Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/10/2026, 15:25

General

  • Target
    https://click.enews.united.com/?qs=ABp7ImQiOjUwMzMsInQiOjI3MjMsInMiOjEyfQAMAAAAAAOW_-WFqIsnvR-hzWLexUorHAzn-BNghNujbcd9DrOhZCQw9_8hF8wDGD2fBjfpwhEgGBxawQGJ7QeUgQs43Bo4OtjYobE-0TOVN_mTeaEsLl9SQw
  • Sample261018-styfbsfy2z
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://click.enews.united.com/?qs=ABp7ImQiOjUwMzMsInQiOjI3MjMsInMiOjEyfQAMAAAAAAOW_-WFqIsnvR-hzWLexUorHAzn-BNghNujbcd9DrOhZCQw9_8hF8wDGD2fBjfpwhEgGBxawQGJ7QeUgQs43Bo4OtjYobE-0TOVN_mTeaEsLl9SQw
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1040
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff92f11c188,0x7ff92f11c194,0x7ff92f11c1a0
      2⤵
        PID:1884
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,2220472219511429984,10273458504868979001,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4720
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,16550755585439219606,7667311653055560987,262144 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
        2⤵
          PID:2540
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,17524186280895535277,13809944351591967019,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
          2⤵
            PID:3032
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,761335312828343579,10185339773384546765,2097152 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
            2⤵
              PID:4472
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,6936111118849789221,1926818824934016039,2097152 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
              2⤵
                PID:4436
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,7272615942526082027,13283542085940290310,2097152 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
                2⤵
                  PID:4924
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,17051071112486361334,4098950665346971645,2097152 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:2
                  2⤵
                    PID:3680
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,4138341984455182137,8836081235196517632,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
                    2⤵
                      PID:4668
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,16442848718253641365,15536008471554508441,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
                      2⤵
                        PID:2256
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,292044658898101111,11807424499470011113,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
                        2⤵
                          PID:1760
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5992,i,11433118673622275730,7680500058038984785,2097152 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:1
                          2⤵
                            PID:4800
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,925352988786998423,3479234660550871079,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
                            2⤵
                            • Modifies registry class
                            PID:4996
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6596,i,7444124844145173240,14672031968036265245,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
                            2⤵
                              PID:2172
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6596,i,7444124844145173240,14672031968036265245,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
                              2⤵
                                PID:2876
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6664,i,7727984370367644169,2372293486084772536,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8
                                2⤵
                                  PID:5684
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6640,i,15366287581719552696,4198432648354639309,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:8
                                  2⤵
                                    PID:5704
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,18388692847696303552,10198487676453579464,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
                                    2⤵
                                      PID:5716
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,6519390295717969616,4160741125473920726,524288 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
                                      2⤵
                                        PID:5188
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6416,i,9034513001825932310,14948178464577226101,262144 --field-trial-handle=2276,i,17137232176830416978,14909471275674250127,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:3576
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:2392

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            192596e5-7e3e-4414-a7e9-ac6903586a04.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\192596e5-7e3e-4414-a7e9-ac6903586a04.tmp
                                            • Size 18KB
                                            • SHA256 175a1f374aa42fc0a2fe44dbfbd5b16ff33e5d63577e8faf99af6bc21fe9ec9a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            29de7a73-5f3b-473e-b80d-e2bedfbf16ec.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\29de7a73-5f3b-473e-b80d-e2bedfbf16ec.tmp
                                            • Size 18KB
                                            • SHA256 f64fd398ab9f0651d3a1fe6277b5a7aa111b54e32f1824169eef241fd101235f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            56b02ee0-1415-4c41-b8fb-672ef1eba30d.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56b02ee0-1415-4c41-b8fb-672ef1eba30d.tmp
                                            • Size 8KB
                                            • SHA256 107f4dd890bea6e1f9b71683b82ed92e705e5d1ae384c0ebb386fad260328ba4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            57d8bd51-9a7e-4948-92f8-8cd6caa8b48a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\57d8bd51-9a7e-4948-92f8-8cd6caa8b48a.tmp
                                            • Size 8KB
                                            • SHA256 8ec901b4d3e9d05931934db19f87778d7a8155f24c3e208aafd1d4544a947063
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            9bf09cc6-8774-4427-aac7-043b51001656.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9bf09cc6-8774-4427-aac7-043b51001656.tmp
                                            • Size 12KB
                                            • SHA256 84383befd7c597f8cabfb4b4d03fe6a6bc193a5d1c7bcbed38ff008f2ba14e3d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
                                            • MD5 SHA1 SHA512 TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
                                            • MD5 SHA1 SHA512 TLSH

                                            0652ca0e-fedf-4945-9673-95ac1fa2e8ab.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0652ca0e-fedf-4945-9673-95ac1fa2e8ab.tmp
                                            • Size 10KB
                                            • SHA256 ea06d7ba38b1d39df87a00aad17ef039cf22c37f94f50b79afd49b99140351b8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            1d18b7cb-db9a-428d-b5ff-731938b66013.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d18b7cb-db9a-428d-b5ff-731938b66013.tmp
                                            • Size 70KB
                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            2d647752-e959-4c63-b789-1fc95275020d.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d647752-e959-4c63-b789-1fc95275020d.tmp
                                            • Size 10KB
                                            • SHA256 f918afc0afca3218778f00c6ef96f5d2b9300fd2c19305a318968046bf604dd7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000082

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                            • Size 137KB
                                            • SHA256 67bd673c63923918195e3c45f85fd5bbdf65e5dbb983afcb66f0fd80ee2430e8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000a4

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                            • Size 1.1MB
                                            • SHA256 6df50cd25bf7f9a617f3896c431fc671c8ee80390d18b20c7f8da0c1941890f3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000a5

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                            • Size 20KB
                                            • SHA256 5f4be73f921e22b0e13284fd32484791a2450708585ab2209cf42fd2af55845e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000a7

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                            • Size 103KB
                                            • SHA256 56e76d38510cf9e03559569113e814f5dcf18074235d032c84f48c6e397479ae
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000b2

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                            • Size 167KB
                                            • SHA256 75c87b012087a3f6825aa43e9843b0abb288e8f11ba109e36eac782840468d72
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000d2

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
                                            • Size 51KB
                                            • SHA256 1e98025ec1158805ff78e6794e79dc3fe281efb2c3b99530ad21be3d2203d0a6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000d3

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                            • Size 40KB
                                            • SHA256 bf38098f9e23e8509d76fbfd6101f01896f208d6f0f4886a8a2194b2d0aaa3a8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000d9

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                            • Size 48KB
                                            • SHA256 d0a6b8c63dd65a61d4c220f2691a4b0bfacb8224b8fd5464bf06d573bfa4d7a3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000da

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                            • Size 16KB
                                            • SHA256 b030a1f3d0bbeef5c60ccc75e1d49b4845f83d60bd87ff7634c696e070c425fc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000dd

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dd
                                            • Size 501KB
                                            • SHA256 5111b640bd06aa3d5fe4c4597ad824b848aa868a63c2a8472a2eb24804f9d357
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000e4

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
                                            • Size 124KB
                                            • SHA256 d046fd3fd84c89e5156ea4653b3ff550258020cd059c5463a9044748d9fd1b22
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000eb

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
                                            • Size 19KB
                                            • SHA256 6bea4dedea5eb889cfc83e22e3a16fbe1b772b2c41757bc8b70a399a6e1d20b3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000ee

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
                                            • Size 47KB
                                            • SHA256 203e3e748c03a0d8ab3514ac36e9b89546c9aa964354c45bbe3b95364233cc6e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000f2

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f2
                                            • Size 17KB
                                            • SHA256 9500a9ea0003838a08fb291bbfb6abdc6bbb294b17c44b210aab91c2ad13936d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000f6

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
                                            • Size 115KB
                                            • SHA256 d4bdab4ebb7c38dd331b470fba2d3297cb727aefd5e6157d14cbc3fc4a939935
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000fd

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fd
                                            • Size 22KB
                                            • SHA256 4c93cba47c2873029ba4e7e8dbf697eef7cf142c2fc11a984b81990de7008707
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 6KB
                                            • SHA256 80c10c430bd22aa432de30dfcfad62f609f8a14d40c3e481c6c16b9f325d99ed
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 3KB
                                            • SHA256 38c804018f032c289639cb005b9e39cc664cff3e8f5fa6b5fd3641ec25502683
                                            • MD5 SHA1 SHA512 TLSH

                                            3bae90a3-3acd-4a9c-8e35-a17512ab3438.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3bae90a3-3acd-4a9c-8e35-a17512ab3438.tmp
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512

                                            CURRENT

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.united.com_0.indexeddb.leveldb\CURRENT
                                            • Size 16B
                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                            • MD5 SHA1 SHA512

                                            00c57bb0-ef83-4f40-8c73-0525ad5a653c.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\00c57bb0-ef83-4f40-8c73-0525ad5a653c.tmp
                                            • Size 7KB
                                            • SHA256 c5886b6e7eb316fe897966768cfb8fe5035dbca17fb1efbaec3db155b3e7db64
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            454bd8b3-f04d-48ef-86a3-1c412547f1d3.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\454bd8b3-f04d-48ef-86a3-1c412547f1d3.tmp
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            d62658ee-f99f-4f83-b931-367790c6408b.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d62658ee-f99f-4f83-b931-367790c6408b.tmp
                                            • Size 111B
                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                            • MD5 SHA1 SHA512 TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e13c22d7f90a057fff9ca3ad2c0b365960372138\5b3a9d56-5928-43b8-ba30-148e7b503918\index-dir\temp-index
                                            • Size 28KB
                                            • SHA256 607e29818862e50cb64745645e001dab0e5714606c2c2fee18239c38207af5e3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e13c22d7f90a057fff9ca3ad2c0b365960372138\5b3a9d56-5928-43b8-ba30-148e7b503918\index-dir\the-real-index
                                            • Size 48B
                                            • SHA256 b22c99c46f1d10f7d043aebbfda64c50c4f18bf0fdb1aa81c0632543b93ec42b
                                            • MD5 SHA1 SHA512

                                            index.txt

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e13c22d7f90a057fff9ca3ad2c0b365960372138\index.txt
                                            • Size 226B
                                            • SHA256 007f98f154d7bea6419852a9c7c6fc569ed2dcc9a3a0be99a5e8caac7ff611d7
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e13c22d7f90a057fff9ca3ad2c0b365960372138\index.txt.tmp
                                            • Size 222B
                                            • SHA256 8f9a4cb1d46351be3f8ad1f8a9706c54bc9c22077fa7544cfe81b72024aa97b2
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\e13c22d7f90a057fff9ca3ad2c0b365960372138\index.txt.tmp
                                            • Size 219B
                                            • SHA256 08d93a3d3a8c23c2dc53b44d73608eece47b9766ea1731d30f82a1d5cdd2c6fd
                                            • MD5 SHA1 SHA512 TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                            • Size 72B
                                            • SHA256 cfa797627e4a20dce67fc8ca98d4dfcdcd82d7ce234fd69eb3a8a63ed0a0fd0a
                                            • MD5 SHA1 SHA512 TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                            • Size 72B
                                            • SHA256 921ba00fb80da7673ef60b6a051e90344b173d37d13fd40ea8fa7fc947309918
                                            • MD5 SHA1 SHA512 TLSH

                                            sync_diagnostic.log

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                            • Size 5KB
                                            • SHA256 7550f77a3692b777cf66ca6dc959f5129ad634a480db217486a89cb41bdf5bc5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            MANIFEST-000001

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                            • Size 23B
                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                            • MD5 SHA1 SHA512

                                            b464a249-a29b-4045-b641-79b344a338ec.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b464a249-a29b-4045-b641-79b344a338ec.tmp
                                            • Size 10KB
                                            • SHA256 0660ac7e784c5c6f1ee10cf2e1ff8125538b0557eb676eab658c6f86981dbc25
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            c77b1c5a-85c4-4186-8646-810940b03981.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c77b1c5a-85c4-4186-8646-810940b03981.tmp
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512

                                            e3ffedc3-5671-4563-af70-f11207e9506f.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3ffedc3-5671-4563-af70-f11207e9506f.tmp
                                            • Size 27KB
                                            • SHA256 6a934d91ac26c4ec9acee7fa25f19e12c5e3075aa6b48a15681ea4817706d622
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            e874c209-d46e-400d-bfb4-f82c87746187.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e874c209-d46e-400d-bfb4-f82c87746187.tmp
                                            • Size 10KB
                                            • SHA256 92aaa95363ee61c6c9962591f1523920c5d6d624f9ff992c0989f583c2c0ebd1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            68914bef-89eb-4308-8f4b-12f1b5e46919.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\68914bef-89eb-4308-8f4b-12f1b5e46919.tmp
                                            • Size 22KB
                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            OperationConfig

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                            • Size 3KB
                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                            • MD5 SHA1 SHA512 TLSH

                                            b10063fc-8180-4ebb-8dc8-31c59df4e800.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b10063fc-8180-4ebb-8dc8-31c59df4e800.tmp
                                            • Size 21KB
                                            • SHA256 fc9e247c5003c0311948f4be32cad06d5185f4e7d7b7ea50095c21a8b45744c2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            c5970b9a-acb0-40d5-ae3c-3d68e4fca8ce.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c5970b9a-acb0-40d5-ae3c-3d68e4fca8ce.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512

                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Size 2KB
                                            • SHA256 890e90b30d9f9c114d98f6da7fa68ce98b55629fcc8bd17bbb3e7e97d1fb2565
                                            • MD5 SHA1 SHA512 TLSH