Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/10/2026, 16:04

General

  • Target
    https://www.dropbox.com/scl/fi/gl1lny44so9gozqgq5j7y/Welcome-to-AWO-P.1.mov?rlkey=6czb6n8p8jyip59konhurva6i&st=ba911hj8&dl=0
  • Sample261011-thy36ach45
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 29 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.dropbox.com/scl/fi/gl1lny44so9gozqgq5j7y/Welcome-to-AWO-P.1.mov?rlkey=6czb6n8p8jyip59konhurva6i&st=ba911hj8&dl=0
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4724
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff896aec188,0x7ff896aec194,0x7ff896aec1a0
      2⤵
        PID:4744
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,716128183409004070,5280150731365996904,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
        2⤵
        • System Time Discovery
        PID:5868
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,16020164916107832654,10392827376335196714,262144 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
        2⤵
          PID:5420
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,988954151135466455,7807378192486319213,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
          2⤵
            PID:1668
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,15906892157650758993,17880637914926817370,2097152 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
            2⤵
              PID:3396
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,4913372798152161767,3673531988410352691,2097152 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
              2⤵
                PID:5588
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4960,i,18048508413566197502,4173101552063071009,2097152 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
                2⤵
                  PID:620
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,17188506097183121609,12206877076811689373,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:8
                  2⤵
                    PID:3076
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,15558724580000823989,14429187047845358744,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
                    2⤵
                      PID:2484
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,10285314017782171936,2887394990707367973,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
                      2⤵
                        PID:544
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,5514471461929271321,14788377343508846378,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
                        2⤵
                          PID:4728
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,5514471461929271321,14788377343508846378,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
                          2⤵
                            PID:3140
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,13170288333416855571,4169449353406787468,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
                            2⤵
                              PID:6132
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6692,i,15949736946688662836,2669866756391222367,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:8
                              2⤵
                                PID:2732
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,2149291810273091897,14843822640911692438,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:8
                                2⤵
                                  PID:5276
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3020,i,3294192075085759468,8681883189659560122,524288 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
                                  2⤵
                                    PID:4160
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5896,i,17635055437798415338,17120769946559957226,262144 --field-trial-handle=2360,i,366949053750929055,12224249965305929784,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:1900
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                  1⤵
                                    PID:1472
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                    1⤵
                                      PID:1896

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          49a345ba-9ab0-426c-8d82-2bfabfb2693e.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\49a345ba-9ab0-426c-8d82-2bfabfb2693e.tmp
                                          • Size 27KB
                                          • SHA256 59d6dbd0dc50e3ed35277f3527c915b4712247182bca024e638e4bbd3acdd46a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          50ff2dfb-9893-4a19-8518-7d4e42f6ed2d.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\50ff2dfb-9893-4a19-8518-7d4e42f6ed2d.tmp
                                          • Size 32KB
                                          • SHA256 f55fc61e576cae8921cda7564d55178b20f34e8f55d554cff568763f5fc68765
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          619b13db-9811-4dea-95b8-a5bca7699f90.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\619b13db-9811-4dea-95b8-a5bca7699f90.tmp
                                          • Size 25KB
                                          • SHA256 f9df690f31944c13ed1200d0fdc309c7c580855bf2bfecb14510b44d65951819
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          80167e21-cf71-45e3-9e80-16a04b67d18a.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\80167e21-cf71-45e3-9e80-16a04b67d18a.tmp
                                          • Size 27KB
                                          • SHA256 7cbef572052263e18e4bcc7d8c621160438038b4b4dcf17b862d0edea3a312eb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
                                          • MD5 SHA1 SHA512 TLSH

                                          5b9a7df5-b5c9-41c5-a988-730e6a5ab63d.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5b9a7df5-b5c9-41c5-a988-730e6a5ab63d.tmp
                                          • Size 12KB
                                          • SHA256 697c694fee78ccddd2824fd783a4d4cd0827546a3d648f49372da3aa7268068c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          5bebebdb-34d1-429b-a9fe-ef45ed2c680a.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5bebebdb-34d1-429b-a9fe-ef45ed2c680a.tmp
                                          • Size 414B
                                          • SHA256 402d35c95e00ad9f718c3d3b5203ddd28e3797069f06153c01676a9f0565bb70
                                          • MD5 SHA1 SHA512 TLSH

                                          693e9b51-4c35-4c27-929e-3c7a0f07f55f.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\693e9b51-4c35-4c27-929e-3c7a0f07f55f.tmp
                                          • Size 12KB
                                          • SHA256 036e94441aafde26ef29e47c1dc82565d7ea29bf39891c5e45aa006ad117f746
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000069

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                          • Size 1.0MB
                                          • SHA256 48dc4c0e02a934b527126d15568b10818f281518ec50119f57ab1a7887c8e2d8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000088

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                          • Size 253KB
                                          • SHA256 174792cde93f4e702871bcac9ca3340504a62995b57d7ac1b2640e9279e397cc
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008a

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                          • Size 254KB
                                          • SHA256 3644ba457027195b35fd8de41b81e0efd6cb0550599bb310cab2d63dbb540619
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008b

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                          • Size 255KB
                                          • SHA256 3e434ce83b65e60c5f9de5acc85e7f250cedc15a912158c247641301dca52493
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008c

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                          • Size 255KB
                                          • SHA256 6a4e381924a9e176ddedd591acd3f60af34b781bf12a38967bf5f1297cf12cec
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00008e

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                          • Size 256KB
                                          • SHA256 362d9122fa7d6d7d9bf2f77fff7f76717a2d21a284e9e182e9734fb7468149ca
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000090

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                          • Size 257KB
                                          • SHA256 a574ca660d627d167c26c73da16caf44282a2f34e08c1b4a37e9f52e9572da35
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000091

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                          • Size 255KB
                                          • SHA256 c7e2fbf83db204bd6489dfae9a79a200d8862cde9902cbdd1fae4c7040e67d56
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000093

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                          • Size 257KB
                                          • SHA256 15c28ddd678d728e5948fce31fb3987a4ad2d66c9fcfd5901a9bb6f2a07d4e0c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000095

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                          • Size 253KB
                                          • SHA256 237ffdf9873a577e9af21c208bea37cb86747660311acd2bef7db32d3c0de377
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000097

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                          • Size 257KB
                                          • SHA256 d45ce1e28afe48904561975e1e03ca3f2a7fbedcb0275a4ed9f8a25a3f23b770
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000098

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                          • Size 256KB
                                          • SHA256 20f2fba69c7b083242ef4ead78b9130a435f5197b478c4b0c978013a514cee81
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009a

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                          • Size 254KB
                                          • SHA256 e9962b91dd14a248f56acf92959e80f5b4b99765c62a313e6b1d6733eb479bf0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00009d

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                          • Size 252KB
                                          • SHA256 6dd2daddbea4028509180f5df4463f241667fc92191c61c97bc04cbc0e15aa88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000a0

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                          • Size 256KB
                                          • SHA256 7d7d33f7ec1b3ad312dfaa5effbcb32568a3593a4bd04f4f47874a13bbbcc3c9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b1

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                          • Size 526KB
                                          • SHA256 f534187f0c7bfb8404891818a65db651851ff1b24c828ca1352c7ce738703217
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b2

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                          • Size 476KB
                                          • SHA256 bac03758f6bf50971323a6effa150f46d6ad698ede96d40c4a603dd0f26ca48a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b3

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                          • Size 513KB
                                          • SHA256 f72896631417be292def29f993fe0cfda4aba6bf195792e1753e7842696f067f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b4

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                          • Size 295KB
                                          • SHA256 2bf577667fc3cebfefa30d247ed9b4923b19e1359af987f2c56e17986a7aee71
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b5

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
                                          • Size 485KB
                                          • SHA256 02af1e828f8998b30d68001768a5f56d5817fce1a2f7a5550d2dd1094e236600
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b6

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                          • Size 255KB
                                          • SHA256 6808c17fdf4b8db6d40fbf2002a6fc92c3e8118ef25d8d5e48e7a77406e0103e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b7

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                          • Size 575KB
                                          • SHA256 cbc37a76c8feeff0dd6936193f070c8865fa04921dbc47482b64e67cc02ae09e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b8

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                          • Size 522KB
                                          • SHA256 74ffc011aed81fbb021f082dc740fb10c58558f02057c50664009d4a3c551418
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000b9

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
                                          • Size 530KB
                                          • SHA256 99bf8422df5717198d5e3d8433a544fb8bad40c03f7de5f69aac1bebf6686819
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ba

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                          • Size 622KB
                                          • SHA256 e6cf7c419f5318f50af5a7a7cc2a802f90aa02d12c231a2d3dab7729364e18b1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bb

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
                                          • Size 580KB
                                          • SHA256 216d1bd5767e78109c2842840d7957060d13b61bc0d9b1a5d6343e21afc88fdd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bc

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
                                          • Size 786KB
                                          • SHA256 b6abbdd167782da95685a719923571445ee267d07c89cce4c477bd35296ec8c4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bd

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
                                          • Size 966KB
                                          • SHA256 f0a9452497ceb5f7fd95e4b835a5acfc04b798915293dbc8f05ebb809e5f6a2e
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000be

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
                                          • Size 701KB
                                          • SHA256 3e51867d147ec5802b5be49e0f7c05cc6ac1f859a88e83d30986c3e15eda0809
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000bf

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                          • Size 291KB
                                          • SHA256 b914bc5e25296e83aad9e85722332831e8d2d5bcb0bef287e521605887e418ae
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c0

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                          • Size 299KB
                                          • SHA256 c03fd3735960026ad3fac1f6151f8f3dd84307c0c01c2d4196cadc2e0b6db477
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c1

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                          • Size 254KB
                                          • SHA256 472c376a75cd58e80e5471fa7ad4969776c9aa7defd97c37ee6c32a928aefc1b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c2

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                          • Size 467KB
                                          • SHA256 a9e0c66760fcf3a4700a2945c5104397643ceb813afc188dec5ea75743c028a4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c3

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                          • Size 585KB
                                          • SHA256 e62fddbb26e8ca8ed54b5d67f3562b46b810a53d09fa04909172204de6831c1b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c4

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                          • Size 594KB
                                          • SHA256 33358df1220e9cd96dac1965b56db2ebe4d7643ab040ab8d6985a82204c28fc1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c5

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                          • Size 582KB
                                          • SHA256 8aa96b55b553d4b9da23f145ff2d5cf43393a7d5a768938f898ba817363a74bd
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c6

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
                                          • Size 680KB
                                          • SHA256 9e0f94a09f017466aa4f6c06f414ca5662086cbd3c7144ca020809ffa5aec006
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c7

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
                                          • Size 608KB
                                          • SHA256 a9e2d7a0669b76baf143885404ea971b7ce92f6b6b841f1c2478c8818c7d4105
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c8

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
                                          • Size 633KB
                                          • SHA256 e0c94b80753b852743baf79e88d62cc4d4e889902399dc07afa3f1f0d294985a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000c9

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                          • Size 657KB
                                          • SHA256 41d7641c62037f1af9e73092b36efadf30e2e93c380ffd23755052d6d209df33
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ca

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
                                          • Size 762KB
                                          • SHA256 627b0c78c4f40ca1c3f517cb708d6c7390ed99370c9f3493697696ef3d2bd6cb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cb

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                          • Size 255KB
                                          • SHA256 6923fef3fd585c8bfdca43c0873e1af5d8c06bf3c096d8c727258bd68edc5848
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cc

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                          • Size 561KB
                                          • SHA256 3af903725825b9c7459974ac2627ab956a89822ce2ff5aa59b61ac20f55c8d49
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cd

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                          • Size 558KB
                                          • SHA256 f8cc59ff715bf5201ff5d5230f0b20e16c159721ffc0081bea1e423002b4854a
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000ce

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                          • Size 599KB
                                          • SHA256 237bac3a8fa4629f4b34e0b34c3144ab5f17618a8eb28f2782518a404c26fdb3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000cf

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                          • Size 259KB
                                          • SHA256 28f1332375bcdecaf3db4686bdbbd3d9d1b707b7cc71705935cc74c6e562f05f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000d0

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                          • Size 593KB
                                          • SHA256 7bef7a44c39cbc0522d709d62f0a1cc7063179884f9abd9862e8b0407eb06148
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000d1

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                          • Size 535KB
                                          • SHA256 4834d31e0960dbb0a3521b6708652e45934fc4120382d21aed2fb966fbf9bc73
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000d2

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
                                          • Size 507KB
                                          • SHA256 534c3706f681c8d467396a457d7b38c90ce010d8de6a5040e6c2d038cad18e18
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_0000d3

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                          • Size 255KB
                                          • SHA256 a2325920d3e4da7e980a295f77a7fabdd3029bd4805f9791631517f1ec51e9df
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          temp-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                          • Size 4KB
                                          • SHA256 3fd147f893d637b155bf5564d9b53e9bc4195164c9c01a1ddcace108dab50687
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          e05f7212-5dd8-4030-a7a5-197e03bef592.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e05f7212-5dd8-4030-a7a5-197e03bef592.tmp
                                          • Size 2B
                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                          • MD5 SHA1 SHA512

                                          000003.log

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\000003.log
                                          • Size 1.1MB
                                          • SHA256 34e264553ae2d3e930091257f7e5339032d836161d9f8072e754078cec8bc2ac
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          LOG

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.dropbox.com_0.indexeddb.leveldb\LOG
                                          • Size 353B
                                          • SHA256 e4bc32a3e9b9137250f9255e4d8ef11118932d90bfd65f049d616030120fca70
                                          • MD5 SHA1 SHA512 TLSH

                                          717dd8a7-a617-430e-bdee-439d6303406c.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\717dd8a7-a617-430e-bdee-439d6303406c.tmp
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512

                                          8979954f-21bd-4075-9766-25a8f6d88c48.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8979954f-21bd-4075-9766-25a8f6d88c48.tmp
                                          • Size 40B
                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                          • MD5 SHA1 SHA512

                                          a689dbab-e17b-43cf-8bc0-41e7d58416a4.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a689dbab-e17b-43cf-8bc0-41e7d58416a4.tmp
                                          • Size 3KB
                                          • SHA256 e0b8bf2b30e2df1fc1beb0a0e16d3d09a4af8cac1f912597114bbf7839dfe3bb
                                          • MD5 SHA1 SHA512 TLSH

                                          CURRENT

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                          • Size 16B
                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                          • MD5 SHA1 SHA512

                                          sync_diagnostic.log

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                          • Size 23KB
                                          • SHA256 8996f7d2c3203e180f2604f2199b538912a99b4b6bc2c29e4b7fcdf8f0da6685
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          MANIFEST-000001

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                          • Size 41B
                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                          • MD5 SHA1 SHA512

                                          MANIFEST-000001

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                          • Size 23B
                                          • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                          • MD5 SHA1 SHA512

                                          a6cc5576-4566-431e-b0a2-48dd83f87d46.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6cc5576-4566-431e-b0a2-48dd83f87d46.tmp
                                          • Size 27KB
                                          • SHA256 9c96c636b82d86bbdb2a11cc00577c970a5d4a847b819cff6a4e50e7334429c3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          bc92eaac-1f49-4727-a4de-07d35a0a416f.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc92eaac-1f49-4727-a4de-07d35a0a416f.tmp
                                          • Size 11KB
                                          • SHA256 3693c6a9799a63cfe84cc7540a56b0e6ec87939bb79ed7d32e28772f33986773
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          e5af1fa3-3e75-43c7-98fb-af85f8e65347.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5af1fa3-3e75-43c7-98fb-af85f8e65347.tmp
                                          • Size 6B
                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                          • MD5 SHA1 SHA512

                                          feb92b7c-0013-4f0e-ba22-1279f6f56401.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\feb92b7c-0013-4f0e-ba22-1279f6f56401.tmp
                                          • Size 12KB
                                          • SHA256 e166970abaa3bcd6b9b38a51aac7663cf1ed73502197c9bd014d9c152459fef5
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          e11a55c7-6069-4c28-90b8-ca288c810c0c.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e11a55c7-6069-4c28-90b8-ca288c810c0c.tmp
                                          • Size 26KB
                                          • SHA256 9bc5b15a137720c1e7e88a3bc2e0bd81a75e4475a01056aa87a8fa49bf7cd032
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                          • Size 2KB
                                          • SHA256 85906802e0c1af4c1f34a98c89fc8b65da34da15a256bd8b2ba564e5a3ce2966
                                          • MD5 SHA1 SHA512 TLSH

                                          memory/3140-514-0x0000021B11EF0000-0x0000021B12EF0000-memory.dmp