Analysis

  • max time kernel
    148s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/10/2026, 00:09

General

  • Target
    https://issstecitas.com
  • Sample261030-afh5datydv
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://issstecitas.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4448
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9ceb2c188,0x7ff9ceb2c194,0x7ff9ceb2c1a0
      2⤵
        PID:2280
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,17301693443291720966,15368443143114377361,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:3
        2⤵
        • System Time Discovery
        PID:548
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,2506884849942669597,10063544830426555942,262144 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
        2⤵
          PID:2212
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,12608159536032819384,3739886304833046551,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
          2⤵
            PID:2072
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,10529689731615257748,5440949802770899592,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
            2⤵
              PID:1852
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,16187472589861682259,17574110154688035111,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
              2⤵
                PID:4908
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,5908910745268722594,15287441657051004880,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
                2⤵
                  PID:1644
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,11666688244713614503,2227358997458417767,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
                  2⤵
                    PID:1284
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3648,i,8252963088436997552,5398876367310478694,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:1
                    2⤵
                      PID:5028
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,13234270763652258914,4055286853685638671,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
                      2⤵
                        PID:2932
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,12812991467223939505,5581933169314706765,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
                        2⤵
                          PID:2020
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6048,i,14781415094563119470,4708629809672259556,2097152 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:1
                          2⤵
                            PID:4232
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,7686774489309563061,15481952962657268945,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
                            2⤵
                              PID:4820
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,7686774489309563061,15481952962657268945,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
                              2⤵
                                PID:1212
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,960601673430701550,17630392772405535646,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
                                2⤵
                                  PID:4048
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,3708131363530124273,10783176975388032039,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
                                  2⤵
                                    PID:4024
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,10212194669197519788,13490028665238772303,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                    2⤵
                                      PID:2180
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,13402056132416848339,14333236570724993962,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
                                      2⤵
                                        PID:880
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2052,i,2058835599156388708,17572520546152582861,524288 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
                                        2⤵
                                          PID:1092
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7100,i,5938471179963690444,10988221696650008736,262144 --field-trial-handle=2160,i,3001979887283464035,4886689987020684481,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:8
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:4368
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:5004

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              3dcdb926-7d8d-4687-b3a1-4c00852a6cc1.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3dcdb926-7d8d-4687-b3a1-4c00852a6cc1.tmp
                                              • Size 18KB
                                              • SHA256 bcb43b5367680c1f76cdb6bccddac6ad7c605944ed53f7298280bcea6dc87ff2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4e865722-5a29-4746-9133-dd637a43e060.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e865722-5a29-4746-9133-dd637a43e060.tmp
                                              • Size 8KB
                                              • SHA256 69446469a42a4decc0bce6fc802f256a4ec25b4eedc5586031694668446a26c0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9806dae2-88b0-4c1b-be8f-1e10176e3c05.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9806dae2-88b0-4c1b-be8f-1e10176e3c05.tmp
                                              • Size 26KB
                                              • SHA256 e9a3e93654e29b8dce37bbbd7aca1e37ac797ae96aee3ede9259846c1fa4e8b0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
                                              • MD5 SHA1 SHA512 TLSH

                                              61120f7b-72ae-400d-8b13-f6e32383e90d.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61120f7b-72ae-400d-8b13-f6e32383e90d.tmp
                                              • Size 10KB
                                              • SHA256 06c92a202f47e6c1c1fbd7edf5c2763fd4db63e68bb57c8a319053b25c0bd918
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6f18cc1f-cc58-4504-9432-8f44b2bc186d.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f18cc1f-cc58-4504-9432-8f44b2bc186d.tmp
                                              • Size 27KB
                                              • SHA256 c0632baacef1adead868b4c46248738d2b7bd3da0b86ed5d9c5f48a38b797174
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              82907e90-a602-40a6-a337-c5fa1c38c9b1.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\82907e90-a602-40a6-a337-c5fa1c38c9b1.tmp
                                              • Size 10KB
                                              • SHA256 d5ace322dfb23fc58c7cdb632827aea70a1aed299ac42c64ebc1c380b2a58dcb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              LOG.old

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                              • Size 334B
                                              • SHA256 2e9a7302b6e7016d0a0755d91eb125a6d9428ce2050ae7202345a5c4ed00c442
                                              • MD5 SHA1 SHA512 TLSH

                                              f_00007c

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                              • Size 23KB
                                              • SHA256 47ecc57a70e243404266b91ec8976981475d650d7a3be42584cfe745429e889c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000084

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                              • Size 23KB
                                              • SHA256 f83e9d454488c43da75fe3764665a9efac69c80f7f02fab22449ecbaa15c2b30
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                              • Size 3KB
                                              • SHA256 94ef9d8a6846872c54146dd57e244ed34f45d53630553f829f2e69f12ae4fc73
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 3KB
                                              • SHA256 777fa6debe26c6bdaf92949150b3c34499d2ca3f40eb4a6b785451b0459e53c9
                                              • MD5 SHA1 SHA512 TLSH

                                              ae79bb70-0eaa-46a2-8cd0-152859a33f3b.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ae79bb70-0eaa-46a2-8cd0-152859a33f3b.tmp
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              0def4daa-638b-409f-ad6f-1114ba845c6a.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0def4daa-638b-409f-ad6f-1114ba845c6a.tmp
                                              • Size 6KB
                                              • SHA256 46c67d0e0d183a49a112f2f3dacbbba229dc19e370cbd8ce9896ad9977547100
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              63cbebc8-b0c8-4a42-acd4-aa9e8acd9bc8.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\63cbebc8-b0c8-4a42-acd4-aa9e8acd9bc8.tmp
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH

                                              8922ab73-dd33-4466-a3ff-ef8fa3d98f4c.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8922ab73-dd33-4466-a3ff-ef8fa3d98f4c.tmp
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 4KB
                                              • SHA256 2e7e4a92ac1092bfede084c691c7f7ccc8f02ee4d90a2dce60a3090fc46c1f65
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b8d35981-20f6-4fa7-a61a-c78858c9701e.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8d35981-20f6-4fa7-a61a-c78858c9701e.tmp
                                              • Size 10KB
                                              • SHA256 21d7166abca122aa6c563782199206f13662583a361fe859fc7b62641ceb7c63
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              d92eed25-386b-4978-9ac2-a1397be84301.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d92eed25-386b-4978-9ac2-a1397be84301.tmp
                                              • Size 10KB
                                              • SHA256 10533551ca8233ab4578d72639cfaee041df8c6eae68f3c6f30e69bd14bf73a0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f2889e2b-5773-4c41-8472-ccc484670c30.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f2889e2b-5773-4c41-8472-ccc484670c30.tmp
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9289ebe6-af75-46d2-9ed4-86cdb37b9266.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9289ebe6-af75-46d2-9ed4-86cdb37b9266.tmp
                                              • Size 22KB
                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OperationConfig

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                              • Size 3KB
                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                              • MD5 SHA1 SHA512 TLSH

                                              a05742ce-7546-4d5e-9eb3-be32fba4c94e.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a05742ce-7546-4d5e-9eb3-be32fba4c94e.tmp
                                              • Size 18KB
                                              • SHA256 732ee13b6618d73348b0f132a26684cd988794a60015af3736b1224f418c07ad
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              df0303f9-f740-44db-b8e1-2d67bf75bef7.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\df0303f9-f740-44db-b8e1-2d67bf75bef7.tmp
                                              • Size 8KB
                                              • SHA256 3d01c24fa41186e45e058df2e4c54f126dec259a46d9cb2f268459875454689c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              097b9b61-4f44-4b65-b5dd-5dd65d035245.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\097b9b61-4f44-4b65-b5dd-5dd65d035245.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512

                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Size 2KB
                                              • SHA256 0b82ccf057c291516abdb84da144785038b9a77926a60acecfcc77dac6284efa
                                              • MD5 SHA1 SHA512 TLSH