Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    132s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/10/2026, 22:45

General

  • Target
    sample.html
  • Size 26KB
  • Sample261023-2pm88set6t
  • SHA256 e57d1193a866569c53132a003fe2a89e21f990af1ea455e4349069c7144167a7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 35 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4192
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc37eec188,0x7ffc37eec194,0x7ffc37eec1a0
      2⤵
        PID:2496
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,3795859040061404504,16887191791186371108,262144 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:2
        2⤵
          PID:1528
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,15213236663929158624,1993902235064670630,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:11
          2⤵
          • System Time Discovery
          PID:1344
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,11227034297737784081,11353531715271591681,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:13
          2⤵
            PID:2932
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,2477522758669852100,2598431956499725599,2097152 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
            2⤵
              PID:3100
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,11696235487013303554,6191012081595017096,2097152 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
              2⤵
                PID:856
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2300,i,6001138189093082341,13768205211834412308,2097152 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
                2⤵
                  PID:364
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,8324591750393540595,11866270602116257306,2097152 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:9
                  2⤵
                    PID:252
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5260,i,14477430092872625436,14884370061854027307,2097152 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
                    2⤵
                      PID:2552
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,16391794003566098783,3436977742297010409,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
                      2⤵
                        PID:2820
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,3243615014770574416,1434078646950173351,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
                        2⤵
                          PID:1472
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,6747988374066279810,12940969305827289503,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
                          2⤵
                            PID:1524
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,6747988374066279810,12940969305827289503,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
                            2⤵
                              PID:1364
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,8489823286008029874,17780030827949252817,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
                              2⤵
                                PID:4428
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,1897492695936657968,570879160231723449,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
                                2⤵
                                  PID:3348
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3392,i,11951568576837241920,4302582551310552003,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:14
                                  2⤵
                                    PID:2008
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,3397036902908066280,15341675497077410981,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:14
                                    2⤵
                                      PID:4680
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,16514413125902416866,1968113334498313481,524288 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
                                      2⤵
                                        PID:2748
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5808,i,17654834986625224475,198059244883901541,262144 --field-trial-handle=2796,i,9304355323764095154,9294447990276793502,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:10
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:4428
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:4376
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                        1⤵
                                          PID:4304

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              4028a278-ce45-4575-ae0e-6bf1cb79dbe6.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4028a278-ce45-4575-ae0e-6bf1cb79dbe6.tmp
                                              • Size 34KB
                                              • SHA256 2ec80b8fd147d310cba95f763d824b34cbb4d3278c813a64953e9370a3624f5e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              473547cc-57b1-4f24-8880-fe6fc9914ef4.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\473547cc-57b1-4f24-8880-fe6fc9914ef4.tmp
                                              • Size 40KB
                                              • SHA256 d57139727dc4958f99d4b74bbe4644746e053920944f6d0edd956367e164b5fb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              48d56ba2-34c8-4480-aeeb-588c82c8e07f.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\48d56ba2-34c8-4480-aeeb-588c82c8e07f.tmp
                                              • Size 36KB
                                              • SHA256 909d40951087c6093d7be7647d1b049342d5e5e514f804ba7460882d1e43d223
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4c94617f-71ac-4422-84bd-9718f7eb116e.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c94617f-71ac-4422-84bd-9718f7eb116e.tmp
                                              • Size 38KB
                                              • SHA256 e3c4511503c321a3d1e2d57161078e5c71b6ee51b0fc651e91d7623c2c64ca22
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              62de4955-31eb-492b-b6d4-85888344e31b.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62de4955-31eb-492b-b6d4-85888344e31b.tmp
                                              • Size 34KB
                                              • SHA256 65ab437243209ba30a70efa1c9bf52edf52841339029b77849c236cd046ffe53
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7134f905-bfe7-4bb2-9901-800aa8e9f3bd.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7134f905-bfe7-4bb2-9901-800aa8e9f3bd.tmp
                                              • Size 37KB
                                              • SHA256 b96d18eb5c731e7c3b33fe3be439dc4c325f947f325f7836def7f40f4bb2fd19
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              81f9c305-9adb-436d-b1e4-284a0bd17b28.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\81f9c305-9adb-436d-b1e4-284a0bd17b28.tmp
                                              • Size 36KB
                                              • SHA256 4f700f44ab9a5cd7cfa0ee8856015ee81697eae26a6cd58a685eb46a985682f7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
                                              • MD5 SHA1 SHA512 TLSH

                                              0f16239b-04c0-4e59-98ac-7fac966b9e23.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0f16239b-04c0-4e59-98ac-7fac966b9e23.tmp
                                              • Size 23KB
                                              • SHA256 9f9d011fb64a7ef92e11df0faacb5e6bfee484ba5cf059b90e52c3f5ebfc86fd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              17af92fd-fc91-4919-8755-9b12bb96dafe.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\17af92fd-fc91-4919-8755-9b12bb96dafe.tmp
                                              • Size 10KB
                                              • SHA256 ff5a7207d222afd5d91e50a5f9003f022a06d9651bd30a6f3e4723efb3195083
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              38f5a07a-dc8e-47d9-b1e3-88c11a134901.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38f5a07a-dc8e-47d9-b1e3-88c11a134901.tmp
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              508b820b-a5b5-45fa-bf9c-f592f5b3689a.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\508b820b-a5b5-45fa-bf9c-f592f5b3689a.tmp
                                              • Size 11KB
                                              • SHA256 4783f3b600c6bcb3b7368598b5c9a1e8999e0116247c6f396d4c5e63004917dd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5271c444-fb99-4fc2-890f-eea0277e04e8.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5271c444-fb99-4fc2-890f-eea0277e04e8.tmp
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              LOG.old

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                              • Size 331B
                                              • SHA256 29a92856f92b8db648e4b1627d4b20fc0c6c3bf092a67c683bdccfa26a455156
                                              • MD5 SHA1 SHA512 TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                              • Size 3KB
                                              • SHA256 4a3af197c3b8936a9672e5342d5392efe5f7c59ffe1cc0167ddbdaadb9434f27
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 3KB
                                              • SHA256 46ad58d10a3ded0d9c1b4170cd0c060ae6509ed7148761346b7e2a09692b93ad
                                              • MD5 SHA1 SHA512 TLSH

                                              add2df9a-b238-4071-a531-96c87e4f3e5a.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\add2df9a-b238-4071-a531-96c87e4f3e5a.tmp
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              6228e394-f002-435f-87bc-eb7eb69b0854.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6228e394-f002-435f-87bc-eb7eb69b0854.tmp
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              7c5ce26a-e014-40ca-b373-9e8b9ab4b052.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7c5ce26a-e014-40ca-b373-9e8b9ab4b052.tmp
                                              • Size 40B
                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                              • MD5 SHA1 SHA512

                                              e84ba4ab-354c-4876-adc0-8bf9c11630dc.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e84ba4ab-354c-4876-adc0-8bf9c11630dc.tmp
                                              • Size 4KB
                                              • SHA256 ee0c00ae6fe55029e0b5e8bbcd03d05e20b03932f454d335a4a4cbbac52d1cca
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              CURRENT

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 3KB
                                              • SHA256 b92db9820e8faac66d47393c29646be95f0517b6f4b630e639e69338d57babc8
                                              • MD5 SHA1 SHA512 TLSH

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 4KB
                                              • SHA256 004b323510e9663fb64ffdc58d28d4cd2a705a0821b2c4043035058a1cece29d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                              • Size 149B
                                              • SHA256 ac62133ea30c3e07e33cb2c14f82ae8c13f02eafae21e06aa3a12765d2bb9ef4
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
                                              • Size 65B
                                              • SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
                                              • MD5 SHA1 SHA512 TLSH

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                              • Size 23B
                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                              • MD5 SHA1 SHA512

                                              c1158be8-d597-44e7-991e-1585203a352f.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c1158be8-d597-44e7-991e-1585203a352f.tmp
                                              • Size 10KB
                                              • SHA256 c5daac5c7133bdd1a80f36f0c82979753ec59ad1257327f443f511c447002c0f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              eff0441d-096a-40f4-b8c9-836a747d1e46.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eff0441d-096a-40f4-b8c9-836a747d1e46.tmp
                                              • Size 10KB
                                              • SHA256 2156ca5d969cd38391ea141c9cf3c823b7945783e3adc754e54af516ae2a46a0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              c0af2d77-0667-40ec-81ae-38dd887844c6.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c0af2d77-0667-40ec-81ae-38dd887844c6.tmp
                                              • Size 22KB
                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              23ab461c-6354-4d93-9dd8-35bb86b2e07c.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\23ab461c-6354-4d93-9dd8-35bb86b2e07c.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512