Size 48B
                                          • SHA256 e6947a6a891e8030b441b410f571d56845d53a70f9aafd995f484fc0148dfeb2
                                          • MD5 SHA1 SHA512

                                          a3b92a13-0ca2-47f2-b5a3-855da16532d6.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a3b92a13-0ca2-47f2-b5a3-855da16532d6.tmp
                                          • Size 27KB
                                          • SHA256 8d156a54cdf19277db3a08fe47ec64a4f45ee5c1613bc2e770acbc16b4a8a239
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          c53c5c0e-7973-4c2a-8a7f-054096ba2b0c.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c53c5c0e-7973-4c2a-8a7f-054096ba2b0c.tmp
                                          • Size 9KB
                                          • SHA256 2b549916ec60127f9b3859b2d0905f6f7faa8aa992f884f4839360146168bbfa
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          1939e43d-dd45-4a82-9dcc-5f5c85d4b413.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1939e43d-dd45-4a82-9dcc-5f5c85d4b413.tmp
                                          • Size 22KB
                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          c2660323-1bb7-4873-ac72-e7511e52866b.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c2660323-1bb7-4873-ac72-e7511e52866b.tmp
                                          • Size 18KB
                                          • SHA256 b513a06d111f6715eb3be1aa21977336f9d0162dc4a4b1e2a4b31c8b2ba4cacb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          e5e4b4c7-2877-4740-b42b-893c63b534b1.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e5e4b4c7-2877-4740-b42b-893c63b534b1.tmp
                                          • Size 13B
                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                          • MD5 SHA1 SHA512

                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                          • Size 2KB
                                          • SHA256 19af90a3345433d8a33d3b25ca8c8744c2f2f6b0b68f58b205d5ff96fc13189d
                                          • MD5 SHA1 SHA512 TLSH