Analysis

  • max time kernel
    148s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 00:26

General

  • Target
    https://archievegenocide.com/
  • Sample261024-arnt1agy6n
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 39 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://archievegenocide.com/
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3828
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x2f0,0x7ffce155c188,0x7ffce155c194,0x7ffce155c1a0
      2⤵
        PID:1960
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,8553624652058301837,564627451157288709,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:3
        2⤵
        • System Time Discovery
        PID:1092
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,2693874025470336101,10324457719724293295,262144 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
        2⤵
          PID:728
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,12935700014158506338,15228531604839782093,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:8
          2⤵
            PID:1144
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,832918644910309366,10926887486251289992,2097152 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
            2⤵
              PID:2256
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,12171221541608134883,5392628564899605869,2097152 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
              2⤵
                PID:4960
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,13182060328519109058,2717465209192747125,2097152 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
                2⤵
                  PID:676
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,7299643828041686391,7791010366143380167,2097152 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
                  2⤵
                    PID:4864
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3640,i,7022754638409260149,8390055151743607105,2097152 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
                    2⤵
                      PID:4788
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,8405493757127443811,3383137891042181649,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
                      2⤵
                        PID:4628
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,18157165829065418163,3158148677506167117,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
                        2⤵
                          PID:4656
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5824,i,14082379964239265335,6839056187963203148,2097152 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:1
                          2⤵
                            PID:2428
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,4003083852901426066,9880363386182374805,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
                            2⤵
                              PID:3952
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,4003083852901426066,9880363386182374805,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
                              2⤵
                                PID:1160
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3592,i,15249769813130632823,9246653707847161628,2097152 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
                                2⤵
                                  PID:640
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,13778449698833037908,14026557197258857683,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
                                  2⤵
                                    PID:4360
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,15793485323989934105,17231013476391666267,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
                                    2⤵
                                      PID:4544
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,9552307804604327220,18118320792081269051,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
                                      2⤵
                                        PID:1576
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2092,i,14642013120776953910,1280142871111742688,524288 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
                                        2⤵
                                          PID:1048
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6488,i,2458634204298141631,7693561863905332570,262144 --field-trial-handle=2344,i,15001840636141982407,11510748398315510470,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:3948
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:4092

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              3054b91f-acaf-43ce-900f-c237e7764d77.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3054b91f-acaf-43ce-900f-c237e7764d77.tmp
                                              • Size 8KB
                                              • SHA256 828260a768c3ca7a18977959a3fc1b9c7e3058316d1004d6bf4737f9f5a527ae
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3bc7bf1c-a47c-4539-b5d1-b31465cd061a.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3bc7bf1c-a47c-4539-b5d1-b31465cd061a.tmp
                                              • Size 18KB
                                              • SHA256 e44943d2cf43a3237a546b0f991d7e5875e1b60df01c7fc124b9c93026dcdb10
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              66bf070f-bf47-44b8-9d43-828f679dc5b3.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66bf070f-bf47-44b8-9d43-828f679dc5b3.tmp
                                              • Size 26KB
                                              • SHA256 4645f5bbaa01f9cdd4b429270c268e84a1066217b5c660bd6e6094986fb44b17
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7ede1bae-9341-48a8-8646-697523ac85d4.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ede1bae-9341-48a8-8646-697523ac85d4.tmp
                                              • Size 18KB
                                              • SHA256 74b555cce19e34405da17d99613472fbd031b06398f0ff8eba3beae96863cad3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              48397a4b-7c16-4336-b137-0c6eac34636a.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\48397a4b-7c16-4336-b137-0c6eac34636a.tmp
                                              • Size 105KB
                                              • SHA256 7fbf8b23a13854c0c33f9b9cc9b82042dfb881d0f9995938391cf2da54cfb3de
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
                                              • MD5 SHA1 SHA512 TLSH

                                              01fd1fc9-eef4-43cd-a41a-21b411951336.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01fd1fc9-eef4-43cd-a41a-21b411951336.tmp
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              101f2efc-9a75-40e5-8a8b-9f9cf08c775d.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\101f2efc-9a75-40e5-8a8b-9f9cf08c775d.tmp
                                              • Size 10KB
                                              • SHA256 52c14f0816bc966ca29696e9e72e85c3a9767bfc2624e4d8bb4475c54b65ebc4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              75588665-096c-4de8-8f35-33256a94d659.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75588665-096c-4de8-8f35-33256a94d659.tmp
                                              • Size 27KB
                                              • SHA256 145ef7d9cd570089bf810a9b82823bb7ebf2c8c4fc66a5de77935d65a4ef1799
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8b30fe16-fd64-4ffa-bb47-8fb52535ec7e.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8b30fe16-fd64-4ffa-bb47-8fb52535ec7e.tmp
                                              • Size 10KB
                                              • SHA256 1d15eb083eb9c438e7a4d7dcb56a797b5de5225485b7acc79618f6695d48d041
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8fd8f9d0-91a9-4099-959d-0dd599b29072.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8fd8f9d0-91a9-4099-959d-0dd599b29072.tmp
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              f_000075

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                              • Size 39KB
                                              • SHA256 84c122bb5e1b8955e599a855625590f29c5c9f86d0faebd8371263bd596c8d9d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                              • Size 3KB
                                              • SHA256 9d358a9977b6d1724c18af26f7887443a8fc9cfce7d186a8fd9d5ebdc00be2f6
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 3KB
                                              • SHA256 ee36de7ab4bb31662fc6f72320bf9e2ab666577ffad74658cd242aab7ddb5a3d
                                              • MD5 SHA1 SHA512 TLSH

                                              a47de92e-8a17-400e-8588-67b91d8e5751.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a47de92e-8a17-400e-8588-67b91d8e5751.tmp
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              65cab23c-7210-454f-b13b-30906176e8c7.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\65cab23c-7210-454f-b13b-30906176e8c7.tmp
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              a99a154c-3c37-4e76-bd87-21988f400f4f.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a99a154c-3c37-4e76-bd87-21988f400f4f.tmp
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH

                                              b9db69ce-7e89-4e03-b5dd-06faf2f4f389.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b9db69ce-7e89-4e03-b5dd-06faf2f4f389.tmp
                                              • Size 7KB
                                              • SHA256 81f06bf9ae7773cdf0faea84aedd6d5da1a181d44f3a4833f357cef999daf789
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 10KB
                                              • SHA256 4b401d13bdfa3008bd21e809713b89713a1fffef076b9a3dec2c2d042ac619cb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 4KB
                                              • SHA256 2f9feb1cdfb4c3dba55962759e556f7d5e09f614edb8a550489f56522fe31eaa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              ac104415-5404-4e67-bdb5-7f22a9a448a8.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac104415-5404-4e67-bdb5-7f22a9a448a8.tmp
                                              • Size 10KB
                                              • SHA256 c9f5ecbaf0e23b5014c19ec550a6df3f07e615ed5238095fb5bd3177bbfb717f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              54f6a3f6-9e91-41f4-afa7-7ee800f339c7.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\54f6a3f6-9e91-41f4-afa7-7ee800f339c7.tmp
                                              • Size 22KB
                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OperationConfig

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                              • Size 3KB
                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                              • MD5 SHA1 SHA512 TLSH

                                              d8c7b434-bb84-4c21-a27c-60f303f6907c.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d8c7b434-bb84-4c21-a27c-60f303f6907c.tmp
                                              • Size 8KB
                                              • SHA256 81e5eb4b086e2e47ad0f408a672d9bb7248304db781e8ecdd8276ecce3f34ab4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              043f1e7d-b921-4880-9e44-62e0274485fa.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\043f1e7d-b921-4880-9e44-62e0274485fa.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512

                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Size 2KB
                                              • SHA256 816aa348a193062e1017aa8cee0d6d5c91f9fbc787bd2a226c0433b96cc05b21
                                              • MD5 SHA1 SHA512 TLSH