Resubmissions

16/04/2026, 22:25

260416-2cefkacs2m7

16/04/2026, 22:24

260416-2bmqjsb19n3

Analysis

  • user interaction
    yes
  • max time kernel
    449s
  • max time network
    439s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    16/04/2026, 22:25

General

  • Target
    http://pornhub.com
  • Sample260416-2cefkacs2m
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 59 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://pornhub.com
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4328
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff8479c188,0x7fff8479c194,0x7fff8479c1a0
      2⤵
        PID:2812
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,16834982949808103605,1280168467458888394,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3420
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4433210430698028837,66179587731813909,262144 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
        2⤵
          PID:3412
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,9916105300299352649,5037938238830441914,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
          2⤵
            PID:5640
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,17447597943578350971,3418940267062700333,2097152 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
            2⤵
              PID:4916
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,7374421902781646744,3023796856892186819,2097152 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
              2⤵
                PID:4600
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4876,i,12817440786327951136,4893984693974924833,2097152 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
                2⤵
                  PID:5540
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,12603588865037181759,16057380916504162436,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
                  2⤵
                    PID:4008
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,17030441546638846178,3681916658240449307,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:8
                    2⤵
                      PID:2092
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,3581559914256454,6064741671029522455,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                      2⤵
                        PID:5432
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,3581559914256454,6064741671029522455,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                        2⤵
                          PID:5312
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,2454271633631979936,4333096703103123510,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                          2⤵
                            PID:5276
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,6490186436996792362,4450104105717019109,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
                            2⤵
                              PID:3532
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,7148833569904832981,17037348136004986788,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
                              2⤵
                                PID:5180
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,9967317066058168623,18268084040657801747,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                2⤵
                                  PID:5760
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,2870102272867112220,2643740886374599534,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
                                  2⤵
                                    PID:4224
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,2415355590556942237,11871774176890618323,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
                                    2⤵
                                      PID:5428
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,16795004109192586857,17391052230422382421,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
                                      2⤵
                                        PID:5200
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,5042993035263922105,8956880903873344278,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
                                        2⤵
                                          PID:3852
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,6000430624737441617,13587686179036824222,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
                                          2⤵
                                            PID:5472
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6380,i,3814411630265252471,12726564995432150025,262144 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:3324
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,18099369936714094157,18243880231536201276,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=1016 /prefetch:8
                                            2⤵
                                              PID:5956
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1020,i,11907319295856943248,11265571070257099635,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
                                              2⤵
                                                PID:3760
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,10136890467604139694,11648137563755352064,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:8
                                                2⤵
                                                  PID:4424
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,12212016640606766562,10720061281452323901,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
                                                  2⤵
                                                    PID:3668
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,18175831746533917632,16606568100360354621,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:8
                                                    2⤵
                                                      PID:5780
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,1883058231963444678,481077913381445963,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
                                                      2⤵
                                                        PID:5956
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,7075559137498997665,13675759144542604223,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
                                                        2⤵
                                                          PID:4732
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,6646981728093038001,13666926220239399561,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:8
                                                          2⤵
                                                            PID:5060
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,10352869963289260720,4387663863761754063,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
                                                            2⤵
                                                              PID:3508
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,11033864896720530113,12580575224969033502,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:8
                                                              2⤵
                                                                PID:3532
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,10071385608805189722,7503493544933328090,524288 --field-trial-handle=2284,i,16199754782770880938,883968356902832902,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:8
                                                                2⤵
                                                                  PID:2044
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                1⤵
                                                                  PID:3264
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                  1⤵
                                                                    PID:3500

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_1193777813\manifest.json
                                                                        • Size 141B
                                                                        • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_1217570544\manifest.json
                                                                        • Size 177B
                                                                        • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_1310432126\manifest.json
                                                                        • Size 118B
                                                                        • SHA256 f413ae6ed78a929797ced7a80286a8a19dc13faa0a1a3177698d1e4a782f9861
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_1597955078\manifest.json
                                                                        • Size 119B
                                                                        • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_1605445211\manifest.json
                                                                        • Size 102B
                                                                        • SHA256 0b11bc370854bd2e625deb04fdfc53ba444e4af63ba831f9de785b44464b59b9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_1631669633\manifest.json
                                                                        • Size 69B
                                                                        • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_1656900980\manifest.json
                                                                        • Size 76B
                                                                        • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_215368868\manifest.json
                                                                        • Size 52B
                                                                        • SHA256 36565d2ebd6c48537cb3e6fe24ac74ca68dda18b3f0f8be13f47d01aec181d62
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Staging

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_252337362\Sigma\Staging
                                                                        • Size 36B
                                                                        • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                        • MD5 SHA1 SHA512

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_252337362\manifest.json
                                                                        • Size 132B
                                                                        • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        keys.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_662131489\keys.json
                                                                        • Size 8KB
                                                                        • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_662131489\manifest.json
                                                                        • Size 79B
                                                                        • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        hyph-as.hyb

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_99528643\hyph-as.hyb
                                                                        • Size 703B
                                                                        • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        hyph-hi.hyb

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_99528643\hyph-hi.hyb
                                                                        • Size 687B
                                                                        • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        hyph-nb.hyb

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_99528643\hyph-nb.hyb
                                                                        • Size 141KB
                                                                        • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        manifest.json

                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4328_99528643\manifest.json
                                                                        • Size 82B
                                                                        • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        autofill_bypass_cache_forms.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                        • Size 161B
                                                                        • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        edge_autofill_global_block_list.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                        • Size 6KB
                                                                        • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        v1FieldTypes.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                        • Size 509KB
                                                                        • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 d68b8059d1fdfd8541892ccb136bddd7ec7601b55110e2cdd4c0e5ace97d9da8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 8b1e4ba6890ec60cfe9f6942acc1937ba6fdde042b45c0a2e0b7e13ade701cfd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LOG.old

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                        • Size 352B
                                                                        • SHA256 c244e31afb15f30f586306a448495d2d662b2bbba97e7013f79a36f86eeb7862
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LOG.old

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                        • Size 334B
                                                                        • SHA256 5b3db7d4e151226b02225904bb234f5cae7fbc8f813ff90fdec8fd0103c8c946
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        BookmarkMergedSurfaceOrdering

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                        • Size 6B
                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                        • MD5 SHA1 SHA512

                                                                        BrowsingTopicsState

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                        • Size 414B
                                                                        • SHA256 40e937ce48c26fb54c4164e18a9757b44c3da57b59276c6aaca099d8ce0b84db
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        f_000099

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                        • Size 72KB
                                                                        • SHA256 0c42898b56db345303b1a79fc4d47099aa896eee83ae148922ed2cf2a7febb47
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00009b

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                        • Size 75KB
                                                                        • SHA256 1c5ba18b5b7311d77292e47866c998472f86b463130923b6abfb8c4067f68662
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00009c

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                        • Size 70KB
                                                                        • SHA256 077c09396298931f3896e79c355b8ded358f7b71723fdbf50c90bcdac6aad197
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a4

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                        • Size 78KB
                                                                        • SHA256 c5b8c8b6703578222b102bb2629008462a3c50975bc843986c24fe3a3f848e30
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a8

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                        • Size 41KB
                                                                        • SHA256 6e5b1bba7421559aa261c64bbeded82b4d0b16156f8b657ee476c027a90be3cb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 4KB
                                                                        • SHA256 aba6349b3d2a4236c041f4d2d2af14c8c29c121c2c432f73f77e9674443d16b1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        SiteList-Enterprise.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                        • Size 2B
                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                        • MD5 SHA1 SHA512

                                                                        HubApps

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                        • Size 106KB
                                                                        • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 6KB
                                                                        • SHA256 c1ca0b59b7348d68ffe9fe07ce3c4411744637d3dea27699bd3cd4b2ce058d88
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 8KB
                                                                        • SHA256 6831342faa77db0511e685f6a0f99c05b999f558c8d895714473e9f0610bffd1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 8KB
                                                                        • SHA256 e922199fdcf3041f5171c4b93915bde0a0a4a50ae1e46bc5b7481583782d0a21
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        SCT Auditing Pending Reports

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        Sdch Dictionaries

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                        • Size 40B
                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                        • MD5 SHA1 SHA512

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 17KB
                                                                        • SHA256 e6e22140fe07aa18118cff1fb2efde7c49352902057b04f75afd7e64b124ca06
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 16KB
                                                                        • SHA256 ffe9b2bbc5fd4981d4559a1a9f79824fbac92cee59a9fc0dd37fa9d299d4f0e7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Secure Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                        • Size 35KB
                                                                        • SHA256 490e6df2c96665cd95128513d0948c5caf70b94cb09f43a6dcd78ee810032865
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9ee838dd-a441-435f-b78f-4a16a5581428\index-dir\temp-index
                                                                        • Size 2KB
                                                                        • SHA256 f8d438a3dc06730bda4c324141536c99759cbd81eb0a80ad342def7f9c386773
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5cc173.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9ee838dd-a441-435f-b78f-4a16a5581428\index-dir\the-real-index~RFe5cc173.TMP
                                                                        • Size 2KB
                                                                        • SHA256 aaf703c4f886e9372df19cae4c644b80bccdf125e53d0ca321fe150e7b741c27
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                        • Size 371B
                                                                        • SHA256 f44f0458649b9f250398025f57ca530331c8a40ea474889de3ebc7a808c5db89
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        sync_diagnostic.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                        • Size 23KB
                                                                        • SHA256 a54590c8c96e6989a39f8598c05887900860495faac03e73f4747096ca084c84
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                        • Size 16B
                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                        • MD5 SHA1 SHA512

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                        • Size 41B
                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                        • MD5 SHA1 SHA512

                                                                        data.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.4\data.txt
                                                                        • Size 145KB
                                                                        • SHA256 7dd75cb36b4cc7c5f2df67bac823b9d9d2c3653172ff73ce6cccd39683970a08
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 25KB
                                                                        • SHA256 ba1e809129dba95bac1e944e2fde92fad270a21eadb631f8de65c9e311724475
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 26KB
                                                                        • SHA256 174e11ff8dd95a0fa8a12c1361cadd28b5c6ab6bcc509f545b78f5da5d23eb82
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 27KB
                                                                        • SHA256 cc9f65e7d25925e024ab18aabbe24f451daef0e626f4a1e173bec3a14818c6b2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 32KB
                                                                        • SHA256 ba6970abcd067d7c7b920780e66f3479173421fd164112e9e2db3f715cbceb27
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 27KB
                                                                        • SHA256 d8fe5f08f804690b07319839b2b0a8d133dd8aff2ad8334ac2d2fbda0b92f36d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        crs.pb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\crs.pb
                                                                        • Size 251KB
                                                                        • SHA256 576d77d3085ff9156298e60dee868364cabab7911edf6f9a4d3ad5f351d5059f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ct_config.pb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\ct_config.pb
                                                                        • Size 16KB
                                                                        • SHA256 dfc86083d2fa2463f12d1d096db6084c860cb8bfddc3d2cf8e818f65353241d6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        kp_pinslist.pb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\kp_pinslist.pb
                                                                        • Size 10KB
                                                                        • SHA256 9314218dc6642ea1980d504ec45e23aa2b4e7775ef13f7c7121271dbd60b1df4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Advertising

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                        • Size 19KB
                                                                        • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Analytics

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                        • Size 4KB
                                                                        • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        CompatExceptions

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                        • Size 689B
                                                                        • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Content

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                        • Size 4KB
                                                                        • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Cryptomining

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                        • Size 668B
                                                                        • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Entities

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                        • Size 68KB
                                                                        • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Fingerprinting

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                        • Size 1KB
                                                                        • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LICENSE

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                        • Size 34KB
                                                                        • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Other

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                        • Size 34B
                                                                        • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                        • MD5 SHA1 SHA512

                                                                        Social

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                        • Size 754B
                                                                        • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        TransparentAdvertisers

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                        • Size 105B
                                                                        • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Advertising

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                        • Size 20KB
                                                                        • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Analytics

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                        • Size 3KB
                                                                        • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Content

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                        • Size 5KB
                                                                        • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Cryptomining

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                        • Size 32B
                                                                        • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                        • MD5 SHA1 SHA512

                                                                        Entities

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                        • Size 106KB
                                                                        • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Fingerprinting

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                        • Size 2KB
                                                                        • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LICENSE

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                        • Size 66B
                                                                        • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Other

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                        • Size 198B
                                                                        • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Social

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                        • Size 3KB
                                                                        • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        typosquatting_list.pb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.10.1\typosquatting_list.pb
                                                                        • Size 1.6MB
                                                                        • SHA256 437fa1bddc8c481c7e54e827685f5fd3f76851bc61eedf43b37751c3d4be1231
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        well_known_domains.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                        • Size 572KB
                                                                        • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ranked_dicts

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\ranked_dicts
                                                                        • Size 865KB
                                                                        • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 ff6a456c97f42fa0f029eee5f500d054b16aa3533062efe768b6fc4b1f5b52b5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 4a532c68797cf631e3a53b039f40d900fcd6a9fe6bfa71ac1b35ac49c580a443
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 597ffb6dedf47217c26078877199c96fe46eefb826f9be76636e3bf988c95bab
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 cb7d6dc5bd35c86942ff6c76b5e4a56bb9d3b18b8841de2e8e26ebec04ab1bf3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 d43c4a221bf9dbd30f05d8a866c0b5d916a942d1c67ba04e138285a8e14c6cb7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 7906b647713da685b7103d80e806f43cb2343f84943cf08f2b37a88cf26c93e0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 2KB
                                                                        • SHA256 01aed1a9be1c8c7dbc3f47b3201daf0dae720b88841cd805059ea5ef7d456cdc
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 f7e82db6211c65062ce2f2d48bc59008cf07a9565729b1ee474b7dc829714ab3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 2KB
                                                                        • SHA256 49be70d0e3e155f3a696952dcda3d1c7c4be2c47314ab87abe3a2c6141172f51
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 2KB
                                                                        • SHA256 c3c0d751ada43cdf6672a4e77638c18a63fec8e966047efedd32ea490bd081cf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                        • Size 1KB
                                                                        • SHA256 372e81c76cd690cf3c4395faa7e60fa1883c1ecb6e46d3077ea060e82426ec8c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                        • Size 147KB
                                                                        • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                        • Size 132B
                                                                        • SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                        • Size 2KB
                                                                        • SHA256 15003e58a5308c39a5e66f3e5d534f0bbfd7174e1c1cdf051bcd9dec498f36ef
                                                                        • MD5 SHA1 SHA512 TLSH