Analysis

  • user interaction
    yes
  • max time kernel
    28s
  • max time network
    30s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/10/2026, 18:15

General

  • Target
    https://pixeldrain.com/u/bdn3MVpE
  • Sample261002-wwchesvbjc
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 29 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pixeldrain.com/u/bdn3MVpE
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1284
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8cb8cc188,0x7ff8cb8cc194,0x7ff8cb8cc1a0
      2⤵
        PID:3196
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,7412285240417279019,8839167558323977658,524288 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:3
        2⤵
        • System Time Discovery
        PID:2128
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,6530096045470155611,5911369783091584142,524288 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:8
        2⤵
          PID:4972
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,18122791765027122140,17086173034588594026,262144 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:2
          2⤵
            PID:4820
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,7304206495943659505,1738012908190326317,2097152 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
            2⤵
              PID:1688
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,14547783943134521567,17638554577173016588,2097152 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
              2⤵
                PID:3352
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,16973171632406041829,10928006886360045577,2097152 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
                2⤵
                  PID:3956
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,499446268526646259,5721436810561925396,2097152 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
                  2⤵
                    PID:3472
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,354026892468035534,17064435567032391980,524288 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
                    2⤵
                      PID:3812
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,8497292633313003333,16312612034292854303,524288 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
                      2⤵
                        PID:4360
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,6356597668266796833,13142176232621848041,524288 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
                        2⤵
                          PID:2920
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,6356597668266796833,13142176232621848041,524288 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
                          2⤵
                            PID:3420
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5952,i,13323884673897684216,4633837630845593203,2097152 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:1
                            2⤵
                              PID:2420
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,16361180347039219331,12839237337095146438,524288 --field-trial-handle=2788,i,9154598915959778645,9368894506380388619,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
                              2⤵
                                PID:3900
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                              1⤵
                                PID:4252

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    4054c4bd-4c81-43a0-884e-dd0627754551.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4054c4bd-4c81-43a0-884e-dd0627754551.tmp
                                    • Size 8KB
                                    • SHA256 7b3d17458bae0801b243ad25359b836232756a9419444b8134f8026769ff5579
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    9a778cbe-a816-4dc2-a878-6ef0a971c686.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a778cbe-a816-4dc2-a878-6ef0a971c686.tmp
                                    • Size 18KB
                                    • SHA256 52fef36ef3db299b003cee2a416792afeea01c0223d8e0b2f7af767fbdcc571f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    bb92a9bd-ac8c-401b-b27e-a680553367a7.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\bb92a9bd-ac8c-401b-b27e-a680553367a7.tmp
                                    • Size 105KB
                                    • SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
                                    • MD5 SHA1 SHA512 TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 c02af0b53b7fa79987f046aeee8ae8328d6e30eec401b85fb659fff3686e22d9
                                    • MD5 SHA1 SHA512 TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
                                    • MD5 SHA1 SHA512 TLSH

                                    0d2b9720-751a-489f-af70-3192d9a2dc5d.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0d2b9720-751a-489f-af70-3192d9a2dc5d.tmp
                                    • Size 70KB
                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    1cc58d1f-5834-47bd-ae40-f807b707deb5.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1cc58d1f-5834-47bd-ae40-f807b707deb5.tmp
                                    • Size 27KB
                                    • SHA256 3912ccdcf90f5c53cfee32be103da42c215cb66e3504392280931ea9c06416f8
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    35845594-0121-4c2a-8a28-3d37fcf7721e.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\35845594-0121-4c2a-8a28-3d37fcf7721e.tmp
                                    • Size 13KB
                                    • SHA256 21ab4fc90da789040069ddf5aa2035b413cec93a0829eb106f2ef7e285cf12f3
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    61cfef6b-1dc3-43cd-8e77-35858ee5af3a.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61cfef6b-1dc3-43cd-8e77-35858ee5af3a.tmp
                                    • Size 9KB
                                    • SHA256 e72351ded148f538c58ee55d78a58b37444aeb1e019e9df635725a1d3e9170a8
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000060

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
                                    • Size 418KB
                                    • SHA256 676d4a63ae67ef87cad323b26340c67848995ac2683780243a52c98904c57132
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000061

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                    • Size 70KB
                                    • SHA256 937ba85886091685ee70eb6bc643fefa7e2d2c0e1f03505221d6a48d46ffa37f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000063

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                    • Size 206KB
                                    • SHA256 68a00a6ce65fdc6e93384eec7b2a6841016f8d7982502e0ef013156a5b2aae86
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000065

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                    • Size 27KB
                                    • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000066

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                    • Size 78KB
                                    • SHA256 22d31bc2ae591382f2445d2b5e976928961b2bb70ae28e3207f761e716717099
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000067

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                    • Size 256KB
                                    • SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000069

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                    • Size 256KB
                                    • SHA256 7cf6db9eed43b81665629edbed64b5a629e86cfaa0bb7bc644721687c5017311
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_00006b

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
                                    • Size 512KB
                                    • SHA256 4cd087fa77488d3127bde4400d97d31e70f42f49498b461fce48caa03118abc0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_00006d

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
                                    • Size 59KB
                                    • SHA256 85593f2fc51b4fefad47011db0b02371cd5ee1c78796b37756cdb53c5c150104
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_00006f

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                    • Size 72KB
                                    • SHA256 64e006e29b797b081fd55052037613695818ff7dd221536402900f7cc380ea01
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000070

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                    • Size 256KB
                                    • SHA256 2d21ac77d43aac526fc8f4f95a4f2ba2c95221f904b0a14b1b6ed77d14874ca9
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000072

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                    • Size 17KB
                                    • SHA256 c626f513876dd0e5692a93e2da8bb75c0708e6e8c1ff2b908ae40409cf7251a5
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000073

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                    • Size 19KB
                                    • SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000076

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
                                    • Size 20KB
                                    • SHA256 1acbcc6b1dcd54cceeee7720c7887b611ad125d08f493a1b959e6e89103eca56
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000081

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                    • Size 39KB
                                    • SHA256 b05847904e965e8a62eb81e89bee907f7cf9754c343cfd863c0716ad9f5fc829
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000086

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                    • Size 16KB
                                    • SHA256 454d6e6f37852a28fd5c57a91e8975d8b667b3f7ab98d81f12c4c9ee9035a927
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    eec58af2-fc29-4c40-9a58-68a461c8bca7.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\eec58af2-fc29-4c40-9a58-68a461c8bca7.tmp
                                    • Size 2B
                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                    • MD5 SHA1 SHA512

                                    60bc9072-8331-485b-b945-37d625cef296.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60bc9072-8331-485b-b945-37d625cef296.tmp
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512

                                    b30e8ffe-3d92-44d0-b8e4-f0d8fbb48a88.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b30e8ffe-3d92-44d0-b8e4-f0d8fbb48a88.tmp
                                    • Size 111B
                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
                                    • Size 72B
                                    • SHA256 29d429d064cc23559be5b6eb68bb4696667fa653edb2e13106460bfaf36eddb2
                                    • MD5 SHA1 SHA512 TLSH

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\temp-index
                                    • Size 1008B
                                    • SHA256 173f6b7c36db1198c16f2b3c470fc3e0adcdd0520fb02bb841482886fbf5d0ac
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
                                    • Size 1008B
                                    • SHA256 715912db567206ff2cea4dab1479bfc8ceafa077994227194e07fdc4840a4977
                                    • MD5 SHA1 SHA512 TLSH

                                    sync_diagnostic.log

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                    • Size 4KB
                                    • SHA256 fb73f641c344f865081bd63dde4902850136898de663d4c0be77665d9e45ba20
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    b1575fbd-99d2-46c6-a344-63d7d4e9a3f2.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1575fbd-99d2-46c6-a344-63d7d4e9a3f2.tmp
                                    • Size 6B
                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                    • MD5 SHA1 SHA512

                                    bad9aa3b-c62d-49c4-aab1-896f68423d26.tmp

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bad9aa3b-c62d-49c4-aab1-896f68423d26.tmp
                                    • Size 8KB
                                    • SHA256 035adc29f24ffaa927e5ba88055043c263349cfbbb88361b650288e8e82bc23e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                    • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                    • Size 2KB
                                    • SHA256 d861956ccf9c727de046d676a2e69e48ec64ea695b4c6bfedacacb71ececb2a1
                                    • MD5 SHA1 SHA512 TLSH