Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/10/2026, 19:21

General

  • Target
    exec.html
  • Size 12KB
  • Sample261022-x219eahv5n
  • SHA256 da9f6e23a026954309fd9067fea6f5f38541998967b92c409a9d4a4ebd478b43
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 37 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\exec.html
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2092
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7fffce4dc188,0x7fffce4dc194,0x7fffce4dc1a0
      2⤵
        PID:2968
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,14529206459050812705,10675776371253653288,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
        2⤵
        • System Time Discovery
        PID:5092
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,8739367555301945843,4279291175457747862,262144 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
        2⤵
          PID:3560
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,11690649098241178566,10576128031579077744,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
          2⤵
            PID:4568
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,486292110066479296,3686513887100705205,2097152 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
            2⤵
              PID:1764
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,5361427932680925249,3586012808610508246,2097152 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
              2⤵
                PID:2268
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,8610985788159046278,12615241816620282119,2097152 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
                2⤵
                  PID:1104
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,17883573354643831507,9041922862059162255,2097152 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
                  2⤵
                    PID:3824
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5060,i,11825758961217733641,13657365668560349212,2097152 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:1
                    2⤵
                      PID:1256
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,5927734226098638310,12188420540823047498,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
                      2⤵
                        PID:1688
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,3008810148417725089,11261516312566684682,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
                        2⤵
                          PID:1684
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,17239452790240229823,3316997000390170428,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
                          2⤵
                            PID:5084
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,17239452790240229823,3316997000390170428,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
                            2⤵
                              PID:2504
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,12399987341745913707,2133524413586692100,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
                              2⤵
                                PID:2684
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,10835784180224538671,16768943707062770078,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:8
                                2⤵
                                  PID:1948
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,18331597155740778586,2907243313781274994,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
                                  2⤵
                                    PID:1616
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,12207561444839487712,6148479567338012399,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:8
                                    2⤵
                                      PID:3192
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,10642967740544618475,17117885762065210279,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
                                      2⤵
                                        PID:4576
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2124,i,16245031598526521068,4770974185732155893,524288 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
                                        2⤵
                                          PID:5008
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6316,i,16201234269637589526,2676801548594267280,262144 --field-trial-handle=2256,i,18340381839700233561,7921469872668029146,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:4132
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:1160

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              1f90accf-c7f8-4703-a173-39c308af33e4.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1f90accf-c7f8-4703-a173-39c308af33e4.tmp
                                              • Size 8KB
                                              • SHA256 f7dd57f1938b123057c68173a037d8c9bf580219b52e43ff6f13bf318ff80540
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              325dfa95-80d0-4571-9fa3-ae30ab8348ee.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\325dfa95-80d0-4571-9fa3-ae30ab8348ee.tmp
                                              • Size 21KB
                                              • SHA256 687b9f125bbe5c6de4b8a68c9c5ec49d20c38c20b82c40417ce9bd0fea679803
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3760c67a-2906-461d-8266-26f3321a87fd.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3760c67a-2906-461d-8266-26f3321a87fd.tmp
                                              • Size 8KB
                                              • SHA256 4ac4d08ade447008a85e70a17b289f931d824cdf6ef29a8e310fc25facd27e90
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6bd18ea9-331c-4392-ad73-e76312ab448c.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\6bd18ea9-331c-4392-ad73-e76312ab448c.tmp
                                              • Size 105KB
                                              • SHA256 d94841acc41ca658a5ee48a1ef8763d968ff86dec9b648ab9d4d5f3d4fea0d3a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 c1d24032e322bda4aa4f943eeee5c1be2eee903b8fa00c6e40c3ae3aab1d6e57
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 7ba460c9f5a00478279781ba3317975fb747ea7519f30b24bac67a94df77c22d
                                              • MD5 SHA1 SHA512 TLSH

                                              0bf32b48-9aff-4b46-bcfe-9b1c4b969406.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0bf32b48-9aff-4b46-bcfe-9b1c4b969406.tmp
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              316b4aab-80d2-4476-ade8-4aa5bd0ff97a.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\316b4aab-80d2-4476-ade8-4aa5bd0ff97a.tmp
                                              • Size 9KB
                                              • SHA256 b364484acbae9441edeccb945f4aa86b1f1ed9f9212f402a9f79ff94a007fd2b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5cea12a9-24da-44a0-82a9-d517e818a592.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5cea12a9-24da-44a0-82a9-d517e818a592.tmp
                                              • Size 9KB
                                              • SHA256 ef5ef11d333ca175088ef4a5be8f2a89cdc64a0ee473efff06e21710cd0a7be6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              LOG.old

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                              • Size 331B
                                              • SHA256 c320e47c9da1a8d204f3c77afc081e36dde09ea908c138d1c767ab7b8dd09090
                                              • MD5 SHA1 SHA512 TLSH

                                              LOG.old

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                              • Size 331B
                                              • SHA256 cfe9b7dc7bb03076d7cf15d28992628d4e6fbb6462d6490d9aabf8564a4d0c34
                                              • MD5 SHA1 SHA512 TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                              • Size 3KB
                                              • SHA256 ab6774b91f0405d7d9df43c3f09981c201ec5c92bdf71fa686952b07baa14d7a
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 3KB
                                              • SHA256 2aadfac379783b014eb0b86298d0171bc20ff052b76c07995f47a4a68ad8e150
                                              • MD5 SHA1 SHA512 TLSH

                                              065506b8-c978-4f28-b224-b40d532c6b4c.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\065506b8-c978-4f28-b224-b40d532c6b4c.tmp
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              44de8756-ef3d-46e8-b367-277fe9294769.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\44de8756-ef3d-46e8-b367-277fe9294769.tmp
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH

                                              a817957e-2a1c-4068-9973-6cfaad86ea13.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a817957e-2a1c-4068-9973-6cfaad86ea13.tmp
                                              • Size 1KB
                                              • SHA256 d68df908309448b2ac4231b8f255fd44ee7e80ff587cd81fbdfcb1d037171e61
                                              • MD5 SHA1 SHA512 TLSH

                                              f44fda8e-31ec-4497-ae60-0889758dcca8.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f44fda8e-31ec-4497-ae60-0889758dcca8.tmp
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 4KB
                                              • SHA256 0b90d3e640a4f45d6a60158fcaa075a9038edf2e5e24711362e8a7b3b9c52879
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              ab174082-131b-4a48-9ccb-b79a0c3cbaea.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ab174082-131b-4a48-9ccb-b79a0c3cbaea.tmp
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              c2aa738f-6603-4898-8606-73bbf4d16a6a.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2aa738f-6603-4898-8606-73bbf4d16a6a.tmp
                                              • Size 27KB
                                              • SHA256 d5dbb035506930e566fd8c96620ece8e7961e4298c402a051421d1609ccb9c92
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              cd871a61-d3b0-40be-bf9d-c03ab30cf6de.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd871a61-d3b0-40be-bf9d-c03ab30cf6de.tmp
                                              • Size 9KB
                                              • SHA256 0777237b7ef18c2d06f0dffd6849c84c2fa8e2c79673353c286390001239027b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f62f3eb5-82bf-44d6-a741-c9e692b046e2.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f62f3eb5-82bf-44d6-a741-c9e692b046e2.tmp
                                              • Size 10KB
                                              • SHA256 2d80caae2e6ab70590d6a39a98a40f0cebd36fe39b06d44d71773bfb74d91bce
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4a51f2ba-5437-4f31-9cc8-2d2669c4ab80.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4a51f2ba-5437-4f31-9cc8-2d2669c4ab80.tmp
                                              • Size 22KB
                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              a5f404d8-3b53-4f05-a594-4bc89dcb8655.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a5f404d8-3b53-4f05-a594-4bc89dcb8655.tmp
                                              • Size 18KB
                                              • SHA256 10910dcc372f4e05cbcb9cb861ddc25a370368d845cf0ff166dcbb5d3437ef06
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b4740391-ebf1-4e51-bf3f-680179546e96.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4740391-ebf1-4e51-bf3f-680179546e96.tmp
                                              • Size 18KB
                                              • SHA256 a42876bccfc4b728412ce9f479674b5266dc8772279d260e2741726845ee6381
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8b14700b-d12f-4791-8a2f-8ca2dc1bccd8.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b14700b-d12f-4791-8a2f-8ca2dc1bccd8.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512

                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Size 2KB
                                              • SHA256 0c9d055b103428bafe6c219af215bbbdb0aef9f2528628b421d2a8355e3ca27f
                                              • MD5 SHA1 SHA512 TLSH