Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/10/2026, 15:00

General

  • Target
    https://securemail.retirementpartner.com/formpostdir/securereader?id=5j8nLUFcox-gq-qjoeTTwmV3YhE51yvg&brand=28d4f9d3c1eebe1c2
  • Sample261023-sdlrlaew5q
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 31 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://securemail.retirementpartner.com/formpostdir/securereader?id=5j8nLUFcox-gq-qjoeTTwmV3YhE51yvg&brand=28d4f9d3c1eebe1c2
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4564
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffd0e73c188,0x7ffd0e73c194,0x7ffd0e73c1a0
      2⤵
        PID:5624
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,7516327966703351150,6083033943517155518,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
        2⤵
        • System Time Discovery
        PID:1212
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,9707825836797409682,8081732976641717706,262144 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
        2⤵
          PID:3904
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,17664519968841132052,4959358982887162741,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
          2⤵
            PID:2908
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,1674806644458515263,5516504733657320967,2097152 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
            2⤵
              PID:1404
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,6182130838403490343,8819804712103540400,2097152 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
              2⤵
                PID:5616
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,12933850470421389285,9045875266823249001,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
                2⤵
                  PID:4972
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,15917837986918723468,8230598497024047373,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
                  2⤵
                    PID:644
                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,16117410014879281353,3787564245750068197,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
                    2⤵
                      PID:5152
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,16117410014879281353,3787564245750068197,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
                      2⤵
                        PID:2124
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6008,i,10544208976982650193,11527624027742730257,2097152 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:1
                        2⤵
                          PID:2940
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,1751082296555304857,2501710392996354839,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
                          2⤵
                            PID:2240
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,9249673003035413600,9422564645515019826,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:8
                            2⤵
                              PID:4728
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,9376170757639156183,17435683080550631990,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
                              2⤵
                                PID:4188
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2812,i,5799663934188430851,8301833684925792266,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:8
                                2⤵
                                  PID:4376
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,13610930128768895574,4187011798265486181,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:8
                                  2⤵
                                    PID:2176
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,1127458844212378348,2127485290701062182,524288 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
                                    2⤵
                                      PID:4048
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5044,i,12035951269177039916,12416843554721126299,262144 --field-trial-handle=2264,i,7826836083824901330,16178338415092229956,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2532
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                    1⤵
                                      PID:1236
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                      1⤵
                                        PID:1116

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            660b60d4-688d-4b16-b528-bad416f8b7e0.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\660b60d4-688d-4b16-b528-bad416f8b7e0.tmp
                                            • Size 27KB
                                            • SHA256 cb67f5d2d6238fcbe1a5175bd956227dfe94b6074e31bbd2453441f2c7dccc42
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            6faf0ab0-6b62-4f48-b5f1-835c7d035dd5.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6faf0ab0-6b62-4f48-b5f1-835c7d035dd5.tmp
                                            • Size 26KB
                                            • SHA256 34bc631edd88f44963c016070a298ad1a70edac77006c60655e8dadaa706f685
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            70b06d57-5f91-4a90-a6bb-b2610522f2cd.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\70b06d57-5f91-4a90-a6bb-b2610522f2cd.tmp
                                            • Size 25KB
                                            • SHA256 28e2cdfda1b90dcc01b58d7ab9362071fea36d10f30cb2272d7bccced0ef8c8b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            9a4060fa-45d8-4cfb-9f04-acdd31affdba.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a4060fa-45d8-4cfb-9f04-acdd31affdba.tmp
                                            • Size 32KB
                                            • SHA256 670070292fecc18e4249ec74623c43793c9b8e54a8f05c48373dfa3a4d2b8fea
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
                                            • MD5 SHA1 SHA512 TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
                                            • MD5 SHA1 SHA512 TLSH

                                            315df104-ea5d-4f13-9d1f-ff832c4649f6.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\315df104-ea5d-4f13-9d1f-ff832c4649f6.tmp
                                            • Size 12KB
                                            • SHA256 4e7b65cb584d92f986445a492111948037a5aa2451b49254730cb96367516056
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            4129301c-590b-4b9a-90de-e7f91fc561a1.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4129301c-590b-4b9a-90de-e7f91fc561a1.tmp
                                            • Size 12KB
                                            • SHA256 e64db7d624cce739329009d4afcd0234983b46ff1143f44407bb1cc8d575ffaf
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            532219ee-5518-4f6c-8b12-068c7a6a255e.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\532219ee-5518-4f6c-8b12-068c7a6a255e.tmp
                                            • Size 27KB
                                            • SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            746955d2-5885-45f1-a735-e4dda81c0ba0.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\746955d2-5885-45f1-a735-e4dda81c0ba0.tmp
                                            • Size 414B
                                            • SHA256 7043bb4e8e750aa7411d513b2717ca115a90de8ede6e03af75b222506d91e226
                                            • MD5 SHA1 SHA512 TLSH

                                            8ef92e39-7d95-48b0-a6d8-7b37e6b9c961.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ef92e39-7d95-48b0-a6d8-7b37e6b9c961.tmp
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512

                                            LOG.old

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                            • Size 328B
                                            • SHA256 46873802038ac5422e053bf6c9852ac3ec53e778f4601225c9495f4d8bdd8a03
                                            • MD5 SHA1 SHA512 TLSH

                                            f_000061

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                            • Size 70KB
                                            • SHA256 15c342e3ae0f08ebc576110fb3ef40444f50f54710e6f0200acd8e6eae067180
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000062

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                            • Size 422KB
                                            • SHA256 5bc818ddc916c7d0f77e1752a119d1c287fa357341f784e912332d112a43bb92
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000064

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                            • Size 206KB
                                            • SHA256 ae0cda9f40e2931bba02e283e857e0264fadb4bb3a0492a081e552f080838475
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000066

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                            • Size 27KB
                                            • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000067

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                            • Size 78KB
                                            • SHA256 865284da85e79ab520a16ec292a9d0d39e713a89c56a045688cd85df1c8f5045
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000068

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
                                            • Size 256KB
                                            • SHA256 e3e4268545e49178c95c3ce577f482d929b4d3d2529002d227e1e4a4a4179020
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006a

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                            • Size 256KB
                                            • SHA256 c889020f6cf4d8e75a66c8b94f8b945b4e716959ba63ee0e84aef7806608fe32
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006c

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                            • Size 512KB
                                            • SHA256 2ce14807456d9567337ed7cef963905cb0267568af3a4435fcd075005da39eff
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                            • Size 16KB
                                            • SHA256 ea74aeb9bbc1fd7d71b911d911108b192c03a4422bc3078ae67ab84d4bea9152
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                            • Size 57KB
                                            • SHA256 7c93cb1e10c47d28da8661c0323da712931ee8c6857a5590b4848920db34ed05
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000070

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                            • Size 68KB
                                            • SHA256 70d0b11871b5f875b4d204796a763ed79c861adae284c22a14cee87dabde9da0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000071

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
                                            • Size 49KB
                                            • SHA256 bcddd4ef50d0090ebd890305f46b553d48a2712cf1df84d6feb559aa0bc46163
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000072

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                            • Size 17KB
                                            • SHA256 974256cc9b1a3cff925ab6340083f2483244dea264c854de8a4cd94f0f5ff7ae
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000073

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                            • Size 60KB
                                            • SHA256 2b1541aabd1a3ac9704f5d8359bc9c6c310c76cc712cebc5d0f7309ba75395c4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000074

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                            • Size 20KB
                                            • SHA256 e3d8bb1ec1e6180db24b724f90dbaef242a70a7121cfe3f5b73709e750653532
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000080

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                            • Size 25KB
                                            • SHA256 f79f3210c8ea2f38dba903a25244aa477d32a844719af00fb6cf0bb994156213
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000081

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                            • Size 37KB
                                            • SHA256 b1ea481227f44031a809b7e40e81ec95be051a8c5d54dfcd287e61997bb5f851
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000082

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                            • Size 74KB
                                            • SHA256 4391ca11f13cb4b0f39d1feff7f50f5512aac3b3220c18fa349b047b713c3f82
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000083

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                            • Size 47KB
                                            • SHA256 f274e45839f74090fb7c2c96f6c480ccc937b5da7f258601351d3aaf29b2efd7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000085

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                            • Size 41KB
                                            • SHA256 95112701bd9982db76a872c98db62c0467531fb3a20b0d4cb0bb164163b696ec
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000086

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                            • Size 16KB
                                            • SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000088

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                            • Size 39KB
                                            • SHA256 551e0a2d8aa1b431f30242396a8d44a30fb2de437d4d1c2ab8dab02a0ee8502b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000089

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                            • Size 41KB
                                            • SHA256 878a80cc3d4292dab9ec38a333cf43de33aafc6155bcb1983b8b50a1e8b53846
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008b

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                            • Size 39KB
                                            • SHA256 52b5c75037d48de74ed740123e3413e8cd1253d3cd1d1493ffbe2d32cd287ab8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008c

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                            • Size 129KB
                                            • SHA256 f8e78a77b4a38613dee1a67d61b35660ad784cb77487c4e9267f04c8cf68124c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008d

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                            • Size 31KB
                                            • SHA256 ba8f119b13e22b0ae02b8f690d7ac62991a5153946cd0eac4a50c08ed046fe0b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                            • Size 27KB
                                            • SHA256 73b73031a20f6f14583596f09b55d5642b38bdefe3f6c962d39dbe6b57e6456c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00008f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                            • Size 32KB
                                            • SHA256 7292a0cad41824ce15f11105736c947109822cab7d0155fcaab4f9470c50dead
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000090

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                            • Size 60KB
                                            • SHA256 d03a5d74bd27162314529c2b933c4ef19ed08fcc7dbc3e1fb5a96fd0b5c67e5b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000091

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                            • Size 47KB
                                            • SHA256 45c09e06d9bff0dd7d41b2a2abbb461bfe131bfb993bb272dda99c52fd27e697
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000092

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                            • Size 50KB
                                            • SHA256 25464fa94320cbd5a0d033e30dcd0c68d9097e8ab8204511ab1f8b63afc373d9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000093

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                            • Size 50KB
                                            • SHA256 2c9f10c3f43736a8ebc12469cc3987b3af0b656b0faa8d3b902844cfcb700067
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000094

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                            • Size 48KB
                                            • SHA256 140be41e73e57bffe07a0d1a1dc5b2293e3d86de2da1346c6f8ff3cf4024642f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000095

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                            • Size 33KB
                                            • SHA256 f756265f5d56e4a947b05dd86c36f5e3dd0b9e226116a707a228783e32f46973
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000096

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                            • Size 42KB
                                            • SHA256 0f8544fd44eb7e26c42e6161242b3e4228a8a6dbafe893bd4a8372ad1aff7e45
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000097

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                            • Size 86KB
                                            • SHA256 fe4a5954a7a9c94e7fcfd3e2f417528800e668fbb97b4c2908a8843cc69d99c7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00009d

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                            • Size 17KB
                                            • SHA256 8c4a43a7349696d083123ec643b4b8e793d1441c03642cd82d9b692a8aa8af2d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00009e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                            • Size 21KB
                                            • SHA256 1192bada348367ea0751a6d398d37bab749f7db73781bf7283e88a8a0bdbac74
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00009f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                            • Size 22KB
                                            • SHA256 6c77576751ba230ed4fcee0be0f4b3427d853518b7d6a4db7abfd4f4fc2d7667
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_0000a0

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                            • Size 45KB
                                            • SHA256 d570a23525af7685c00b531e7b18c4368645b5fcf5eb2eb9c35b6589488a5d50
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                            • Size 5KB
                                            • SHA256 5b5fa5af878907ff78ced0599bdfc5b103239c94495304cd5dc386790acf317e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                            • Size 3KB
                                            • SHA256 8cc28fe278cb353af2d24c664d25e532645446dd34656953a6b9c71289889c9d
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 3KB
                                            • SHA256 43d95e43ec0d7fc65a508f19dca2328ffd70fe5dff48cf3d398ed04061e571da
                                            • MD5 SHA1 SHA512 TLSH

                                            e6cf6faf-024c-4ef9-8d70-1b3a9393a896.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e6cf6faf-024c-4ef9-8d70-1b3a9393a896.tmp
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512

                                            85e801c8-286c-4ece-8bdd-c1d3f44fa16a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\85e801c8-286c-4ece-8bdd-c1d3f44fa16a.tmp
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            a315d591-a8d2-4e29-b0c6-8676f26192cd.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a315d591-a8d2-4e29-b0c6-8676f26192cd.tmp
                                            • Size 40B
                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                            • MD5 SHA1 SHA512

                                            e3777d46-de4b-4dff-9092-92b59dc37f45.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3777d46-de4b-4dff-9092-92b59dc37f45.tmp
                                            • Size 4KB
                                            • SHA256 6bc8fa381dc10be20c8fc0a42d3567fe7dc6c11691c66ff1a68c8a58956f60b8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\14937643-f613-4150-a5ae-90bd45695723\index-dir\temp-index
                                            • Size 1KB
                                            • SHA256 e74e915275d9997f38396a0317578c827537cb68210620584da7ab18bdfba4ce
                                            • MD5 SHA1 SHA512 TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\14937643-f613-4150-a5ae-90bd45695723\index-dir\temp-index
                                            • Size 3KB
                                            • SHA256 d8dfb7fdcddc6a38348f230fdca04891791627130dac8fd2cb103dd8a85d4029
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\14937643-f613-4150-a5ae-90bd45695723\index-dir\the-real-index
                                            • Size 1KB
                                            • SHA256 33bab88dd7727cb3ff33026978b3ffdd77349b008b03aae74d058cad161e3fcd
                                            • MD5 SHA1 SHA512 TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a2e240c3-e49f-41d8-a22d-f6b607c24f1d\index-dir\temp-index
                                            • Size 72B
                                            • SHA256 3c598a0278c719e05c71a99ce65a036b801a75a6e4dcc5129029d361f934c620
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a2e240c3-e49f-41d8-a22d-f6b607c24f1d\index-dir\the-real-index
                                            • Size 72B
                                            • SHA256 54f8efd4aa1b118b9569fe934656a47d9661bf03b9e22ed9e71a5f0d9429a140
                                            • MD5 SHA1 SHA512 TLSH

                                            index.txt.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                            • Size 371B
                                            • SHA256 276f4aabd5b981ad16fe81ec0f7f3e698d85be8ace0caaf6d1c18386fc25f0a9
                                            • MD5 SHA1 SHA512 TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                            • Size 72B
                                            • SHA256 f0eb199a6e506292cde98c0524147aad7e5c3bdea6f51bec94fa80fe8de6bb4a
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 48B
                                            • SHA256 f5b58e14ef251d35989141eed2b6efd80c11cb0db910901f7c36ef4b6f3a91d1
                                            • MD5 SHA1 SHA512

                                            CURRENT

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                            • Size 16B
                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                            • MD5 SHA1 SHA512

                                            sync_diagnostic.log

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                            • Size 24KB
                                            • SHA256 a020f3a4e440403c3abb2ce08f49fb0b3cb758b58c689ec01f6b20f0ba2bc47d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            MANIFEST-000001

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                            • Size 41B
                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                            • MD5 SHA1 SHA512

                                            fd8059e8-fd6a-4a8a-9854-568c79f50024.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd8059e8-fd6a-4a8a-9854-568c79f50024.tmp
                                            • Size 13KB
                                            • SHA256 57e6337fba70f48387147b14bac04811bafb9717540459913cf6105758376a6d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            e7af970b-3fe9-40ca-b034-16f275f5911c.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e7af970b-3fe9-40ca-b034-16f275f5911c.tmp
                                            • Size 26KB
                                            • SHA256 15b026566d59dec18705c9066ce60bb647602d9bcd4f8073d996fbaa0c504ee2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Size 2KB
                                            • SHA256 8af7643f49c63a3b0e1f345de2a548388d09eef7d25db73a207c62116df63b0d
                                            • MD5 SHA1 SHA512 TLSH

                                            memory/2124-238-0x000001D3C3EE0000-0x000001D3C4EE0000-memory.dmp