Analysis

  • max time kernel
    148s
  • max time network
    138s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 10:53

General

  • Target
    sample.html
  • Size 83KB
  • Sample261027-mza94adc76
  • SHA256 57062084e3c38942ef55c90fe0fc50b0cd55a0b3c098af6f078762d747277520
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1296
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff9f1ddc188,0x7ff9f1ddc194,0x7ff9f1ddc1a0
      2⤵
        PID:4176
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1516,i,6184217313501982440,674049314861607842,262144 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:4560
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,11336759655491252132,14847749943425551826,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:11
          2⤵
          • System Time Discovery
          PID:3324
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,9409264784279299689,11247785929656295551,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:13
          2⤵
            PID:2612
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3332,i,16070380992180179384,3459079700942140291,2097152 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
            2⤵
              PID:2828
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3376,i,8539534677930841629,17367519050971651456,2097152 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
              2⤵
                PID:2924
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,15026062240316477004,12109544249880897177,2097152 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
                2⤵
                  PID:6036
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,3624915440531138760,15840653925031279837,2097152 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:9
                  2⤵
                    PID:1472
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,5503983211200150725,16593902072361312841,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:12
                    2⤵
                      PID:5700
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,12993040022103052407,4117337541512782023,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
                      2⤵
                        PID:1080
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,5987935434018207159,11151876867443743153,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
                        2⤵
                          PID:5900
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,15839257465348723189,14146560071358212611,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
                          2⤵
                            PID:4792
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,15839257465348723189,14146560071358212611,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:14
                            2⤵
                              PID:4776
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,10773940548209413772,3595340846440006868,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
                              2⤵
                                PID:4448
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,13992957244266900181,9282801859572086386,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:14
                                2⤵
                                  PID:912
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,6427064132767480364,17801202524409201324,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
                                  2⤵
                                    PID:2780
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,14007848040363043094,1398522476497347361,524288 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
                                    2⤵
                                      PID:2256
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6628,i,13929413357525548563,3078082466985333477,262144 --field-trial-handle=2272,i,10164132326577897942,4703580914668608337,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:10
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2608
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                    1⤵
                                      PID:1512
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                      1⤵
                                        PID:5344

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            1d05c4e0-31a0-42dc-9dd3-b2d666627c47.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d05c4e0-31a0-42dc-9dd3-b2d666627c47.tmp
                                            • Size 33KB
                                            • SHA256 a562dff61809496edfd49cd04605d5f5d994b3149418ead541aade0827f0df5f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            3c921db7-dd7d-4009-864b-a44f5bdcd35c.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c921db7-dd7d-4009-864b-a44f5bdcd35c.tmp
                                            • Size 36KB
                                            • SHA256 55c035255305a726092ff003f1908cc6df9ba52fd96eddc15cdc71322f338f64
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            4a94ec09-9ef4-406b-8ce3-a740e827b03e.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4a94ec09-9ef4-406b-8ce3-a740e827b03e.tmp
                                            • Size 38KB
                                            • SHA256 e562c1342a8f2c5d482ea170536876760ea2fbea46862b945b4e565da7d3f63a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            9383949c-3650-4bc5-af43-49f4dc3bc20b.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9383949c-3650-4bc5-af43-49f4dc3bc20b.tmp
                                            • Size 37KB
                                            • SHA256 51c648df2da3ad7d92c324b4f8c51232086e0b93423cf0da081b4bc204008673
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
                                            • MD5 SHA1 SHA512 TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
                                            • MD5 SHA1 SHA512 TLSH

                                            01708318-2b64-4d70-8ab6-9b6c498fa723.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\01708318-2b64-4d70-8ab6-9b6c498fa723.tmp
                                            • Size 11KB
                                            • SHA256 73610926e17a7289a043f5c409723e8919c93322df8b2e08ba3be71cdb5f1bd7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            0e8a7e1e-af77-4f0f-a80e-436d12be3566.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e8a7e1e-af77-4f0f-a80e-436d12be3566.tmp
                                            • Size 23KB
                                            • SHA256 da372b82d38bd371ef4e3e71d568bf47a0d43f0843a617414a344f12398edc94
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            6899f979-9c59-40ba-979c-7441608f4144.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6899f979-9c59-40ba-979c-7441608f4144.tmp
                                            • Size 70KB
                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000057

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
                                            • Size 1024KB
                                            • SHA256 0104431e548a91f8cf36feea23aecb7c842fa1b262c82e5a4dee631069f19875
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000058

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
                                            • Size 461KB
                                            • SHA256 30e83fd0d6fdac209927ce8c91161e512eb619e99f8cc285141b9bb502adeec4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000059

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
                                            • Size 1024KB
                                            • SHA256 de4bacf37cb302e2894f36c5e72881b1424b97ff2b032a9848c2e66d37eb7f93
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00005a

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                            • Size 1024KB
                                            • SHA256 4c33c92894ba3fad85af7a361588dd945e4468ca750c4afbedc69af3b01ccdba
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00005b

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
                                            • Size 1024KB
                                            • SHA256 ba49840a07e0bbb84acc661491f8b718613733062c8a5d1ff3fd4681bc0e2985
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00005c

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                            • Size 1024KB
                                            • SHA256 1d409f7ee7a02f72f0ec3eae9f3d34665e4623ed99126110cee859475cd7a37a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00005d

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                            • Size 1024KB
                                            • SHA256 b45b4ea6b8275943dd13164b828174a6ec35d2596954ccd969d9432302a01454
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00005e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                            • Size 1024KB
                                            • SHA256 e87ab31208edabc6914f9080a2663214a925d070be30b899067e428d8b5250f4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00005f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                            • Size 1024KB
                                            • SHA256 1c47f178a3df674b19e7b00e05c0a8ef6c150621d8720561f4454b7b27b165f2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000060

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
                                            • Size 1024KB
                                            • SHA256 953990e86cc9391e1f279d4599d24a4afb5785c1213be20991cc5bd35c8bc175
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000061

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                            • Size 1024KB
                                            • SHA256 4635b1cffd9d466c19f9f0660a3d12d93d3b518c4fddf4af0b6eb9072afd27f0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000062

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                            • Size 1024KB
                                            • SHA256 593c4110adf774cac703d0f5059ac145876926c224d9b2b73a6644b34d2e6f40
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000063

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                            • Size 1024KB
                                            • SHA256 8fe580929b1ea3b2bc2e085c7b539196f245a3b2667778bfa0ff7779516c7b99
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000064

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                            • Size 1024KB
                                            • SHA256 88b3966bc856074b0c94d2a9cb2e1802dda2319486ea209728fcb248ddff9b76
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000065

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                            • Size 1024KB
                                            • SHA256 82e752092694ba8300510d91a5092903ac5761f33f9e72cd781ae8ac53f9f857
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000066

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                            • Size 1024KB
                                            • SHA256 a8f382538549a5926f5c0b65ff934635f2e9ee0f78ac46010075f3240631a9c0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000067

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                            • Size 1024KB
                                            • SHA256 5eb8182d6f836350ef4149eee841b4c1b4c499b422aa63a2dd7e4561f8b4f9fa
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000068

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
                                            • Size 1024KB
                                            • SHA256 2af9af04aa3298cc8843c8e9bb2ce07f329b2418159283d0bcda0be6cf37ae88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000069

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                            • Size 1024KB
                                            • SHA256 b6ffac498b30baa7c93376ee809a0b2349eb6548df7b635960ea0607d67ad918
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006a

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                            • Size 1024KB
                                            • SHA256 87df21a16ab3a6699112f4bcf3a8022649ea85be7b822c90e9629ab7b1f213f2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006b

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
                                            • Size 1024KB
                                            • SHA256 d15c43fb17defe8a6401ac3174bd3006cf96a9f0d0dce946ed19b429a7285afa
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006c

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                            • Size 1024KB
                                            • SHA256 b910fa7298e6ba7ae05750b61b7199c32acfb3d3e74a6923b9cdf0efc0e0b405
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006d

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
                                            • Size 1024KB
                                            • SHA256 29e13b5671e8c8c464d798cf5fdc5b9f4a592e0dada7685b8c8d0536479c55e7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                            • Size 1024KB
                                            • SHA256 75f2ead9e0d05562931616be029a2f91cb3f5070c4962af6251d8db4237d2c4c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                            • Size 1024KB
                                            • SHA256 2cb7a7723e5447622d1341a99741a1b7fe77df8c8752ccab304fed5653aecffc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000070

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                            • Size 1024KB
                                            • SHA256 0cb66b96158d3d6a1fc163a210a36d090acf885cf3947d7d92fd55544c052123
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000071

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
                                            • Size 1024KB
                                            • SHA256 766444e2a09b6f7be3f4f31156babd88ded95185653605152308fdaa3d267a4c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000072

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                            • Size 1024KB
                                            • SHA256 fd22bcbeaa29c45e7a02090bf65fa1a261f764b2a62cae9d3b967f112ae21652
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000073

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                            • Size 1024KB
                                            • SHA256 2e6cae6d61d5d920b0a53f8d32987857bec33fd9ca8d83482feaf21ea16fae2a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000074

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                            • Size 1024KB
                                            • SHA256 3bc2d102f2807c25d7212ed1ba06d35f9b5a457e57acfab213a72a9bcbe10836
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000075

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                            • Size 1024KB
                                            • SHA256 10e471f0f5f07ce388f11ae084910cb30271b6cb228ce97d9d970355fd907834
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000077

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
                                            • Size 1024KB
                                            • SHA256 f027a326ba4f88697ffff1878f9a21c7feadb1c4ea0124302b5cfd0a914e755e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000078

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
                                            • Size 1024KB
                                            • SHA256 20cc6b752b5701ed2b5df28c45e60d7caf4c46af8bd8e5b80536b351075182a7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000079

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
                                            • Size 1024KB
                                            • SHA256 854dc853cc296e80e121df3c6830ed9e6e4e5649b958ff1abe997266ff812496
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00007a

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
                                            • Size 1024KB
                                            • SHA256 ac7028cd6948156ebba53a30ffd3ce0119fed6bf80ab596e25b57d7f4e0a7924
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00007b

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
                                            • Size 1024KB
                                            • SHA256 f408463a314c8ebbc5f88ed2e32df9d48790202b54089b6658d219e41c3b741e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00007c

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                            • Size 1024KB
                                            • SHA256 58bf0f9ccd091a7b046593238f21a9afed84ee61375cf87336e359f575a2a0ae
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00007d

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                            • Size 1024KB
                                            • SHA256 009f9cfe8937bab3d2536221bc8bc84dce61f1c6b5978fe912cf2ce5439337ec
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00007e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                            • Size 1024KB
                                            • SHA256 723a233cdc0ee8a1230df66dad5940bf1144b12dc407f21f4ea2f67456937355
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00007f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                            • Size 1024KB
                                            • SHA256 cf3198485ac03cab88351b10019369f54d066b47358d0587cdb12803ec9e751b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000080

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                            • Size 1024KB
                                            • SHA256 1af78665ca9ff203662c282f1521188b05bc934e427825232e7fd459bd7ebbc5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000081

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                            • Size 1024KB
                                            • SHA256 b39015e0cd4a9a14563dca4df0bdaeec19a1a9651a3ffdcc57c7409553a96f62
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000082

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                            • Size 1024KB
                                            • SHA256 2119a192a9866a63e8946993e159458af679ca7c8cc0e44a84ff4d8d1bc29682
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000083

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                            • Size 1024KB
                                            • SHA256 0fcd62bc5abe3e3867b6259489102097bf178f66ddc46f65fb27ee945c7dab7e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000084

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                            • Size 1024KB
                                            • SHA256 70771f9fea1bca5d322da29e0b3086ccfde5c119107006fc45db02ba3387df7d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000085

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                            • Size 1024KB
                                            • SHA256 a7d7195076015e684475e065f3c0b4998e5a909bb003331f4a5ab52fe0b04211
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000086

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                            • Size 1024KB
                                            • SHA256 58f5f396c2f52057583b4af161bf844868de57d9c787991c11bd3afe1fd9e04c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                            • Size 2KB
                                            • SHA256 50cba9ade7d960297c24e6b84576d29d0c34dd6c49b06663fd79840f75056a91
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 2KB
                                            • SHA256 7be0c5273982fa211a201525edcff19c5f7fd5e5e1810f38e1f283878a5aa14c
                                            • MD5 SHA1 SHA512 TLSH

                                            b56baa48-94ef-44d6-af87-570ce567f43a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b56baa48-94ef-44d6-af87-570ce567f43a.tmp
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512

                                            1e7d0432-ffc1-4e49-9405-b10e2aa23c69.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1e7d0432-ffc1-4e49-9405-b10e2aa23c69.tmp
                                            • Size 40B
                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                            • MD5 SHA1 SHA512

                                            85bbe3cb-9111-40b8-8074-7564bdd89aae.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\85bbe3cb-9111-40b8-8074-7564bdd89aae.tmp
                                            • Size 1KB
                                            • SHA256 86d88bad36dee54917a401dbc2fed21f249554b2d9c2d1370b4180b5d75725d4
                                            • MD5 SHA1 SHA512 TLSH

                                            9d1dac24-7779-4a5f-ab2e-53380288a4ad.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d1dac24-7779-4a5f-ab2e-53380288a4ad.tmp
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            CURRENT

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                            • Size 16B
                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                            • MD5 SHA1 SHA512

                                            MANIFEST-000001

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                            • Size 41B
                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                            • MD5 SHA1 SHA512

                                            c1f6f535-57be-4e1a-a092-bca120b5a73c.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c1f6f535-57be-4e1a-a092-bca120b5a73c.tmp
                                            • Size 11KB
                                            • SHA256 bd585a96236a781ed11b4af68e45f5a51813c7bc8963e8a65bf63cb159f8f179
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            c9a4b963-8a8e-43e6-a2ef-c676cb068676.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c9a4b963-8a8e-43e6-a2ef-c676cb068676.tmp
                                            • Size 11KB
                                            • SHA256 00bf3a6809353f95b33ce038e71cd8b8865f0e0aadc2b13e22465f3179d3fef4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            97ecf02b-d6ab-4c56-a1b4-404aeb365b3f.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\97ecf02b-d6ab-4c56-a1b4-404aeb365b3f.tmp
                                            • Size 22KB
                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            OperationConfig

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                            • Size 3KB
                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                            • MD5 SHA1 SHA512 TLSH

                                            d3aed19d-86ac-4a0b-b875-e44143472ade.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d3aed19d-86ac-4a0b-b875-e44143472ade.tmp
                                            • Size 40KB
                                            • SHA256 17b81c08ee1822c8e9d42abcf553345ef9747d0e3f631bc9a99e1f06e1b486b2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            d7c19a23-d529-4340-bdbf-20d203d99856.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d7c19a23-d529-4340-bdbf-20d203d99856.tmp
                                            • Size 33KB
                                            • SHA256 b7b793b1733342daef8a557db8fe5f55ae41b862ae431766b77efdc3d243ea41
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            27f13689-375d-4777-8071-6143955b510e.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\27f13689-375d-4777-8071-6143955b510e.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512