Analysis

  • max time kernel
    149s
  • max time network
    145s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/11/2026, 18:14

General

  • Target
    sample.html
  • Size 314KB
  • Sample261101-wvm8jach86
  • SHA256 43bd5afa3df997ee729b3253581217fb9cd6046798aa8841ead7526086c89a98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 30 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4796
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffce7ddc188,0x7ffce7ddc194,0x7ffce7ddc1a0
      2⤵
        PID:4056
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,220065936842833150,4975394323696286586,262144 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:2
        2⤵
          PID:5344
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,9613895755855036860,7075190500833999655,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:11
          2⤵
          • System Time Discovery
          PID:5148
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,2653687605336374738,11425214826781293624,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:13
          2⤵
            PID:252
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,9848952238038931273,10250940580995149737,2097152 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
            2⤵
              PID:5068
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,11846621795334885980,10124700784779951305,2097152 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
              2⤵
                PID:4476
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,13214948516719016886,6077285420370371612,2097152 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
                2⤵
                  PID:2088
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4412,i,8505421621606842510,11265990485958725545,2097152 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:9
                  2⤵
                    PID:5020
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3824,i,8218953760525613376,1497163182768423082,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:14
                    2⤵
                      PID:5272
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,9757880897511639989,3379207852558335329,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:14
                      2⤵
                        PID:3108
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,17292589032929867618,1039688317060441662,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
                        2⤵
                          PID:3016
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,17292589032929867618,1039688317060441662,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
                          2⤵
                            PID:3292
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,12552998118866633066,7514879412051933795,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
                            2⤵
                              PID:4904
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,18282085575841937460,3183160054912627759,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
                              2⤵
                                PID:2188
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,18419438468300302522,3226829993713825598,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:14
                                2⤵
                                  PID:4948
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,2013801403775100602,6489958495018047444,524288 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:14
                                  2⤵
                                    PID:4136
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5612,i,16115389027607797613,14954429155955229948,262144 --field-trial-handle=2924,i,12058571335367895990,3293811447276206453,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:10
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:5712
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                  1⤵
                                    PID:4392
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                    1⤵
                                      PID:2792

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          147ee5ae-4174-4d2b-ab3b-b3d6b4bae98d.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\147ee5ae-4174-4d2b-ab3b-b3d6b4bae98d.tmp
                                          • Size 36KB
                                          • SHA256 0953b4c10dd4e32720f098581f27a4dd81fb1fdb00981b093782f4a39c3fde51
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          37a901b6-eceb-474a-bbf1-ba1d118e6bf2.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\37a901b6-eceb-474a-bbf1-ba1d118e6bf2.tmp
                                          • Size 33KB
                                          • SHA256 7a32a89432a443506a29de102fd6479cf8b153bc51cedf68b3669236f869698c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          41ab8fc6-fe46-415b-9f95-10070b280660.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\41ab8fc6-fe46-415b-9f95-10070b280660.tmp
                                          • Size 37KB
                                          • SHA256 ffec5b76703058f70a1d008c6d78261d7304a6b9f68d5cf65d5cbd72ebf4aad3
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          5710aa8a-08ec-428d-bdda-1d2a80fba9ff.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5710aa8a-08ec-428d-bdda-1d2a80fba9ff.tmp
                                          • Size 33KB
                                          • SHA256 a717d482421a87ecb86527ae44fc544b0f5164607858438ba2714befc8643f85
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          9ed2efaa-5e78-4fb1-9429-489300585c20.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ed2efaa-5e78-4fb1-9429-489300585c20.tmp
                                          • Size 38KB
                                          • SHA256 96a76fb12c1ea31ed47fdaa7017c695ef9b664abdb0552cf13375dda92797ac0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          46ef8f88-eea6-465e-bf11-f92615395c85.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\46ef8f88-eea6-465e-bf11-f92615395c85.tmp
                                          • Size 105KB
                                          • SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
                                          • MD5 SHA1 SHA512 TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
                                          • MD5 SHA1 SHA512 TLSH

                                          24bf9ea5-2335-47fc-8449-a5534650828e.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24bf9ea5-2335-47fc-8449-a5534650828e.tmp
                                          • Size 70KB
                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          315e3897-722e-451f-bf96-6c712526cd42.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\315e3897-722e-451f-bf96-6c712526cd42.tmp
                                          • Size 23KB
                                          • SHA256 12450635ab7c3a1910129097ceb38a7dec5f4aaaf7375275dfb3a118da92fbcb
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          4c330bbb-553b-4beb-8540-9f907d8f6f0d.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c330bbb-553b-4beb-8540-9f907d8f6f0d.tmp
                                          • Size 11KB
                                          • SHA256 412b691ae5dfb015228d756ca8fe12bed1eee26b79bcd87a79a14d341cb5d56c
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00005b

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
                                          • Size 21KB
                                          • SHA256 d2bb3d8bcf4a3ee8f5cc5a90b4357f4205f356aaebffff9ea352b6ee255da7ae
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00005d

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                          • Size 56KB
                                          • SHA256 fafc4160788beca657ec3e3041976281fb6d54a0e82bb4d22a433f7c6bb8b1d6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_000070

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                          • Size 58KB
                                          • SHA256 bbfe6403b4ddba29284c72d20f000154d04588d60850fc39a6fd65861c6d83e6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007c

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                          • Size 20KB
                                          • SHA256 a7b26ee1157dd6916bd9a82e218629d8f4fe8e818153289d7ede0286caaf543b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f_00007d

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                          • Size 22KB
                                          • SHA256 5202547ebbd8cab399e4ab5d8bbd389980c2b84b705f6e9fdb5c26e81adcff60
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          temp-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                          • Size 2KB
                                          • SHA256 29bc3d7279326512a9b365095ed3b8d4638a1f3db1f1bf2cda5c17f283487a75
                                          • MD5 SHA1 SHA512 TLSH

                                          fbed9bfa-dafb-4a99-9d4a-a4f5b006b466.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fbed9bfa-dafb-4a99-9d4a-a4f5b006b466.tmp
                                          • Size 2B
                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                          • MD5 SHA1 SHA512

                                          63bfd058-7ae9-4b8b-9f44-a38890a44a1e.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\63bfd058-7ae9-4b8b-9f44-a38890a44a1e.tmp
                                          • Size 1KB
                                          • SHA256 036771d56fa05d378c53c1e19a518405b613aa18aada4ebf102321e62c247c60
                                          • MD5 SHA1 SHA512 TLSH

                                          6f32d361-59dc-44d9-9b08-101fa6fce204.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6f32d361-59dc-44d9-9b08-101fa6fce204.tmp
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512

                                          9890540f-ebb0-4e41-8e22-8f8a05c3a89d.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9890540f-ebb0-4e41-8e22-8f8a05c3a89d.tmp
                                          • Size 3KB
                                          • SHA256 6d14e4de24afd822db222a35335a46c9249e6f8f063ccd49a9ebf14a2b32377b
                                          • MD5 SHA1 SHA512 TLSH

                                          c3583763-cbec-46f3-b306-9640169a42e7.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c3583763-cbec-46f3-b306-9640169a42e7.tmp
                                          • Size 40B
                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                          • MD5 SHA1 SHA512

                                          CURRENT

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                          • Size 16B
                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                          • MD5 SHA1 SHA512

                                          sync_diagnostic.log

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                          • Size 4KB
                                          • SHA256 2964d7ef755fb56f49c54e933b9a9c0796abd457fa9ced25afcc5cbf7fc739ef
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          MANIFEST-000001

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                          • Size 41B
                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                          • MD5 SHA1 SHA512

                                          b1415de0-3479-48b3-af79-0498bb0889ba.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1415de0-3479-48b3-af79-0498bb0889ba.tmp
                                          • Size 6B
                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                          • MD5 SHA1 SHA512

                                          e6bc9832-5dba-4148-a142-2133fceb7819.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e6bc9832-5dba-4148-a142-2133fceb7819.tmp
                                          • Size 11KB
                                          • SHA256 d26535f33a56c23283ea373981cf072deb6c88ffc672b6135de4d2261fe6c4d9
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          f675f967-afe4-42ee-b014-43cf11b8d9b6.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f675f967-afe4-42ee-b014-43cf11b8d9b6.tmp
                                          • Size 11KB
                                          • SHA256 e2f48a64887c0ad45a78c78337b7649a6b5b6fa4fc77d70b40be156923345918
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          c12e8c80-e306-40a7-b20c-e41c5fe36c55.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c12e8c80-e306-40a7-b20c-e41c5fe36c55.tmp
                                          • Size 22KB
                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          a549d66a-8e16-4175-95d2-98645765f1e9.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a549d66a-8e16-4175-95d2-98645765f1e9.tmp
                                          • Size 33KB
                                          • SHA256 a72d6629e0292cd369edb4f470cc0c6bf067b5268fd5da256f6d6ac5dfccbe5b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          2fb9c875-8b77-401f-902c-63864461103c.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2fb9c875-8b77-401f-902c-63864461103c.tmp
                                          • Size 13B
                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                          • MD5 SHA1 SHA512