Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 03:05

General

  • Target
    http://aselsan-system-com.pages.dev
  • Sample261024-dln5csft71
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 35 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://aselsan-system-com.pages.dev
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1800
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff84cb6c188,0x7ff84cb6c194,0x7ff84cb6c1a0
      2⤵
        PID:3004
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,1819865878471839645,11838618906113985634,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:3
        2⤵
        • System Time Discovery
        PID:452
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,12196051291711273604,1344130299258092527,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
        2⤵
          PID:4740
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,9656248044351845155,6350348628181203811,262144 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
          2⤵
            PID:1736
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,11201876280842930681,14983452325027520175,2097152 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
            2⤵
              PID:4700
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,16948718617219415592,6231306303484278865,2097152 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
              2⤵
                PID:2444
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,6527624433885842162,17981376889606598683,2097152 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
                2⤵
                  PID:1940
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,16011242110283081526,7701542887443801496,2097152 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
                  2⤵
                    PID:1984
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4892,i,1038162269181102463,3427605800329595541,2097152 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
                    2⤵
                      PID:4840
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,14603434852802892528,14784006110611086684,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
                      2⤵
                        PID:5064
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,17366428294492598085,18007361444714553633,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
                        2⤵
                          PID:1776
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,3470625559771263178,9270232145049820003,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
                          2⤵
                            PID:4656
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,3470625559771263178,9270232145049820003,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
                            2⤵
                              PID:4568
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,15243165729278720063,17839056275358010603,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
                              2⤵
                                PID:4824
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,17952028581979944452,3070486610305900203,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:8
                                2⤵
                                  PID:4852
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,4649720853255040165,1714986915925699453,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
                                  2⤵
                                    PID:1260
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,14071088328749488586,2859859510711689766,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
                                    2⤵
                                      PID:2832
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,1545987103975926067,2648591677595321166,524288 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
                                      2⤵
                                        PID:2092
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5408,i,9067558608175139054,17116845282368829646,262144 --field-trial-handle=2204,i,18160027091266769462,4475424595493227560,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:4596
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:2904

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            14d20755-e323-4a91-9039-91d42ebf31e0.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\14d20755-e323-4a91-9039-91d42ebf31e0.tmp
                                            • Size 18KB
                                            • SHA256 4697ef43ee3337e41de760709a78f1c2486ddcd4c467cf3d6177115fd2ba7a5c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            83010f97-490d-456e-b61a-eea86e1a8cc1.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\83010f97-490d-456e-b61a-eea86e1a8cc1.tmp
                                            • Size 26KB
                                            • SHA256 322a09e9db0e87a33269f330656473b492e02fabdd7521f9019556c8678fb9d4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            bc85086b-de16-4351-9eb7-fb5e1df7339a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\bc85086b-de16-4351-9eb7-fb5e1df7339a.tmp
                                            • Size 105KB
                                            • SHA256 73d0e97f18eabd66ced5f78af8d0ee3a36d197f120279f6fe22862877514d939
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
                                            • MD5 SHA1 SHA512 TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
                                            • MD5 SHA1 SHA512 TLSH

                                            0e6c7760-727c-4a9b-be05-9efd504fc610.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e6c7760-727c-4a9b-be05-9efd504fc610.tmp
                                            • Size 10KB
                                            • SHA256 737ce7f1cb1007248727587e4a6390d89051ba081dd38da82adf7409d60d0fc3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            390ba78a-2d7a-4984-8466-7f99972c7da3.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\390ba78a-2d7a-4984-8466-7f99972c7da3.tmp
                                            • Size 10KB
                                            • SHA256 66bbd75912b48e2180b2b4b65d18cb221ba171d5acbf1a590109587c96cd260b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            7ec8e0d2-1221-4d44-b088-105a523e6430.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ec8e0d2-1221-4d44-b088-105a523e6430.tmp
                                            • Size 27KB
                                            • SHA256 a5bb0026fd2ec10dc9558711a7295b514ff1f07d06b6efc954e90a9fe3a0e0e9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            81119b60-51f8-43e1-b129-0c92a9e5c717.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81119b60-51f8-43e1-b129-0c92a9e5c717.tmp
                                            • Size 10KB
                                            • SHA256 14b25962405e4905cc15a28c7e6db297dcd2bd2ac77b1401a3fadb0a32fef23c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            LOG.old

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                            • Size 331B
                                            • SHA256 3debc7521b269e9d8f7144a2b57f75687cd478eb74afd614c67073b6da922a32
                                            • MD5 SHA1 SHA512 TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                            • Size 3KB
                                            • SHA256 ac316e4ce71e37aec78e7b660a028b6141a584ed1a25126b2882b46f7721c9d0
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 3KB
                                            • SHA256 a85e51ccbada8f4816b3fae60afdc905726800ab4dc14d98c1096ce88c804212
                                            • MD5 SHA1 SHA512 TLSH

                                            b96b3544-86a8-418f-97f3-dd1303e076a1.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b96b3544-86a8-418f-97f3-dd1303e076a1.tmp
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512

                                            7e1c194a-3d50-415d-9826-ec678ddcfcab.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7e1c194a-3d50-415d-9826-ec678ddcfcab.tmp
                                            • Size 2KB
                                            • SHA256 577de9880e542c4e0a51580c53ae01dbd0f2467041ebe932bd214b8ca3423123
                                            • MD5 SHA1 SHA512 TLSH

                                            911f8254-03f9-4ceb-a9f4-b12d28aa7f19.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\911f8254-03f9-4ceb-a9f4-b12d28aa7f19.tmp
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            f51e927d-9b5a-470f-8250-0d9cb6703e3d.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f51e927d-9b5a-470f-8250-0d9cb6703e3d.tmp
                                            • Size 111B
                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                            • MD5 SHA1 SHA512 TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                            • Size 10KB
                                            • SHA256 567fccd02101732ac477a1c9c462f68c760aa6aac53d289b36d5c7c6a25d99d9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            sync_diagnostic.log

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                            • Size 4KB
                                            • SHA256 d0c90f3d1fe3af96c863f45fa37feec9d36cfaf4af5e81d8a2579ced7619d700
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            a095443b-c80c-4da4-b2cd-97b1f6e9a16a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a095443b-c80c-4da4-b2cd-97b1f6e9a16a.tmp
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512

                                            a441e5d7-db6f-4989-a622-6136e2a1e98a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a441e5d7-db6f-4989-a622-6136e2a1e98a.tmp
                                            • Size 9KB
                                            • SHA256 24c46586d2377267dfe90d6befb3a1c56dd47f77e574a37b9e2acefd04dc967c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            d8c5b77c-45d1-4ff7-ba6f-083c06e56b48.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d8c5b77c-45d1-4ff7-ba6f-083c06e56b48.tmp
                                            • Size 70KB
                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            2125fdbb-52e5-4230-b373-9c7228562f68.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2125fdbb-52e5-4230-b373-9c7228562f68.tmp
                                            • Size 22KB
                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            RevisitationBloomfilter

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                            • Size 392B
                                            • SHA256 b9abecaf7e1b77f39c4c9ff145686d61e865be92f864edda93fc7d9674d4f049
                                            • MD5 SHA1 SHA512

                                            bfe66124-b62d-480c-96eb-e9e5abc016bc.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bfe66124-b62d-480c-96eb-e9e5abc016bc.tmp
                                            • Size 8KB
                                            • SHA256 72985bde94422f1fa748d307eb786bb51ddfecc3a7c33c212a0489c43e1b00d7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            ca3efeca-8e65-4cd3-a990-6e29399e3676.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ca3efeca-8e65-4cd3-a990-6e29399e3676.tmp
                                            • Size 8KB
                                            • SHA256 ce028432908c5d0354bf6ecb978a07cb82a132d697f33e367a96396e7c1b01e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            cd323199-7756-44ee-9629-e5b15081a16e.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd323199-7756-44ee-9629-e5b15081a16e.tmp
                                            • Size 392B
                                            • SHA256 75e6f442d7f3e36e166e0e59b86db1bbbc2f98a4de40e24c6c875e638a79c5d3
                                            • MD5 SHA1 SHA512

                                            d790fbe9-36f0-418a-8789-3fde98124ca0.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d790fbe9-36f0-418a-8789-3fde98124ca0.tmp
                                            • Size 18KB
                                            • SHA256 64a05a31ec9a5ffc32aaefcf78d27baf08e9b5a38f48b1913a7336d19fc62593
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            5f15e724-26cc-498e-ba26-b59267e29285.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5f15e724-26cc-498e-ba26-b59267e29285.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512

                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Size 2KB
                                            • SHA256 9ef188d9c1aefe26f5d9fab29683946c9eabccc0cab598a7cde8da407d42ed7e
                                            • MD5 SHA1 SHA512 TLSH