Analysis

  • max time kernel
    148s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/07/2026, 04:34

General

  • Target
    2026-07-06_30569ee01601ad1c0a1b97f22bd109a3_coinminer_glassworm_icedid_luca-stealer_njrat_remcos_stealc.exe
  • Size 15.2MB
  • Sample260707-e7gsvaez4l
  • SHA256 b130367076c98c9d12e8a2f2d6508d3c17ef19f282be58ee801e31ffc9734ec3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 37 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-06_30569ee01601ad1c0a1b97f22bd109a3_coinminer_glassworm_icedid_luca-stealer_njrat_remcos_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-06_30569ee01601ad1c0a1b97f22bd109a3_coinminer_glassworm_icedid_luca-stealer_njrat_remcos_stealc.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:4728
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://localhost:8447/installer/
      2⤵
      • Drops file in Program Files directory
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5072
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2d8,0x7ffec417c188,0x7ffec417c194,0x7ffec417c1a0
        3⤵
          PID:2616
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,6066088118033721942,8406675886330308210,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
          3⤵
          • System Time Discovery
          PID:5868
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,12462984455493120276,1217020410162711803,262144 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
          3⤵
            PID:4344
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2100,i,11748191848823060045,12207861082639480630,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:8
            3⤵
              PID:4936
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,965152569571004177,5414170241700196158,2097152 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
              3⤵
                PID:5116
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,16109520624570323197,11977456594593966731,2097152 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
                3⤵
                  PID:4000
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,15844883186311376387,4005165083698991890,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
                  3⤵
                    PID:860
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,10335314054587167850,2568316602984888198,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
                    3⤵
                      PID:3288
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,7922966420504317075,13720460330008233690,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                      3⤵
                        PID:5368
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,7922966420504317075,13720460330008233690,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                        3⤵
                          PID:1036
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,34803107836912681,16407943602296051489,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
                          3⤵
                            PID:2928
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,13106819000877005731,8158879113654451594,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
                            3⤵
                              PID:3816
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,11257686253736577433,17774546207768194096,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:8
                              3⤵
                                PID:3540
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,5994949222261130816,108651278089674180,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
                                3⤵
                                  PID:2220
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,12162099440984808733,6250744755364131316,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=700 /prefetch:8
                                  3⤵
                                    PID:4664
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,11729729981042689723,10569330525762060488,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
                                    3⤵
                                      PID:5412
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,12864167795769228104,2643981123327125733,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
                                      3⤵
                                        PID:5700
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,1865544345256791794,6539868585224666943,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
                                        3⤵
                                          PID:4044
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,6843127402875327658,13874327660216569122,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
                                          3⤵
                                            PID:1812
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5132,i,10519072923026953403,13191246813240386321,262144 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
                                            3⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:2852
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,2634821488975634402,4503258914479773161,524288 --field-trial-handle=2344,i,6176259259043826481,6523189198534311502,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
                                            3⤵
                                              PID:3884
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                          1⤵
                                            PID:3748
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                            1⤵
                                              PID:5604

                                            Network

                                                  MITRE ATT&CK Enterprise v16

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  manifest.json

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_1069358772\manifest.json
                                                  • Size 53B
                                                  • SHA256 b2574db59e08ca01a3df98d2fb2d691981bf8167321f9789caf4e456364a46fe
                                                  • MD5 SHA1 SHA512 TLSH

                                                  llm_user_input_extractor_config.json

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_115833946\llm_user_input_extractor_config.json
                                                  • Size 4KB
                                                  • SHA256 2056ee7ed0e7adb69344c93a024158ee4e2332ecd50d183dbad7595c4d588ed9
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  manifest.json

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_115833946\manifest.json
                                                  • Size 165B
                                                  • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                  • MD5 SHA1 SHA512 TLSH

                                                  manifest.json

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_1736331707\manifest.json
                                                  • Size 117B
                                                  • SHA256 2679e1e5c5fbbdca9b0c5081ca7128c4c4957ce8e19f4e34736e7e41c9992169
                                                  • MD5 SHA1 SHA512 TLSH

                                                  hyph-as.hyb

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_237720219\hyph-as.hyb
                                                  • Size 703B
                                                  • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                  • MD5 SHA1 SHA512 TLSH

                                                  hyph-hi.hyb

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_237720219\hyph-hi.hyb
                                                  • Size 687B
                                                  • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                  • MD5 SHA1 SHA512 TLSH

                                                  hyph-nb.hyb

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_237720219\hyph-nb.hyb
                                                  • Size 141KB
                                                  • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  manifest.json

                                                  • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5072_237720219\manifest.json
                                                  • Size 82B
                                                  • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                  • MD5 SHA1 SHA512 TLSH

                                                  aspnetcore-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\aspnetcore-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 efeef8b82a915ada3c1c5a87d2c9cfc83783766f97c03c4ac333e20750f0f91b
                                                  • MD5 SHA1 SHA512 TLSH

                                                  billing-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\billing-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 b67e172871ceff913049a23335fa361f69384abedc82ddc36758aee1ce40ee53
                                                  • MD5 SHA1 SHA512 TLSH

                                                  drweb-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\drweb-addon.inf3
                                                  • Size 3KB
                                                  • SHA256 260eb82f51ce4d68ba5f25ac33a5fced43d31d7c370864924581df424e7f9916
                                                  • MD5 SHA1 SHA512 TLSH

                                                  kav-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\kav-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 40291c54e9b3690013dacbc5d39eddc95c9fd04ec9dbedeb0f94b98beb178fd9
                                                  • MD5 SHA1 SHA512 TLSH

                                                  msodbcsql-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\msodbcsql-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 1c05a74c732d0248140a941ce6891b58ba8fc9a4472346258cfed3d5540059bb
                                                  • MD5 SHA1 SHA512 TLSH

                                                  mssql-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\mssql-addon.inf3
                                                  • Size 3KB
                                                  • SHA256 2dafea422f54a1b3cbc6ae6416c4e3efedb68d54ffae6f0a523581ea4421252a
                                                  • MD5 SHA1 SHA512 TLSH

                                                  nodejs-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\nodejs-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 d6f23535c667d1111b1ac3a20f0f823c9e8f3456d2eefe3e6e39aa48cf409a33
                                                  • MD5 SHA1 SHA512 TLSH

                                                  panel.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\panel.inf3
                                                  • Size 8KB
                                                  • SHA256 d4a0a9aeac080ae5ecb1381380040c3282a01381f02ab98f92b286dd2cb73189
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  php-5.6-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-5.6-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 d928500ac9776ffbd0b6da627864f1f70843cdaea15c6f806163c44b7371c878
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-7.0-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-7.0-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 5669d7b73ca59d4aab157d8c58486139ee98959c9e5d20f27338a56d9cd117a5
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-7.1-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-7.1-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 472940d327261c70b488949b699f4c55d18160000149f07837e7908507fb600c
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-7.2-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-7.2-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 8021bad1bd4e823c39fd20315f7ebe969edde533e46791bb3c263908e3d07ae1
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-7.3-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-7.3-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 2e1dcb1b7b7762a72fef4e3147dcc66d2fd71c107e6dec5e385329d002720b82
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-7.4-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-7.4-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 2ea42d493786933fccc2945dbffc71f17f47e939fb1c9dc102d60adccb0bf289
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-8.0-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-8.0-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 bfc9faaac7f5c2040178d8434a510fa85e23ae7db288dd0ca76ea806418bae1c
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-8.1-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-8.1-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 daaea5d0c0df24d41624b93a1e10ebe3f83557c2ba330cba10e92b28e9f77bee
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-8.2-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-8.2-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 8a9fb797fd44f3c1e088be6c64b7c67824e0115a5bf316534ea179256865b75d
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-8.3-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-8.3-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 5407990849c97c76e24b28581791096dbc40f50f8a280392dd79e148812dd44c
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-8.4-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-8.4-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 350f57fc7fc4561a2ce14ec7d14ab0c7dd00451f03999e0c9fd5edef92846335
                                                  • MD5 SHA1 SHA512 TLSH

                                                  php-8.5-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\php-8.5-addon.inf3
                                                  • Size 1KB
                                                  • SHA256 e105ec9938905bf8dc8e287b0bffb5461d56a754dce9b4598e1e1db3b6dd0ddc
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.36_6324\release.inf3
                                                  • Size 2KB
                                                  • SHA256 a46334640b86230a09edbe7c505965fe4763ffac611ff6d8420da4a7bf4ca613
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.37_6686\release.inf3
                                                  • Size 2KB
                                                  • SHA256 501baed67a76183c3eb6c379b0f6e17a60cfe55a34c276641dcbda3c4c0f5ee0
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.38_7167\release.inf3
                                                  • Size 2KB
                                                  • SHA256 65da9da46ff2c1d131cb80f395eaf77555eb72130e708ced3c62f461099c6ecd
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.39_7558\release.inf3
                                                  • Size 2KB
                                                  • SHA256 2d40af732caaf912f4f72b6a48423e458db7ed41e3211d5c7cc966c39f9271ab
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.40_8022\release.inf3
                                                  • Size 2KB
                                                  • SHA256 a428d62b92592a7758f87f6303de5df47ad5cc16819dac49e7cbce0a787981e9
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.41_8197\release.inf3
                                                  • Size 2KB
                                                  • SHA256 700a86f2e16413eebfaa6d6604a55ac49a808f14bac10216f56bf219ac43ffa8
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.42_8472\release.inf3
                                                  • Size 2KB
                                                  • SHA256 dd8367f7b9b6e4f7503604bdbd84cf840f83362ec6ebba25ff0d49e2152eaa7c
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.43_8703\release.inf3
                                                  • Size 2KB
                                                  • SHA256 a5e21ba772d79fa1e0579bd7cab61cca168ca3a166184544ee6a7384cd08da43
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.44_9078\release.inf3
                                                  • Size 2KB
                                                  • SHA256 7195b10920e2c00e069bae32714d066358b48e715ebc69bf73f814cbc0a79916
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.45_9299\release.inf3
                                                  • Size 2KB
                                                  • SHA256 17c81c2e74cce73dcd2ad298ca14e0b69f79572cef2919fa3341de760ae15dd9
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.46_9775\release.inf3
                                                  • Size 2KB
                                                  • SHA256 cb1f9e12de1a21da0c45024d3cc7d94b87769d181d71d6e4fedf0da525b561d4
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.47_10005\release.inf3
                                                  • Size 2KB
                                                  • SHA256 ba0072057f24ceee6a0776f2b11831336cef9a0b269848f30f483900b6caba6e
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.48_10183\release.inf3
                                                  • Size 2KB
                                                  • SHA256 9d11aec5340e64406bc143add73d7abde98a76441a583d485ec8330aece58ab4
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.49_10759\release.inf3
                                                  • Size 2KB
                                                  • SHA256 7dd7dbc8e3ae9d7103b7be23e1f019650479f77dea290645fe5707a0b8f3c86f
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.50_11079\release.inf3
                                                  • Size 2KB
                                                  • SHA256 629cf4624a8439419aa8aeeb736fd3fd40b88d47e72e26b8c16b7cdf92851be2
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.51_11495\release.inf3
                                                  • Size 2KB
                                                  • SHA256 ec45f8ecad7452058f3dfdd0167c63c5bd17ae63e17d979bb8c5e99ad1bcedac
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.52_11753\release.inf3
                                                  • Size 2KB
                                                  • SHA256 f698960f615a3b91f948f5afff39f399f9466ab89bda8446b7061587d76d049b
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.53_12045\release.inf3
                                                  • Size 2KB
                                                  • SHA256 9c50e483a5229ce9b102c9db739baddc7b178015229c30c56337bb461b12c4cb
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.54_12607\release.inf3
                                                  • Size 2KB
                                                  • SHA256 c02a3756a2d4500eddf5d70ad00ca341b9622118e300fcbb58c6e5a7cc795021
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.55_12738\release.inf3
                                                  • Size 2KB
                                                  • SHA256 deb50341c2e8625467fa5236aeb0e9eaec52d1ba8202f96a5b8fd5ecea95548c
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.56_13177\release.inf3
                                                  • Size 2KB
                                                  • SHA256 621b5ad3f8326d917d7e8d35ce1f863a66c1623057a99a237f6f83f056e0c062
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.57_13503\release.inf3
                                                  • Size 1KB
                                                  • SHA256 ef6763bc279ad9af47fe87412b63feb6d4f12781fc057f3890f9ba8ab4c778f8
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.58_13749\release.inf3
                                                  • Size 1KB
                                                  • SHA256 171022f80bc8d75f8ff775b6d2c65ee3fb3fdec8f345a6c8a7679a59a1fba125
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.59_14022\release.inf3
                                                  • Size 1KB
                                                  • SHA256 2ff40013b7e3229cdb2d0e65fe7988fed270da54de4de238410ef3bd054ccb82
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.60_14384\release.inf3
                                                  • Size 1KB
                                                  • SHA256 9f29891d2a8588c2cd5e98301eea0626a3a88bface5ae28ddf860369bf2e10a7
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.61_14911\release.inf3
                                                  • Size 1KB
                                                  • SHA256 6e3b35a231ad788531607828aecb9bec16f767deeb9a45e5a86e5c3c22c54383
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.62_15144\release.inf3
                                                  • Size 1KB
                                                  • SHA256 0457a1390266767b6c8755a0cf3e0964f241c9ce09a2170ab27cd9260bd7322d
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.63_15508\release.inf3
                                                  • Size 1KB
                                                  • SHA256 0c792638c2a27ad5280f623d2c71021a621e2990ef2d5f186e299b0ba06e723e
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.64_15680\release.inf3
                                                  • Size 1KB
                                                  • SHA256 f3cd0334244aff584783c2514ebed33af20baa722f6f68ec4c05397fdf757999
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.65_15919\release.inf3
                                                  • Size 1KB
                                                  • SHA256 8b12b478845bedda307e31208f720a04303792cb2ae5c2422360dbeb61596a8a
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.66_16134\release.inf3
                                                  • Size 1KB
                                                  • SHA256 ceba402e457d23f2913fb3c14107c40cb55e8f9cef1477cf9c6d70601067ea7c
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.67_16409\release.inf3
                                                  • Size 1KB
                                                  • SHA256 2592fc48c24af6bb5a522193bc36a6038bd2dbbaba7f93994f52f5a2332b9b11
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.68_16616\release.inf3
                                                  • Size 1KB
                                                  • SHA256 8cc0eb5c6a0b214c2aa89fa8dcaac2bcee2e6689ba1834acdd2da8a78d0d4ceb
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.69_17010\release.inf3
                                                  • Size 2KB
                                                  • SHA256 68840b11f9e82184007750d8e2f74d1e88006340b3e96977d21860776ea0ef5f
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.70_17357\release.inf3
                                                  • Size 2KB
                                                  • SHA256 f3937bdcd8b7246c518691c698aa20b0b97cd853914cf8cfaff99c9c680da035
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.71_17351\release.inf3
                                                  • Size 2KB
                                                  • SHA256 9e0c541d33b4e71c4d88c7d15c32196290f8e5242ef7466b6ed45eb27af4f8ca
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.72_17583\release.inf3
                                                  • Size 2KB
                                                  • SHA256 6e6d9fadcffda0e10b8798fb4a5cac08602b99634f22154dde0f4af1e01cd3df
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.73_17725\release.inf3
                                                  • Size 2KB
                                                  • SHA256 ccc5aa93f03d3a284ca2162117dc47c97752ccd8f79ad2e84029a027e361455f
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.74_18022\release.inf3
                                                  • Size 2KB
                                                  • SHA256 5e12330059a12f8d41a0bb3fdaa30c25738d7efc21c57eb5d3cb9921c9d8c6ea
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.75_18480\release.inf3
                                                  • Size 2KB
                                                  • SHA256 e8eedcaff839b254d46b68bb2ab996e96ce4a3828db8fda0c63cc74be04fad33
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.76_18805\release.inf3
                                                  • Size 2KB
                                                  • SHA256 f6f346f99e87bb76708fcd9134c9023a7faed4fdc0f6f2e6b4e71e5a5262b9f8
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.77_19096\release.inf3
                                                  • Size 2KB
                                                  • SHA256 a9f87ea5cd97d24e3c465651da2bcb794095b410ecfa348f7c77ea052bf64945
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.78_19254\release.inf3
                                                  • Size 2KB
                                                  • SHA256 09ca7ac6357f34efdab41f5efa6fa7d67045a0353d9746217eb5e4689b6d753c
                                                  • MD5 SHA1 SHA512 TLSH

                                                  release.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\pool\release\PLESK-WIN_18.0.79_19338\release.inf3
                                                  • Size 2KB
                                                  • SHA256 f8f47de8d2c36c825b0e1df4348cadb0eeb70877c2fe3e81251fb977af1123ec
                                                  • MD5 SHA1 SHA512 TLSH

                                                  products.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\products.inf3
                                                  • Size 7KB
                                                  • SHA256 0c264470946d69d2681968b6d6e07d4b2d328b1422c13cca05bf248de6ed3cef
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  sav-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\sav-addon.inf3
                                                  • Size 2KB
                                                  • SHA256 ca1664be583ef7deb8dfe4b28e5fe840832776b12d206e054073585b0c2e337d
                                                  • MD5 SHA1 SHA512 TLSH

                                                  sitebuilder-addon.inf3

                                                  • Path C:\ProgramData\Plesk\Installer\cache\sitebuilder-addon.inf3
                                                  • Size 33KB
                                                  • SHA256 55ec99e3d81488ccd04134b5b1b2c5ad1e67062b064c30eb6d541cf988b9cdc4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  settings.dat

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                  • Size 280B
                                                  • SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
                                                  • MD5 SHA1 SHA512 TLSH

                                                  settings.dat

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                  • Size 280B
                                                  • SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
                                                  • MD5 SHA1 SHA512 TLSH

                                                  BookmarkMergedSurfaceOrdering

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                  • Size 6B
                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                  • MD5 SHA1 SHA512

                                                  BrowsingTopicsState

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                  • Size 414B
                                                  • SHA256 0b8c978d71f489ed6b636aeef36f28908c338508c9bbf630d09329be304fa139
                                                  • MD5 SHA1 SHA512 TLSH

                                                  SiteList-Enterprise.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                  • Size 2B
                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                  • MD5 SHA1 SHA512

                                                  HubApps

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                  • Size 106KB
                                                  • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Network Persistent State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                  • Size 2KB
                                                  • SHA256 308e0606dab022827a8b9ac77dcd1091c22a527b76f96dc2bfd8a52d4be565d4
                                                  • MD5 SHA1 SHA512 TLSH

                                                  SCT Auditing Pending Reports

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                  • Size 2B
                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                  • MD5 SHA1 SHA512

                                                  Sdch Dictionaries

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                  • Size 40B
                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                  • MD5 SHA1 SHA512

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                  • Size 16KB
                                                  • SHA256 915b7041efc776d29fc709eacebdd98d1f41ef7c318ccaae34b95ddb68824ff5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                  • Size 15KB
                                                  • SHA256 413d2fe91b0953d7c91992bcf170a4a4d100e756f940ea1050bbaa24d62ec424
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Secure Preferences

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                  • Size 35KB
                                                  • SHA256 9cbcbaac2dce2a068deb36d5469adaf3eb927776b34c6ab23ec67cb04bf15702
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  sync_diagnostic.log

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                  • Size 23KB
                                                  • SHA256 11e120f3bce19769e9f95cce963c70f90e215cd567baa3d980483b91d4829856
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  data.txt

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.17\data.txt
                                                  • Size 149KB
                                                  • SHA256 fac5ec341b2f4b9c98a8bd7ec852589ee81e4938812666568752f36ae4f115ab
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  office_endpoints_list.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
                                                  • Size 9KB
                                                  • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 33KB
                                                  • SHA256 a94232742fff1e4e30203f028a4e1e09f7e79ea9f14439c27017630f76538fe2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 25KB
                                                  • SHA256 73844212ae637ebfda2ae3d7f0c764310ab32a386c28082c1e13281347fa8242
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 28KB
                                                  • SHA256 29613c455035a14e98f8a96c4773819dbf85bc8fd3e59683d3e418623667c431
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 28KB
                                                  • SHA256 a2845398b749a4efe317e9138ce0b52356a48971d1dd27b0d55d17a1d6c118fc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  Local State

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                  • Size 25KB
                                                  • SHA256 d912df70511383cfeb23acbb7eae4d037a9974496a6510bff421ba462826494a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  typosquatting_list.pb

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.7.1.2\typosquatting_list.pb
                                                  • Size 668KB
                                                  • SHA256 285655c896535d1813cc24522c142e3348d708ae63455f8d1ad51f90ed77cb60
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  metadata.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                  • Size 2KB
                                                  • SHA256 17ef1b57bf9bc0b2392f1aced119ab25b81775c37e80ddd3d6573b74614d19e7
                                                  • MD5 SHA1 SHA512 TLSH

                                                  metadata.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                  • Size 2KB
                                                  • SHA256 14f35ec7b58aed84db5865e482d1758b3ab8f73734f321dc1dfe70f8d6c41133
                                                  • MD5 SHA1 SHA512 TLSH

                                                  metadata.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                  • Size 2KB
                                                  • SHA256 515863988c367e2fb6ebc8b877d02cd863f624b7796eddb56364e144028f2925
                                                  • MD5 SHA1 SHA512 TLSH

                                                  metadata.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                  • Size 2KB
                                                  • SHA256 163c97b9c6c9ec9bd4b1bf9578bc2153be63f63be32e306137079480f51139b0
                                                  • MD5 SHA1 SHA512 TLSH

                                                  f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
                                                  • Size 152KB
                                                  • SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                  metadata.json

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                  • Size 132B
                                                  • SHA256 9ba64fdf12690bc24af750ffc8e144edc5fda28e40b47c6637e36760d82fc03a
                                                  • MD5 SHA1 SHA512 TLSH

                                                  5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                  • Size 2KB
                                                  • SHA256 53c10947f764a8768f9eab836d9c69901ba07a524bb2b10bb0132b21ace68e3c
                                                  • MD5 SHA1 SHA512 TLSH