Analysis

  • user interaction
    yes
  • max time kernel
    85s
  • max time network
    85s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/08/2026, 21:36

General

  • Target
    https://discord.gg/DPpZAexQu
  • Sample260828-1gerfstdpe
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://discord.gg/DPpZAexQu
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4748
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ff9851ac188,0x7ff9851ac194,0x7ff9851ac1a0
      2⤵
        PID:4616
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,3502452582048757883,16448945030298645667,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4804
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,3793053565854259796,14976876997667278818,262144 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
        2⤵
          PID:3436
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,2378104641532569293,11459109396010078571,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:8
          2⤵
            PID:3508
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,4874787429671817147,3339591078349115061,2097152 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
            2⤵
              PID:2448
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,1243868095010478996,451161465687476132,2097152 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
              2⤵
                PID:4896
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,2926338301534693577,8422575880673709222,2097152 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
                2⤵
                  PID:1864
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,7041776972471517905,12394666263735919508,2097152 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
                  2⤵
                    PID:4908
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3664,i,12600389682882723162,3767904465471997418,2097152 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
                    2⤵
                      PID:2600
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3968,i,2940427333880750158,8876935024494460605,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
                      2⤵
                        PID:3340
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,10516606429019240399,312130412864213001,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
                        2⤵
                          PID:4972
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,3819945309602556917,17939798492198475794,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
                          2⤵
                            PID:4776
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,1565174710306930197,2211798360958666506,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
                            2⤵
                            • Modifies registry class
                            PID:3784
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,18215750861990015098,99617255769700821,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:8
                            2⤵
                              PID:3412
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,18215750861990015098,99617255769700821,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:8
                              2⤵
                                PID:2128
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,3624892713800641059,1425097426312433743,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
                                2⤵
                                  PID:6372
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,12905834710809642339,3406502336938356158,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
                                  2⤵
                                    PID:6364
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,8046922297793562864,11342323197760759051,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
                                    2⤵
                                      PID:6356
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=1640,i,10853457175873263093,7306798929349760992,2097152 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:1
                                      2⤵
                                        PID:6152
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2924,i,17333298876726438863,4355976500771858934,524288 --field-trial-handle=2328,i,11399779250114796544,2082959524152578576,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
                                        2⤵
                                          PID:4688
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                        1⤵
                                          PID:3380

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              47a50eb1-c9b0-4cce-8253-d8341d79c649.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\47a50eb1-c9b0-4cce-8253-d8341d79c649.tmp
                                              • Size 18KB
                                              • SHA256 3845b9430bba0610c8137112fcf1f55a2fc0506a4cc99619add3ca31a2224ac9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              blocklist

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                              • Size 105KB
                                              • SHA256 dc3cbdc636712cd0ad246adb60e10a6c82511eff5067261c392024fae841e7a9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
                                              • MD5 SHA1 SHA512 TLSH

                                              BookmarkMergedSurfaceOrdering

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              f_000077

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
                                              • Size 16KB
                                              • SHA256 b8cc0ee377156687435b05c1aa7931e14a11d1dc3a8a00926987f9107af93385
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000079

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
                                              • Size 62KB
                                              • SHA256 e880de544f4bf3f265bd5134495473cd5dc3e5a983799044bcd18e92898d6e80
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00007c

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                              • Size 405KB
                                              • SHA256 b3fd510d24f458d436b34ab9e3bfec4c76905d64a0f7a4d507cb3c40d100c672
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00007e

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                              • Size 439KB
                                              • SHA256 4667f673a09aef581e9d9baa0918c38788dc9bc817141a8c1177c8609c9a75be
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00007f

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                              • Size 20KB
                                              • SHA256 1c6d3b7fbee76cbd1b72c16e478cb14412cec74baef60c12b87e7396a1088eb9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000080

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                              • Size 125KB
                                              • SHA256 b9f2fb6b113df52e6053540132e53779bbe45dd05d12fc3e9347bdce1e0a1e84
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000081

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                              • Size 40KB
                                              • SHA256 ad189fce3bb3359dcf25eb3c1034a633daad5f7631964a89ab28b6eeaafd55ba
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000082

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                              • Size 275KB
                                              • SHA256 b8441d6faa25d41cd57a6ccf56aa2662f2c9a484449a9c0807f431f3ed8d90c3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000083

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                              • Size 20KB
                                              • SHA256 55400c91e3aeecc2691f900af912ff12901ea77c8d0a5a78b4a23fbcb5f9cc3e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000092

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                              • Size 75KB
                                              • SHA256 19719d944f39c3b452c822e70d99196eeafaa8b105ded97c5f847edb1188a06b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000093

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                              • Size 36KB
                                              • SHA256 035c196c0143bfb0a1841a7e2e6632bbfd51c0218ffe6dd9fedcdfebeb54bf7d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000094

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                              • Size 78KB
                                              • SHA256 2be8f0510db05f9204fa78e0b4b129113b9765c1a77198f2075b272f62c190ff
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000095

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                              • Size 18KB
                                              • SHA256 7b2ba030010cca179fa6bab3946b2a5749216bac4c49d089883ce8694dca28fc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000096

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                              • Size 20KB
                                              • SHA256 9d2f0d33f1d678f77ee6e06111e74daa40fe1b6955d8a53da12478a95c3dfe15
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000097

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                              • Size 41KB
                                              • SHA256 d6b6e18b0303ca2840bfd5f0915749050f8d0f6c94bccf5db11a14c6d01fcd10
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000098

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                              • Size 126KB
                                              • SHA256 78fe791c8c72bb9bf669b01e86c46589bccf8aa0188fcee132f4fed87dc9d5d0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_000099

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                              • Size 113KB
                                              • SHA256 b1ada5424612c3ebbf54e063988d52ba9b903e3b2170feb9dc77ddf7c801305c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00009a

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                              • Size 29KB
                                              • SHA256 4ccb01e61faf80ebfaa49639f5bea3726153b1270aa867398f859bb6e34ca87c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00009b

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                              • Size 20KB
                                              • SHA256 6c24c3afb80851d628549f885b8d7b9725524fcda1fbde1ca74c89972d253d75
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00009c

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                              • Size 846KB
                                              • SHA256 155c8b26563a520f60184bf539d4b44009c471799746ac1e101806688e154597
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 10KB
                                              • SHA256 5b7affdbbbddd58ecc5c6f3cfa6694b8472fb44b2c47a8332186869f123ae0f7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              the-real-index~RFe589296.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589296.TMP
                                              • Size 3KB
                                              • SHA256 92eb7d9d026c3c447022aa2f2090bd8f997b06f3d241beafcfed4c12b12bfcce
                                              • MD5 SHA1 SHA512 TLSH

                                              SiteList-Enterprise.json

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                              • Size 5KB
                                              • SHA256 15c2b4625b73f7296bbcdbe51360608c3330c53e5f8a6ddbf88c395d4182017c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                              • Size 111B
                                              • SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
                                              • MD5 SHA1 SHA512 TLSH

                                              SCT Auditing Pending Reports

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 84d3a309366c11400bb75f18f36912e3ea0446b401892228a7a290c8dab9628c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 0668f106bffbf975babf374bcc90467f580e4481bd32fceb8f4800d10208c730
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Secure Preferences

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                              • Size 30KB
                                              • SHA256 f8fcfc9cdf4e65ccca529076fe4519930a4cc35b6a6922b345e2d465202b8004
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\d09c07cd-474b-46bd-91e5-780a824bbfa7\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 0da58438b1ed5a741d2ccb1c5210315be994e5832f8dcbd4731f4bf8f6ae9207
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\d09c07cd-474b-46bd-91e5-780a824bbfa7\index-dir\the-real-index
                                              • Size 48B
                                              • SHA256 2989ec4b38370c2a91dfb7155f0d346bfefa2ecfa634c92c1bd1ec4c81b8deee
                                              • MD5 SHA1 SHA512

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\d09c07cd-474b-46bd-91e5-780a824bbfa7\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 f9efe5d137289c06247cbf8103be53d4bc1cb93cdba69e022c448e9fdfae51f6
                                              • MD5 SHA1 SHA512 TLSH

                                              index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\f64b9c62-e845-49cd-b5a8-7e1a58b6e270\index
                                              • Size 24B
                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                              • MD5 SHA1 SHA512

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\f64b9c62-e845-49cd-b5a8-7e1a58b6e270\index-dir\the-real-index
                                              • Size 48B
                                              • SHA256 6facf562217ee5bf941201865b9183dc13cea2f41b161e44207ee7c01c5be3e5
                                              • MD5 SHA1 SHA512

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\f64b9c62-e845-49cd-b5a8-7e1a58b6e270\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 14c732b1100351ba6897e34fda75d7cf4730b0f40d81bc570240af5587d02c29
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                              • Size 226B
                                              • SHA256 781adab60397b71caf5753c501124400114b5d019f9de2a00cc62d251db1131f
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                              • Size 233B
                                              • SHA256 b80a16f725a6aba66f08204eac5a8d978803f153b1831f78a20ed9e5ab9083ce
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt~RFe5822b6.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5822b6.TMP
                                              • Size 138B
                                              • SHA256 89841acbc2a35fc9b516c23c9c9fc07d886271517d98c67f3337dec454784512
                                              • MD5 SHA1 SHA512 TLSH

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 4KB
                                              • SHA256 ba44852609512a6d57d959732bd904e45e3f3c685c9f32730e8b1987f9051e70
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\c7a1c534-e5ce-466f-ae09-9aedb3858ee6\index-dir\temp-index
                                              • Size 72B
                                              • SHA256 50798eb9a8ce70e23468d9b5d7a8204768414048e91d104213c8c170708c5650
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                              • Size 91B
                                              • SHA256 b5ac12376878718d3accc7ed17f9d3350bcd6e6924328ed81d69eb1b250f83a7
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt~RFe589de1.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe589de1.TMP
                                              • Size 178B
                                              • SHA256 a5142682b8175bd1aece2f88df8158c5acea35a19ae8e4e1ab4569d4b0dc3dd9
                                              • MD5 SHA1 SHA512 TLSH

                                              bc07cbe3-778e-4539-bf8c-0a97c4fd7574.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc07cbe3-778e-4539-bf8c-0a97c4fd7574.tmp
                                              • Size 70KB
                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OperationConfig

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                              • Size 22KB
                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OperationConfig~RFe590872.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590872.TMP
                                              • Size 3KB
                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                              • MD5 SHA1 SHA512 TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 26KB
                                              • SHA256 8db94f5adbbded8f01bbcd0b98736bb93b4b3b733e153ba2fb10276621981b7f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 11KB
                                              • SHA256 818b91bba8165be4dd4b72dcd7c653af55719baa5f99e12dd3f9f87278b31dcb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 2c14d54aaf4fe7672391511317bf213775d9ac2fb8cf0ed21c38473b00b043cd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 8KB
                                              • SHA256 a44f3211eaf220d0800c0c8abf22334c6f07bd0a7beea0d6ee13402208699f46
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                              • Size 11KB
                                              • SHA256 661e170baacaf52e92e73d1b4ad5205d584e0445696b9c1f8e429e879c17d6aa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              RevisitationBloomfilter

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                              • Size 392B
                                              • SHA256 93c7175ad861692888ce0d5999db3c609a04d60bd1c97f82d3c9b741aa19deda
                                              • MD5 SHA1 SHA512

                                              RevisitationBloomfilter~RFe5921f5.TMP

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5921f5.TMP
                                              • Size 392B
                                              • SHA256 d1fadc34ca11b5d4d733600b3ea116385e0c9b4d8a155547f7bf8ec8201230e1
                                              • MD5 SHA1 SHA512

                                              84fceeb2-c90f-4792-9044-094c751cbefa.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\84fceeb2-c90f-4792-9044-094c751cbefa.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512

                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                              • Size 2KB
                                              • SHA256 67d94d0cfbc233b448a6d8866ebff62a0b1a9a090c1e666f8fa0cc68448b2c6e
                                              • MD5 SHA1 SHA512 TLSH

                                              default.dic

                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                              • Size 2B
                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                              • MD5 SHA1 SHA512