Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/10/2026, 11:11

General

  • Target
    https://storage.westtec.co.nz/dl/Avviso_Violazione_Copyright_Proprieta_Intellettuale/2bfe7eb8788f08284104ae57682a23f5
  • Sample261023-nap8dsxwgs
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 48 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://storage.westtec.co.nz/dl/Avviso_Violazione_Copyright_Proprieta_Intellettuale/2bfe7eb8788f08284104ae57682a23f5
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2584
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe87bfc188,0x7ffe87bfc194,0x7ffe87bfc1a0
      2⤵
        PID:2688
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,6367706435581721607,9143413661361492427,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3776
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,7955255878268303671,13124170390116926712,262144 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:2
        2⤵
          PID:1612
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,17645582258948495306,11443053535072737161,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:8
          2⤵
            PID:1752
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,8671250584973375829,623528704849579561,2097152 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
            2⤵
              PID:1776
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,7096052503702612036,2059161881606636460,2097152 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
              2⤵
                PID:4628
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,114862875317986446,9326351634731412936,2097152 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
                2⤵
                  PID:2544
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,12577011363319436324,16298792810174768241,2097152 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:2
                  2⤵
                    PID:2636
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,13613791215874738418,17338485275978228082,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
                    2⤵
                      PID:1660
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,9617632556853599276,16344069924100322859,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
                      2⤵
                        PID:2536
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5716,i,6513063800111350212,1518900634485105442,2097152 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:1
                        2⤵
                          PID:3176
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,1150681097763186305,930026956970523335,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
                          2⤵
                            PID:2020
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,6586118572311548728,13619923678048035462,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
                            2⤵
                              PID:3320
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,6586118572311548728,13619923678048035462,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
                              2⤵
                                PID:1460
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7108,i,5609154124350881676,10638874434838273935,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
                                2⤵
                                  PID:4392
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,14667357395840981083,10607419655707596437,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:8
                                  2⤵
                                    PID:3720
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,8615314764542903503,13886141406580699360,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:8
                                    2⤵
                                      PID:2176
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,17629859199773115858,6136428502343515342,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
                                      2⤵
                                        PID:3260
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,8807653245629837443,12999365469890310310,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
                                        2⤵
                                          PID:624
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,10516593099197461662,1468249095314041215,524288 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
                                          2⤵
                                            PID:1988
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6760,i,4287529490050647511,12004289204043387293,262144 --field-trial-handle=2840,i,11745775291503092,1059161343907915286,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:1596
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                          1⤵
                                            PID:4884

                                          Network

                                                MITRE ATT&CK Enterprise v16

                                                Replay Monitor

                                                Loading Replay Monitor...

                                                Downloads

                                                4bde7fb2-f479-4eb1-bf67-f91ab8dbea06.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4bde7fb2-f479-4eb1-bf67-f91ab8dbea06.tmp
                                                • Size 8KB
                                                • SHA256 0550616d7a547763b0da2173b42f8a72f1e3ad96196509bc756260351035be48
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                60fd9eb7-4542-411a-a802-3a6f8bce459e.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\60fd9eb7-4542-411a-a802-3a6f8bce459e.tmp
                                                • Size 21KB
                                                • SHA256 028dbc4f4fcbc845d0574b426f46d0ca7f52e5da984b67965e70f3c1baa3d2e0
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                93f47fac-1c3c-4b3d-ba7a-d5a744205b37.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\93f47fac-1c3c-4b3d-ba7a-d5a744205b37.tmp
                                                • Size 18KB
                                                • SHA256 a45edcff06ad3a5e324051543d52162a7adffc08c026f7102b95e07e2e3af912
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                settings.dat

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                • Size 280B
                                                • SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
                                                • MD5 SHA1 SHA512 TLSH

                                                settings.dat

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                • Size 280B
                                                • SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
                                                • MD5 SHA1 SHA512 TLSH

                                                207f377f-dc8b-4798-b3d2-9a795f9f0ee2.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\207f377f-dc8b-4798-b3d2-9a795f9f0ee2.tmp
                                                • Size 9KB
                                                • SHA256 b492a4b49e4a4865f14a6b5c9748a5e6f87e19c43b89acb92fa0639eba36455c
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                5549cca7-43a6-4a4d-9278-f92a5243f9ca.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5549cca7-43a6-4a4d-9278-f92a5243f9ca.tmp
                                                • Size 27KB
                                                • SHA256 54bd91512cd5c635f510487584f43112e3f9fabcef41b2db69e944869075c428
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                780717c8-8281-4d62-b46b-fd4ccbbd7732.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\780717c8-8281-4d62-b46b-fd4ccbbd7732.tmp
                                                • Size 9KB
                                                • SHA256 5046953d2c1eca06b5ce1c9c4f4850fb5c57b6d714d1f73d2118e1eaf5216b97
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                90d6bea5-6b8f-4917-9fb1-18372152dc86.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90d6bea5-6b8f-4917-9fb1-18372152dc86.tmp
                                                • Size 10KB
                                                • SHA256 5f4c27a60f82d7449ae9ae0b9a3cf1fcaac102bfcd61e597e04183ccf8d8ff69
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                9e10c980-d0ab-4fba-8574-0edd03b91ce5.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9e10c980-d0ab-4fba-8574-0edd03b91ce5.tmp
                                                • Size 6B
                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                • MD5 SHA1 SHA512

                                                9ebef6e2-20e8-4a87-80e2-968bc0b22219.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ebef6e2-20e8-4a87-80e2-968bc0b22219.tmp
                                                • Size 10KB
                                                • SHA256 c32b0e745a95b5b9113142440d68ff4b928b2388f5d9c8f8011db064003e1a3e
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                LOG.old

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                • Size 334B
                                                • SHA256 a9a834e0c9f741d17d59a76737e3ad2982b4a8e9ed87f805d49898c6f94ac66d
                                                • MD5 SHA1 SHA512 TLSH

                                                temp-index

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                • Size 3KB
                                                • SHA256 9189609ddd4159b26ed9bbc3338ef6127e9a54366c7c88b313e189247637f354
                                                • MD5 SHA1 SHA512 TLSH

                                                859dc26c-e945-4205-b9d9-fb94b830506c.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\859dc26c-e945-4205-b9d9-fb94b830506c.tmp
                                                • Size 2B
                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                • MD5 SHA1 SHA512

                                                091fb1e6-3458-4c18-a93a-1a6106b038af.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\091fb1e6-3458-4c18-a93a-1a6106b038af.tmp
                                                • Size 111B
                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                • MD5 SHA1 SHA512 TLSH

                                                3312b922-a326-4bf5-9236-bd86c50a240c.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3312b922-a326-4bf5-9236-bd86c50a240c.tmp
                                                • Size 1KB
                                                • SHA256 e5f891fa85a99ca8d8525982d3806f9ba8dc27358a16c9dfc2925e017f8d42a5
                                                • MD5 SHA1 SHA512 TLSH

                                                88a82b76-1c15-47f9-9205-cac9ecb04957.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\88a82b76-1c15-47f9-9205-cac9ecb04957.tmp
                                                • Size 2B
                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                • MD5 SHA1 SHA512

                                                sync_diagnostic.log

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                • Size 5KB
                                                • SHA256 ebe45ed251282a8af39a02735a7679fc6cee2a37fd4e44d8b0e8510a1f426db2
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                cb1cf7b0-f2b1-470e-b8d1-5b25a769f3ae.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb1cf7b0-f2b1-470e-b8d1-5b25a769f3ae.tmp
                                                • Size 70KB
                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                OperationConfig

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                • Size 3KB
                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                • MD5 SHA1 SHA512 TLSH

                                                cfd02198-1792-4391-bc18-bcf2b409666f.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cfd02198-1792-4391-bc18-bcf2b409666f.tmp
                                                • Size 22KB
                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                af24bb88-30e5-4669-bcb7-fca9884e2cf6.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af24bb88-30e5-4669-bcb7-fca9884e2cf6.tmp
                                                • Size 18KB
                                                • SHA256 2f5c3e2113fc7edd04b61791c9ce2ae232e3f5aa2a8ee9a5902027be0c2973dc
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                cbb1db4e-74fc-4cc8-9a8d-da48125fbc66.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cbb1db4e-74fc-4cc8-9a8d-da48125fbc66.tmp
                                                • Size 8KB
                                                • SHA256 0b66da00c0c59e2209648307c18f0a7fb735c37e5a33a1700bac15445368a839
                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                44fb8019-4d6c-458c-8557-3e59d8ec12d6.tmp

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\44fb8019-4d6c-458c-8557-3e59d8ec12d6.tmp
                                                • Size 13B
                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                • MD5 SHA1 SHA512

                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                • Size 2KB
                                                • SHA256 faa32514e9a64682472bc1c2e02cba7ee23c8a11324b5d03bc71bc0995a062d2
                                                • MD5 SHA1 SHA512 TLSH

                                                cc990c1f-08c1-4124-8988-c918714d64b1.tmp

                                                • Path C:\Users\Admin\Downloads\cc990c1f-08c1-4124-8988-c918714d64b1.tmp
                                                • Size 13KB
                                                • SHA256 77ab1ff22f7a2c4a2cd1efbc7387e0263d16471e2bfa81da8d31eca9d943c097
                                                • MD5 SHA1 SHA512 SSDEEP TLSH