Overview

overview

8

Static

static

3

SABnzbd-4....up.exe

windows10-2004-x64

7

SABnzbd-4....up.exe

windows11-21h2-x64

7

SABnzbd-console.exe

windows10-2004-x64

7

SABnzbd-console.exe

windows11-21h2-x64

8

SABnzbd.exe

windows10-2004-x64

7

SABnzbd.exe

windows11-21h2-x64

4

VCRUNTIME140.dll

windows10-2004-x64

1

VCRUNTIME140.dll

windows11-21h2-x64

1

VCRUNTIME140_1.dll

windows10-2004-x64

1

VCRUNTIME140_1.dll

windows11-21h2-x64

1

_asyncio.dll

windows10-2004-x64

1

_asyncio.dll

windows11-21h2-x64

1

_bz2.dll

windows10-2004-x64

1

_bz2.dll

windows11-21h2-x64

1

_cffi_back...64.dll

windows10-2004-x64

1

_cffi_back...64.dll

windows11-21h2-x64

1

_ctypes.dll

windows10-2004-x64

1

_ctypes.dll

windows11-21h2-x64

1

_decimal.dll

windows10-2004-x64

1

_decimal.dll

windows11-21h2-x64

1

_elementtree.dll

windows10-2004-x64

1

_elementtree.dll

windows11-21h2-x64

1

_hashlib.dll

windows10-2004-x64

1

_hashlib.dll

windows11-21h2-x64

1

_lzma.dll

windows10-2004-x64

1

_lzma.dll

windows11-21h2-x64

1

_multiprocessing.dll

windows10-2004-x64

1

_multiprocessing.dll

windows11-21h2-x64

1

_overlapped.dll

windows10-2004-x64

1

_overlapped.dll

windows11-21h2-x64

1

_queue.dll

windows10-2004-x64

1

_queue.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    899s
  • max time network
    900s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    17/04/2026, 22:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SABnzbd-console.exe
  • Size 313KB
  • Sample260417-2qrm2sc131
  • SHA256 4943604d31d7257a5f6ef75fce650e23b7ba1fda78974856ac28fb833260812f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Loads dropped DLL 2 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 55 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\SABnzbd-console.exe
    "C:\Users\Admin\AppData\Local\Temp\SABnzbd-console.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1064
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://127.0.0.1:8080/
      2⤵
      • Loads dropped DLL
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2980
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2dc,0x2e0,0x2e4,0x2d8,0x308,0x7ff96b55c188,0x7ff96b55c194,0x7ff96b55c1a0
        3⤵
          PID:4516
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,12116319840063583471,6710177978084230742,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:11
          3⤵
          • System Time Discovery
          PID:2512
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,2391567294676868646,1731136584271170054,262144 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
          3⤵
            PID:4560
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,9162174773186701917,10068967990804755727,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:13
            3⤵
              PID:3312
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,13539989064417521439,14280817318747425015,2097152 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
              3⤵
                PID:2280
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,12001080926763701794,12645150123719672412,2097152 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
                3⤵
                  PID:3472
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4100,i,12145862778948000969,4076483086733694648,2097152 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:1
                  3⤵
                    PID:1744
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,17251972773637343796,4868042194258451489,2097152 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:9
                    3⤵
                      PID:1668
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4188,i,4697579969950249985,2666390312733341363,2097152 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
                      3⤵
                        PID:1224
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4216,i,1101356486975100154,16339537938734734848,2097152 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:9
                        3⤵
                          PID:3780
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,4914338706485148543,4633372336756757925,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
                          3⤵
                            PID:228
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,10448207497487926976,2880833280781182269,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:14
                            3⤵
                              PID:2208
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,1699514058961683976,18264230269520196063,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
                              3⤵
                                PID:2832
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,10822322683163344561,4863985239119342574,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
                                3⤵
                                  PID:3220
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,12831044099060666193,14722594817170348734,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
                                  3⤵
                                    PID:3868
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,12831044099060666193,14722594817170348734,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
                                    3⤵
                                      PID:5060
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,16698985600424101959,2511519721731338155,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
                                      3⤵
                                      • Suspicious use of WriteProcessMemory
                                      PID:4932
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                        cookie_exporter.exe --cookie-json=1128
                                        4⤵
                                          PID:3364
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,4866606326242170933,7612668034628798481,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:14
                                        3⤵
                                          PID:2076
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,16902702321275550247,4532161023110483346,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:14
                                          3⤵
                                            PID:4200
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,16665350792244887537,9770777771416735632,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
                                            3⤵
                                              PID:5052
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,3833840605490744997,6707866872019918609,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
                                              3⤵
                                                PID:4364
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,14878116905319444594,7469680862920386459,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:14
                                                3⤵
                                                  PID:3148
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,1024389209457785862,554042575515409873,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:14
                                                  3⤵
                                                    PID:492
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,943301534878835078,15629091716172152898,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
                                                    3⤵
                                                      PID:5108
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,17184763679565942518,1974736089958140423,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
                                                      3⤵
                                                        PID:568
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,5834352891539090929,8214889911812939410,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:14
                                                        3⤵
                                                          PID:1876
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,10296205997422362626,14726903346537965311,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:14
                                                          3⤵
                                                            PID:3012
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,8137079180670734137,4236787908062889245,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:14
                                                            3⤵
                                                              PID:3460
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,9313136352019114790,2085611030461210147,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:14
                                                              3⤵
                                                                PID:1468
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6564,i,3151290504434939896,1845906507895248933,262144 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:10
                                                                3⤵
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:1672
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,18078852082069485544,5005732176800707347,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:14
                                                                3⤵
                                                                  PID:1440
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,1895819651391222994,10557351716856264325,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
                                                                  3⤵
                                                                    PID:1836
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,134826586879097867,8296242923565682382,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
                                                                    3⤵
                                                                      PID:1268
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,2647056489951558899,11824602054532825750,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:14
                                                                      3⤵
                                                                        PID:4224
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,15664686652525800642,5296175926872558579,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
                                                                        3⤵
                                                                          PID:196
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,6984286083002211396,9757712829022247730,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
                                                                          3⤵
                                                                            PID:4392
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,7796034164627493526,52251753710379658,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
                                                                            3⤵
                                                                              PID:4316
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,5362376930154520599,5386373810275245006,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:14
                                                                              3⤵
                                                                                PID:4240
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,9624788657145251036,9905119982647403425,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:14
                                                                                3⤵
                                                                                  PID:1424
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,6786435941843455846,15338441669301770686,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:14
                                                                                  3⤵
                                                                                    PID:2624
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6984,i,16720685254242273703,8278555389052700724,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:14
                                                                                    3⤵
                                                                                      PID:5860
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6996,i,1391268214697603881,10975875199366493782,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
                                                                                      3⤵
                                                                                        PID:6136
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,11490678212690906113,12269942998383951544,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:14
                                                                                        3⤵
                                                                                          PID:5232
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,13155886514255290500,14721083717255486328,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:14
                                                                                          3⤵
                                                                                            PID:5636
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,4825769670418271078,10150736159827686825,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:14
                                                                                            3⤵
                                                                                              PID:3552
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,2866021213958010658,8839992560285204837,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:14
                                                                                              3⤵
                                                                                                PID:5960
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,11264136051893463739,8598463499711612923,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
                                                                                                3⤵
                                                                                                  PID:3080
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,4587755963599716449,4506937110083695458,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:14
                                                                                                  3⤵
                                                                                                    PID:5192
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,14923136089487465661,20077238214247913,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:14
                                                                                                    3⤵
                                                                                                      PID:4140
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,14911926430990874329,2124330630911624963,524288 --field-trial-handle=2152,i,12076190181021911539,10147582253490152668,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:14
                                                                                                      3⤵
                                                                                                        PID:5648
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                    1⤵
                                                                                                      PID:4828
                                                                                                    • C:\Windows\system32\sihost.exe
                                                                                                      sihost.exe
                                                                                                      1⤵
                                                                                                        PID:1520
                                                                                                        • C:\Windows\explorer.exe
                                                                                                          explorer.exe /LOADSAVEDWINDOWS
                                                                                                          2⤵
                                                                                                          • Modifies registry class
                                                                                                          PID:1868
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                        • Boot or Logon Autostart Execution: Active Setup
                                                                                                        • Enumerates connected drives
                                                                                                        • Checks SCSI registry key(s)
                                                                                                        • Modifies Internet Explorer settings
                                                                                                        • Modifies registry class
                                                                                                        • Suspicious behavior: AddClipboardFormatListener
                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                        PID:5064
                                                                                                      • C:\Windows\System32\rundll32.exe
                                                                                                        C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
                                                                                                        1⤵
                                                                                                          PID:4744
                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                          1⤵
                                                                                                          • Modifies registry class
                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                          PID:3544
                                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                          1⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          • Modifies registry class
                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                          PID:4680

                                                                                                        Network

                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                              Replay Monitor

                                                                                                              Loading Replay Monitor...

                                                                                                              Downloads

                                                                                                              blocklist
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                              • Size 105KB
                                                                                                              • SHA256 f00ccd228daef1e7764629352f6409e7c411bd43dff6a14e6176681c9e065b7d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              protocols.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                              • Size 3KB
                                                                                                              • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              autofill_bypass_cache_forms.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                              • Size 161B
                                                                                                              • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              edge_autofill_global_block_list.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                              • Size 6KB
                                                                                                              • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              v1FieldTypes.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                              • Size 509KB
                                                                                                              • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              crl-set
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                              • Size 22KB
                                                                                                              • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              settings.dat
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                              • Size 280B
                                                                                                              • SHA256 bf89531d0e3eaeb6193d0eb94b0bec959bbc3dbf51f4b1135a0c78cf16adaa46
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              settings.dat
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                              • Size 280B
                                                                                                              • SHA256 92b3fe3c1f53c120f20ea643b0dc7ed8623f9d208eb1c4d7232edcc97f0b69b6
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              LOG.old
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                              • Size 352B
                                                                                                              • SHA256 753263ccc76eebbf67b4a4a48b4b714403bd5cddecf9e469ee3c0d3ea0e91882
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              LOG.old
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                              • Size 352B
                                                                                                              • SHA256 d8e26dddb3293c437e33e20617e4ef6391d751a1bf99f119f3ee441b2b92649d
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              LOG.old
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                              • Size 334B
                                                                                                              • SHA256 01f003a4bc3baa903c399f5c37549f77983df770c653e4d7974f3e1a683851d3
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              BookmarkMergedSurfaceOrdering
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                              • Size 6B
                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              the-real-index
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                              • Size 3KB
                                                                                                              • SHA256 464c3eb53423de29e7fab31a94e81f1b95ea7a2adde12bbf9bb20e8660abd5e0
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              the-real-index~RFe5836bb.TMP
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5836bb.TMP
                                                                                                              • Size 3KB
                                                                                                              • SHA256 79db61a83cf7e9b4cec8ac2292d3bb6d768d2b2acf54860a99f5f5bf220da5b1
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              SiteList-Enterprise.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                              • Size 2B
                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              Edge Profile.ico
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                              • Size 70KB
                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              HubApps
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                              • Size 106KB
                                                                                                              • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Network Persistent State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                              • Size 2KB
                                                                                                              • SHA256 a95ae902717c04a8be5bce0f07f3feeb19b4dbb224431b5849420161fa3be3de
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Network Persistent State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                              • Size 2KB
                                                                                                              • SHA256 10a959df17e62784b7bdef2b13fda9c74590ed214042191f7ab43746f2395223
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Network Persistent State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                              • Size 111B
                                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              SCT Auditing Pending Reports
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                              • Size 2B
                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              Preferences
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                              • Size 13KB
                                                                                                              • SHA256 26d6d8fe94f3f97c31697db9087bb2903197ed2b0d54c867aaf8d43a66c9773a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Preferences
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                              • Size 14KB
                                                                                                              • SHA256 bdcd955751236fc08581539b62908fd88d6529ae794870688d5015f80a83bd43
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Preferences
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                              • Size 29KB
                                                                                                              • SHA256 e22977a673fd6757dc1e119c80a30a759e7b7ed71a42992a6c45a51640ecbe05
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Secure Preferences
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                              • Size 36KB
                                                                                                              • SHA256 428c41ca4a8b86983cb42457bd04b76f5e631b9a48801f428b673a234664ba83
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              the-real-index
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9bcacea6-6543-4fa8-92d6-91e6836de9a1\index-dir\the-real-index
                                                                                                              • Size 2KB
                                                                                                              • SHA256 f91e6016dbe7e4a3649a86a65fa1b65ada276b36b00af0a540d8d2f6fff36eed
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              the-real-index~RFe5c7900.TMP
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9bcacea6-6543-4fa8-92d6-91e6836de9a1\index-dir\the-real-index~RFe5c7900.TMP
                                                                                                              • Size 2KB
                                                                                                              • SHA256 fc9e3572d1a809a7de5d7948e3ed5630b7c66f276991301dd8ab8aaf37817f09
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              index.txt
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                              • Size 371B
                                                                                                              • SHA256 946b634c52731e57cf275f725610d62f5a4623b7a626d130fcb6843a81436a12
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              sync_diagnostic.log
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                              • Size 6KB
                                                                                                              • SHA256 b8a7fa7033a8ab41ad27ae56bb136b559f9907961963db0b54b02aebe677511a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              CURRENT
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                              • Size 16B
                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              MANIFEST-000001
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                              • Size 41B
                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              domain_actions.dll
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.16\domain_actions.dll
                                                                                                              • Size 64KB
                                                                                                              • SHA256 cd4e81ff9db4c6b086b70b09919b9426ca1f2c05ec43c477e9ce99156be66399
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              data.txt
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.4\data.txt
                                                                                                              • Size 145KB
                                                                                                              • SHA256 7dd75cb36b4cc7c5f2df67bac823b9d9d2c3653172ff73ce6cccd39683970a08
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              OperationConfig
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                              • Size 22KB
                                                                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              OperationConfig~RFe58cd5d.TMP
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58cd5d.TMP
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              office_endpoints_list.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Local State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                              • Size 28KB
                                                                                                              • SHA256 dd0c793193158bf35aa531e9a86c2b9aa278b3c512170e09786901a0dee967ee
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Local State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                              • Size 18KB
                                                                                                              • SHA256 e50934cab6eae864118ad9ca85c8ad4c1ea199cc48c6c5e93f63c760e9d39ebe
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Local State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                              • Size 18KB
                                                                                                              • SHA256 4ac189e71f7c807ebfc0286aa93e2c8aafcfd1bcc97046e56634ae47ebd7e1ed
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Local State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                              • Size 8KB
                                                                                                              • SHA256 7736cac2fcab95b36e58929babd5d9ec73fe15f4c7892f0af11f7726c5201080
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Local State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                              • Size 29KB
                                                                                                              • SHA256 d5402814d7577c52bab33602df738c44ea0ed5d6d8f7309a61a17e980f5867e7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Local State
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                              • Size 8KB
                                                                                                              • SHA256 4a6c02dc1df7ffaf29f8ae872bc52857449157de262b617d82ce97465666a8f0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              crs.pb
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\crs.pb
                                                                                                              • Size 251KB
                                                                                                              • SHA256 576d77d3085ff9156298e60dee868364cabab7911edf6f9a4d3ad5f351d5059f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              ct_config.pb
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\ct_config.pb
                                                                                                              • Size 16KB
                                                                                                              • SHA256 dfc86083d2fa2463f12d1d096db6084c860cb8bfddc3d2cf8e818f65353241d6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              kp_pinslist.pb
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\kp_pinslist.pb
                                                                                                              • Size 10KB
                                                                                                              • SHA256 9314218dc6642ea1980d504ec45e23aa2b4e7775ef13f7c7121271dbd60b1df4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              safety_tips.pb
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                              • Size 163KB
                                                                                                              • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              typosquatting_list.pb
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                              • Size 3KB
                                                                                                              • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Advertising
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                              • Size 19KB
                                                                                                              • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Analytics
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                              • Size 4KB
                                                                                                              • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              CompatExceptions
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                              • Size 689B
                                                                                                              • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Content
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                              • Size 4KB
                                                                                                              • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Cryptomining
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                              • Size 668B
                                                                                                              • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Entities
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                              • Size 68KB
                                                                                                              • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Fingerprinting
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                              • Size 1KB
                                                                                                              • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              LICENSE
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                              • Size 34KB
                                                                                                              • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Other
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                              • Size 34B
                                                                                                              • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              Social
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                              • Size 754B
                                                                                                              • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              TransparentAdvertisers
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                              • Size 105B
                                                                                                              • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Advertising
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                              • Size 20KB
                                                                                                              • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Analytics
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                              • Size 3KB
                                                                                                              • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Content
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                              • Size 5KB
                                                                                                              • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Cryptomining
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                              • Size 32B
                                                                                                              • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              Entities
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                              • Size 106KB
                                                                                                              • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              Fingerprinting
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                              • Size 2KB
                                                                                                              • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              LICENSE
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                              • Size 66B
                                                                                                              • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Other
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                              • Size 198B
                                                                                                              • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Social
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                              • Size 3KB
                                                                                                              • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              Staging
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Staging
                                                                                                              • Size 36B
                                                                                                              • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              keys.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                              • Size 8KB
                                                                                                              • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              well_known_domains.dll
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                                              • Size 572KB
                                                                                                              • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              nav_config.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                              • Size 2KB
                                                                                                              • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 732B
                                                                                                              • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b3dcdcd6b2e9c81c76a63ec2591bcb0f840a13f6a1a8511425a6ffaa3aaa155b
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 132B
                                                                                                              • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 852B
                                                                                                              • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 492B
                                                                                                              • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 972B
                                                                                                              • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 612B
                                                                                                              • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 252B
                                                                                                              • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 f932e2485ac808efdae0f6f6b8cd67b48083a5dfde941b3a31f8d72306c93321
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 372B
                                                                                                              • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 18cd51fca26e4ed40a839f7e87eee395843ee3921c88afef4c904971ee8e55cb
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 f7cc07f561a3ab8babb617dcc30d7978cb816f0bff26da3c0b37978c192e4667
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 7fdab2897cbea5aab8f8927b53544c76138542d28015efbef37e179ec8c308f6
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 2KB
                                                                                                              • SHA256 d6556657588457a04d4dc0b29a3005674c011f754203aa50dc58780d298c2137
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              metadata.json
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 e99505afb93835d433016fc3c7e586e3643594914a27f111da3f4057a400bab1
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              f9a0f081-be7b-4b5d-90ad-d57c1bae1369.tmp
                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f9a0f081-be7b-4b5d-90ad-d57c1bae1369.tmp
                                                                                                              • Size 13B
                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              086dc309-4ef7-4dc4-b937-1bd4b59f4f51.tmp
                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\086dc309-4ef7-4dc4-b937-1bd4b59f4f51.tmp
                                                                                                              • Size 1B
                                                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              74543b19-97f5-4c61-b3c4-6ed1b90cc97c.tmp
                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\74543b19-97f5-4c61-b3c4-6ed1b90cc97c.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              content_new.js
                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2980_1885940440\CRX_INSTALL\content_new.js
                                                                                                              • Size 10KB
                                                                                                              • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              4a06e352-364b-449d-9160-5808d0ff35bc.tmp
                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2980_449552665\4a06e352-364b-449d-9160-5808d0ff35bc.tmp
                                                                                                              • Size 147KB
                                                                                                              • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              Submit Download

                                                                                                              sabnzbd.ini
                                                                                                              • Path C:\Users\Admin\AppData\Local\sabnzbd\sabnzbd.ini
                                                                                                              • Size 35B
                                                                                                              • SHA256 c77e15d85034ac6d479c70ac941cd5a014539a0f7af5adbe8a7b4e607ecf027a
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA21371
                                                                                                              • Path C:\Users\Admin\Downloads\complete\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA21371
                                                                                                              • Size 19B
                                                                                                              • SHA256 cbe5d41157ffebdff040c961827abb3ce24953f7f3322cbcb763d936141f0295
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1050711805\manifest.json
                                                                                                              • Size 132B
                                                                                                              • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1341814703\manifest.json
                                                                                                              • Size 43B
                                                                                                              • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                              • MD5 SHA1 SHA512
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1391319821\manifest.json
                                                                                                              • Size 141B
                                                                                                              • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1500551717\manifest.json
                                                                                                              • Size 72B
                                                                                                              • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1708574104\manifest.json
                                                                                                              • Size 160B
                                                                                                              • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1777750172\manifest.json
                                                                                                              • Size 52B
                                                                                                              • SHA256 36565d2ebd6c48537cb3e6fe24ac74ca68dda18b3f0f8be13f47d01aec181d62
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1791000220\manifest.json
                                                                                                              • Size 135B
                                                                                                              • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_250225974\manifest.json
                                                                                                              • Size 135B
                                                                                                              • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_26231339\manifest.json
                                                                                                              • Size 102B
                                                                                                              • SHA256 0b11bc370854bd2e625deb04fdfc53ba444e4af63ba831f9de785b44464b59b9
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_437191898\manifest.json
                                                                                                              • Size 79B
                                                                                                              • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_52722680\manifest.json
                                                                                                              • Size 165B
                                                                                                              • SHA256 605fad4274a41aa5139f0339fd3f0ca2483c9507cad75df8269c01c0d75aeb4d
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_528547130\manifest.json
                                                                                                              • Size 113B
                                                                                                              • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_730206535\manifest.json
                                                                                                              • Size 119B
                                                                                                              • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_786304347\manifest.json
                                                                                                              • Size 238B
                                                                                                              • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_862176103\manifest.json
                                                                                                              • Size 177B
                                                                                                              • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              manifest.json
                                                                                                              • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_958980505\manifest.json
                                                                                                              • Size 160B
                                                                                                              • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                              Submit Download

                                                                                                              memory/4680-909-0x000001F70E000000-0x000001F70E100000-memory.dmp
                                                                                                              Download

                                                                                                              memory/4680-975-0x000001F741B30000-0x000001F741B50000-memory.dmp
                                                                                                              Download

                                                                                                              memory/4680-997-0x000001F842D20000-0x000001F842E20000-memory.dmp
                                                                                                              Download

                                                                                                              memory/4680-1018-0x000001F731500000-0x000001F731600000-memory.dmp
                                                                                                              Download

                                                                                                              memory/4680-998-0x000001F8429F0000-0x000001F842A10000-memory.dmp
                                                                                                              Download

                                                                                                              memory/4680-974-0x000001F841DF0000-0x000001F841E10000-memory.dmp
                                                                                                              Download