Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/11/2026, 19:10

General

  • Target
    https://quickshare.samsungcloud.com/6j9s8VjP8cbb
  • Sample261102-xvcbpscw9w
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 34 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://quickshare.samsungcloud.com/6j9s8VjP8cbb
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3672
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff84cb6c188,0x7ff84cb6c194,0x7ff84cb6c1a0
      2⤵
        PID:3004
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,17999185152067884402,4926253233048866733,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
        2⤵
        • System Time Discovery
        PID:1464
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,16051924771925088880,10161332452828320663,262144 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
        2⤵
          PID:4696
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,13458612300394454248,2964957807015653477,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:8
          2⤵
            PID:3480
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,17442505031790786449,11860886838779404114,2097152 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
            2⤵
              PID:1616
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,14662352273811485624,12942625007960411235,2097152 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
              2⤵
                PID:1912
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,14908495238060546416,16036316572249218447,2097152 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                2⤵
                  PID:2700
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,6508407090095948394,9503997158806345196,2097152 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
                  2⤵
                    PID:4028
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,2957921585184952071,5728458555298772786,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
                    2⤵
                      PID:4264
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,12307893370698810364,13442535309502765013,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
                      2⤵
                        PID:4100
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,835602383781241561,5025915318560105049,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
                        2⤵
                          PID:372
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,835602383781241561,5025915318560105049,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
                          2⤵
                            PID:4888
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,727676175236938399,16421201576019879832,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
                            2⤵
                              PID:1016
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,12206248710672461457,1275594252495983963,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
                              2⤵
                                PID:4824
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,5133360629465650236,11030633571256308010,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
                                2⤵
                                  PID:4840
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,780616898427780164,4258152629656362583,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:8
                                  2⤵
                                    PID:2984
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,10112868286223595412,2656865944716234604,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:8
                                    2⤵
                                      PID:4596
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,17850980703016488518,15034166418126656072,524288 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
                                      2⤵
                                        PID:4004
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6088,i,14234607756305360254,131852494662212657,262144 --field-trial-handle=2404,i,17284775790936914952,12403429112179262216,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:2212
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:4204

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            44b884c0-7d1b-42d3-b15e-8574775e6e25.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\44b884c0-7d1b-42d3-b15e-8574775e6e25.tmp
                                            • Size 8KB
                                            • SHA256 cb6766565e57874e173d87310f266002362192946cf2978975835044bf5849e2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            4f778a1c-4b80-4de1-955d-af43ae8880cb.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f778a1c-4b80-4de1-955d-af43ae8880cb.tmp
                                            • Size 18KB
                                            • SHA256 398cb68a1a97e26df2363bfb83941f53c813ac263069955dae5d4ee5dcf03a6f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            8e55e61e-07f0-4dcd-bda4-9e93c0e40364.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8e55e61e-07f0-4dcd-bda4-9e93c0e40364.tmp
                                            • Size 8KB
                                            • SHA256 19ad6264a2b914add3beb2480706d92ded31c2944745551d864f6a4d91826a7e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            abc3ff1a-3648-4df5-bfde-c2b6a86d3ce1.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\abc3ff1a-3648-4df5-bfde-c2b6a86d3ce1.tmp
                                            • Size 105KB
                                            • SHA256 e2d1a78ddd4a2613e2e137a9b8a6ee6a025f24ce78c71783944f051445e3063d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
                                            • MD5 SHA1 SHA512 TLSH

                                            settings.dat

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                            • Size 280B
                                            • SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
                                            • MD5 SHA1 SHA512 TLSH

                                            18920cef-6025-4b09-8236-bee8f79c0a98.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18920cef-6025-4b09-8236-bee8f79c0a98.tmp
                                            • Size 10KB
                                            • SHA256 d0bc0cba17f21ed842f1a295dbb946ab5b2b43b8d5c0e0086bdd5d386f1564d2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            22def53b-37b8-420a-9cab-de6f8916965e.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22def53b-37b8-420a-9cab-de6f8916965e.tmp
                                            • Size 10KB
                                            • SHA256 e8396f545accc6f12bde9420d5287913d39890bfb576556c163864524d4240af
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            2eed66e5-6521-4a0a-b988-e059b9cf83f8.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2eed66e5-6521-4a0a-b988-e059b9cf83f8.tmp
                                            • Size 27KB
                                            • SHA256 935fb1afcc7c6de31ea6ccc00a6403c76a7dcd40f2f3908bc0fde5c7d4e9d286
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            3d2bdc6c-b710-46eb-9bb2-cc5c6eb6a863.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d2bdc6c-b710-46eb-9bb2-cc5c6eb6a863.tmp
                                            • Size 10KB
                                            • SHA256 9b96a4ce76193d21f80d9ee8eb9a271b44ae3bc11c331a73d9ff818504419756
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            40f3ee3e-38a5-4fef-8365-1c8051aaadbc.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\40f3ee3e-38a5-4fef-8365-1c8051aaadbc.tmp
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512

                                            848df8b8-221f-4860-a9d6-a5bba5a605d7.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\848df8b8-221f-4860-a9d6-a5bba5a605d7.tmp
                                            • Size 10KB
                                            • SHA256 52cabc37d1a3a7188da99412cb738caa9a629327f4722cfa9040f994f3517804
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            9f126654-1fc4-4f4d-9c16-f1f77b009314.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9f126654-1fc4-4f4d-9c16-f1f77b009314.tmp
                                            • Size 70KB
                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            LOG.old

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                            • Size 331B
                                            • SHA256 c97eb35d8f88c98f66d6acae35c17d1f1af7f787baa5ac12f549f4f75f2380fe
                                            • MD5 SHA1 SHA512 TLSH

                                            f_00005f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                            • Size 87KB
                                            • SHA256 a8968be35c05d541ccd4eb1c4af41cb3b27f470986c85cb23062ace8938828a9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000068

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
                                            • Size 44KB
                                            • SHA256 c2a9127e43c4fd8827e964502bf687906c9ccbf30ca3d4f66f998916b3aa8253
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000069

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                            • Size 66KB
                                            • SHA256 eb5631660f785a024f7707128c59d7b51899225a432742160f887d978c1735de
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006c

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                            • Size 64KB
                                            • SHA256 41842387f4106f9896e0290b1fa52dcb88c92d3507f30f05dd9a172822ad6993
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006e

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                            • Size 85KB
                                            • SHA256 b31076fd627f3ae62d8a5e15ed696638c5d5736c4b1c92507fd130efc39dc5ba
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_00006f

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                            • Size 83KB
                                            • SHA256 53bdbbac5e88e32b9ce6193a040b084969aa4eeb3f244c219a598fe56a0a7a29
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            f_000076

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
                                            • Size 134KB
                                            • SHA256 8161be07202521e79288910343557804f85f4f37a8f0054b6eecdf6f7957b591
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            temp-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                            • Size 3KB
                                            • SHA256 1328aa54e818e8b40db48bc25768755d1eacf8e35ee400df8dbd77a0653f1ba5
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 3KB
                                            • SHA256 aa6d0dc8398501cb3ea7e6341d785f2f23bef87214c78ed798478cde0574c28a
                                            • MD5 SHA1 SHA512 TLSH

                                            aaa1fffe-1543-440c-ad99-9bc98058531e.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\aaa1fffe-1543-440c-ad99-9bc98058531e.tmp
                                            • Size 2B
                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                            • MD5 SHA1 SHA512

                                            633da1dc-1003-48c8-93c8-3d40cd561d9a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\633da1dc-1003-48c8-93c8-3d40cd561d9a.tmp
                                            • Size 111B
                                            • SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
                                            • MD5 SHA1 SHA512 TLSH

                                            8c362f8b-a27b-40d3-9636-70987644059b.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8c362f8b-a27b-40d3-9636-70987644059b.tmp
                                            • Size 111B
                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                            • MD5 SHA1 SHA512 TLSH

                                            d0849d95-3dfa-4b4b-a5b5-de2afc8eae67.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d0849d95-3dfa-4b4b-a5b5-de2afc8eae67.tmp
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            e3de630d-0d88-4bc0-9172-aa2ee67d144d.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3de630d-0d88-4bc0-9172-aa2ee67d144d.tmp
                                            • Size 1KB
                                            • SHA256 d877e1474985054523a49c44f0c7589ff51735b2013d6c27101ec0856041f122
                                            • MD5 SHA1 SHA512 TLSH

                                            sync_diagnostic.log

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                            • Size 4KB
                                            • SHA256 31851efe89eebe7d38fdc745592c9223ee12158e072fb0463b73bacb44bc8861
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            2802bec6-9a37-4c1f-8dc0-9028d4318981.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2802bec6-9a37-4c1f-8dc0-9028d4318981.tmp
                                            • Size 22KB
                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            OperationConfig

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                            • Size 3KB
                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                            • MD5 SHA1 SHA512 TLSH

                                            a362eb87-cce8-4e6d-bc78-4ee15c09ad48.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a362eb87-cce8-4e6d-bc78-4ee15c09ad48.tmp
                                            • Size 18KB
                                            • SHA256 78cbb6d30a4ac767544b426d5d0cf62559bca1bc7bb90dabe368fefc252952e0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            a385d3cc-fe16-400d-abe9-4656b8b29d9c.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a385d3cc-fe16-400d-abe9-4656b8b29d9c.tmp
                                            • Size 26KB
                                            • SHA256 e407c80406589f518d360c3fafc53005a9b66dffc954aa3de98986d49f245ce7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            587434b4-2b2b-447c-bf3b-94c5558c442a.tmp

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\587434b4-2b2b-447c-bf3b-94c5558c442a.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512

                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                            • Size 2KB
                                            • SHA256 655507737b5c6a44fa644bebd1ee864450276621b4a9b7cbef9c37dead91608c
                                            • MD5 SHA1 SHA512 TLSH