507e14d374d7a1498ce37d4df7dece4528c209f4b7841e87d4cf187af4993f1a

Analysis

user interaction
yes
max time kernel
142s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
spoooofaaaa.rar
Size 2KB
Sample260831-ppgp8svsdv
SHA256 507e14d374d7a1498ce37d4df7dece4528c209f4b7841e87d4cf187af4993f1a
MD5 e2629da4cbe3abc942e635896f251a98
SHA1 24c7bece42cfb8cb5114b36e787eb81e504d0e30
SHA512 d120512a2dd990cb06de9ba75ee557be17b951a00758a1dc333cc43bf3045ebef6fddbc27b2dc7c1992d96aa6bdeeb4249bddffb7303619ea019b922918fe78a
TLSH
T1D6515E919F3D1F3370959A6C8356D879832810CB5700F8ABBB974450B6C544FFB2C59E
MD5 SHA1 SHA512 TLSH

Score

6^/10

defense_evasion discovery execution ransomware

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
42	discord.com
50	discord.com
58	discord.com
35	discord.com
36	discord.com

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5584	cmd.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1144	msedge.exe
1536	msedge.exe

Delays execution with timeout.exe 1 IoCs

defense_evasion

pid	Process
2676	timeout.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings	7zFM.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
2628	NOTEPAD.EXE

Runs net.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
556	7zFM.exe
556	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
556	7zFM.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeRestorePrivilege	556	7zFM.exe
Token: 35	556	7zFM.exe
Token: SeSecurityPrivilege	556	7zFM.exe
Token: SeSecurityPrivilege	556	7zFM.exe
Token: SeSecurityPrivilege	556	7zFM.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
556	7zFM.exe
556	7zFM.exe
556	7zFM.exe
556	7zFM.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
556	7zFM.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 2628	556	7zFM.exe	89
PID 556 wrote to memory of 5584	556	7zFM.exe	90
PID 5584 wrote to memory of 6076	5584	cmd.exe	92
PID 5584 wrote to memory of 2004	5584	cmd.exe	93
PID 2004 wrote to memory of 5628	2004	net.exe	94
PID 5584 wrote to memory of 3208	5584	cmd.exe	95
PID 5584 wrote to memory of 2676	5584	cmd.exe	96
PID 3208 wrote to memory of 5692	3208	msedge.exe	97

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\spoooofaaaa.rar"
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:556
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\7zOC2210FBA\README.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:2628
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\7zOC221228B\zyntheria spoofer.bat" "
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:5584
- - C:\Windows\system32\mode.com
    mode con: cols=80 lines=30
    3⤵
    PID:6076
- - C:\Windows\system32\net.exe
    net session
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2004
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 session
      4⤵
      PID:5628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/Uya4QPCf2s
    3⤵
    - Enumerates system info in registry
    - Suspicious use of WriteProcessMemory
    PID:3208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x368,0x7ff917d3c188,0x7ff917d3c194,0x7ff917d3c1a0
      4⤵
      PID:5692
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,3413755328919054350,17552178895865315392,262144 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
      4⤵
      PID:3392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,8362530748972306413,16257614785848297674,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:11
      4⤵
      System Time Discovery
      PID:1536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,16262068115777224575,15919313948907002109,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:13
      4⤵
      PID:1808
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3616,i,11948407892019047344,8308976590679649711,2097152 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
      4⤵
      PID:2392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3636,i,17567209753289251119,8816159019524760331,2097152 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
      4⤵
      PID:4832
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4332,i,18413357895109748936,10470305835369259844,2097152 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:1
      4⤵
      PID:4632
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,147255738747368910,15822250495144563994,2097152 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:9
      4⤵
      PID:1768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,10127501877956435675,6869362178819799210,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:14
      4⤵
      PID:5644
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3612,i,15101437081884687985,2574096784022053900,2097152 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:1
      4⤵
      PID:1700
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,12166917871000163942,13418408868445957870,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
      4⤵
      PID:2672
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,7705923710469060541,9749420758434888676,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
      4⤵
      PID:5888
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,11500146805143420953,13602891229084886278,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:14
      4⤵
      PID:1968
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,11500146805143420953,13602891229084886278,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:14
      4⤵
      PID:1708
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,5634729185903430602,14711791998130268485,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
      4⤵
      PID:1372
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,16720705939531797063,3547135060631675363,524288 --field-trial-handle=2344,i,2011694885786518802,1761131416471907245,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:12
      4⤵
      PID:1312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
      4⤵
      PID:5056
- - C:\Windows\system32\timeout.exe
    timeout /t 3
    3⤵
    - Delays execution with timeout.exe
    PID:2676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x32c,0x7ff917d3c188,0x7ff917d3c194,0x7ff917d3c1a0
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,11139549294041865512,9880504172425121471,524288 --field-trial-handle=2364,i,6070123734996732494,2059674781913273545,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1920,i,9427457651120785613,831712455373077578,262144 --field-trial-handle=2364,i,6070123734996732494,2059674781913273545,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2732,i,16383191954251868268,8003017055937623959,524288 --field-trial-handle=2364,i,6070123734996732494,2059674781913273545,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:13
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,17630531420245700732,6192596164064993605,524288 --field-trial-handle=2364,i,6070123734996732494,2059674781913273545,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:14
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,17630531420245700732,6192596164064993605,524288 --field-trial-handle=2364,i,6070123734996732494,2059674781913273545,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:14
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,1222752451991257282,18269038217182194241,524288 --field-trial-handle=2364,i,6070123734996732494,2059674781913273545,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
  2⤵
  PID:3080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 63f289e8262db15cd25c1ecd052095297e662c06455ef5ab891080a1d572241b
MD5 17a3196a34f5c62111c332173298fae4
SHA1 f45cf19ad5f15242164fca003a7639a5a73a5e23
SHA512 0f7cddcbe8f553a369088dc41e5dae7573e60c6fd9892d0e0f0a1effdde95205afbb9cd8e777497c1aa5c3672a6217d0f20adb6a138c9bfd7d82e3db63d08172
TLSH
T179D0A7A012E17E1EF6183535B1911268A25558515D5556568000A52E9E2F2D3069B0EA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsSiteData

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsSiteData
Size 28KB
SHA256 6bd856d68d3a2de856e64d766e2b9baacbe909d793087e84880050cb36bab1e1
MD5 faa1297eb819d33082266d374c1d492d
SHA1 91a6155f8d8c05c277e8460a7268de023f8ceec5
SHA512 120a94377078e09c960d070f09a417479708753b708a3bb148c118fa48faf12d85352317712b9d95b59d15cf5c90f1c0490f703ee4524c6bcd7f1c427e499ef3
SSDEEP 12:TLiqiw5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLiq5byqkiXBzlRr6hkc6UwccI5fBG
TLSH
T149D29B8A5F32E951CAE0D63BB0C0866A9B34A2198BC26D531B1110328FC3401983B47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bd2609ba03b7ad07431ca89ada743c9fd6df3e0e6b62ee88c8b680f9a37f4ba2
MD5 64cf18251adc336a20f5a5753e8d44b6
SHA1 cab21e35acd46775f15e50ce09591fb9d5b74eac
SHA512 d6075da7f0f481515e0790dd4b80bb17ff28b65d321b9d9acb5d991e214bd39fed82bc38b43e9f1f97f77adcfb7ed7d16b49126b3db56855d2d51ec58d595eb8
TLSH
T172E022ADCD20ED7B08FC0B6C90904B0AFA5003573A40485B7B3DA10D8FB4A3A4286C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 1535a8789f31ae698f4f416d6f9131c1a1c0ea4751c192199eec5c87d73494fc
MD5 a18ad40f9bd62a8828178680374ffdd1
SHA1 939a103382f1bf04ceaef5cac3a54b9040fee4ac
SHA512 75fd4dff9ed50f14c615d61dba129735658b5e2ec83724a48b18d331e4ef1333006650998b4382147bb259abdd4263481e12f3935d2e740761d6c8c79756dd9f
SSDEEP 384:iMO5xhQPCSKGrHNmE2pswpYnUsRMzlziuJkesbTKCWL:iXUC4rtj2iwQd+zZ9Rsb+
TLSH
T17113603C76338F26CBE247BC0ABB0E75233CD829C5C91AE70375750943167A29ADE981
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 63af5c8eab601cb19530c26687c055ee5da9d614e2836f67cd49005cab4aa310
MD5 47a4dd73c8ea72f42e8171e395fa2bce
SHA1 be2d4b93d082caf77dce3de640008d9f51328013
SHA512 b858861e1ea28a6f90db5b4bd4a53c93262418878ec8e982ea684286ff7d3a19673c7313a237a9bfb1fdf3d76f158a91ff26ecdcea452eff84221bcce4501f2e
SSDEEP 1536:n6L/7QL/oSA/pCtOJqjBuWXc80+KpJRlLHgZP/FFv2TbNk7BXqgPKKlXw/Z2WePp:6L/UL/lAkIDg5mTbTgPK3R8OifU8
TLSH
T12044B5F74551542ACBB802F593033A3DD277414D3CDAEDEAE17A0C852829B32B6B8ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 2.0MB
SHA256 1eda30c9bfc1c7152b5f0c87e9f77b6da94884c7c9968f36b2544a010ab036f3
MD5 34d8a7aa76a87c033b93c69b863de4c8
SHA1 883aa05d535811c0197f4c6d7c433a64729f87f0
SHA512 e9fdda6732a1e0e3cc0105453df1d9c5759b7f99f86cb8d03c00e328c814fc28c18c7c6805a96e0f3804fb730062f264d88b2d538a75b16ce444caed9e6beb6c
SSDEEP 3072:bv9G+HN42FBiHK1LOLa4j069ZqKSqC4r1Zkkk8brHdbTH0Gm30/hEYrMiYM2My:bQ8u2FBF1LvAxqKpghEGWGM2N
TLSH
T1FCA54ADB8B645AD1DBA7DFB0BDC0CC297E7421C1AACAE083A442C77A14C37C63A5558D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 3.7MB
SHA256 13f5240abfc5b696a8bd1817a775a18c0f831e89035e284bff43ac8365fe1104
MD5 6fdae1a0545dbb946b3e2b5455897ca4
SHA1 b7890fa1a51c53a89398d71f2bb76a2a82ad39b0
SHA512 4723bf473aef89d3ee3ce42885dda7eca32243ac806c7044830ae3723c160772004aa76c4d8173e2211ec5448bd02c0051401f86891b886eef7b4c72049d9f24
SSDEEP 24576:cHAIZYfNbAojX3W7lB6KXxQeZ3tH5WF/eJxKqr6L:cgIyFb1jWD3XxlHUF/eLv
TLSH
T135068DEDC9785883CD63AA30B5F0E9477C7413C3F994C1D6889CC584026BBC5BFAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 3fa96545231b2e2d543631cd40ab9b358e66c3b605102739e2866830bbed256d
MD5 b393af780646454ba738bd470b0b818c
SHA1 83a68ac784e3e7a42692b66581020abd2d096d41
SHA512 403447db9f98a29b8af654f01a84cf6aa736d6805e08e0f513fd85da69268bfb988f1cc79d00f9290640e615785053741968aa92eb20d06286651abfbd4f93d2
SSDEEP 96:pHr3T3eN0uDWCIl2iK0T/ZC8u08C/ISQFyUviY+uk6V4FZx2Ji7aRJl:pHr3T3eN0uDWCIl2iK0rZvu085SQFyUv
TLSH
T130A1A52217BF8B81DB1B7FF506F2619B31FE92854AA71FD91C4860F6B00BF4D5499140
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5c236e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5c236e.TMP
Size 2KB
SHA256 2cfc168d2df8204b249d7764605c9fd1b8ac3d4f914da3f6314628aa225a520a
MD5 532f2256e0864c8b0027c90d9c5a4c0a
SHA1 86736581fd16b8c329947a7eaa671f70e4aff701
SHA512 1ec2ca95548f458be2379f530217382e9ad399db7de5232d44c33dd1f3fd5753525ec488cac8dfb3225b201e7478618a51b333ecebaadd69dd0831959f1199d8
TLSH
T1E85182A8477B89C2DB2B97B14BF3818A32F6C5D64A075FDE4C5820F4F04EF5CA042151
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 41aaf4d26859664158708694abe5db17b3a79f6213e5b04f45f2fd792af23c1d
MD5 a28b67b5d158da8063122e99e5b1b145
SHA1 91d54b4f43879caece934b66698fad4a7dbf56c5
SHA512 c5467cd2bae81947ae7ded215882df13829c8db5457778d8a5a4471a5a41078473aac374ec544e1ef74c1080a53436f642af0f7166593cc7d0654c2362280cc8
TLSH
T10BE0D894D4C6C15D5A1034C392787F0D91843946D7C5FE0727148CC47B02186F74AA5A
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 6cd12a8fe182a0ab95bc79eee5e9de48cd26e4000cde8750336d7198e0c8639c
MD5 cdde50b738c0839a82358dc2e60407db
SHA1 39cfa3c2a7d17a854e174f23edfe19e3033a0d1b
SHA512 40e53c213b78071b6e8d729bb5d89513b16a36409a910b44029ec153c006ac1dde0e39a23c75a51718b57819334f59d7546f6daddcefe7311242cbdffd4235e9
SSDEEP 24:TLZHDDNzWjJ0npnyX7yNUs9vb7OkIbzXagfj2ZQN:TdD4jJ/0UC+lf5KY
TLSH
T11AE2A04C3E21F511C4ED733CA0D2C5D09EBC647C478DB67142386CA68D52AA2F49E55E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 285B
SHA256 fff9c841af450dfefe7f284f645d4a26b048e6bd5709ad766b308172bc260a53
MD5 785c71b68bf89a0e9973e06d76434ab1
SHA1 2eb96ed892a724f5f223fe37abbd075d448d45e3
SHA512 a84d94a4b22d325a41b84c193a2e279bc3969085d87eda3fad0dc1032989bd26e67aba7cefa085838590e5aef8958c40e22a000d158fd80782b614dcdbc55030
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 63e14a219d2d6293cf7587deb18c3a4faac94b909d0c1fdcb113df36eb90429d
MD5 6bf7e593df32a10118d0ff207036b459
SHA1 77314d28740fe98d8c434fee3aa586a94ba0666b
SHA512 59b00194ee927ea23a39233f1704f1452af554bdf82457ebaf58e1c90275757bacd5532efb4c45273d4d27aec68e76cff84a0f13725afb3894ddfff1b732e1d4
TLSH
T125E07D04C5CCC269957469D3C77DB30893D03752FBC8BD0E5758B8447981285B39E784
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 5b04b1f216aaac85b2e346fe3247629b856d5740d7d611ab070848ec29dc69d0
MD5 df277c6096b0f502e508c7e24be91f76
SHA1 5d4bd981d934e5ee63df792bdd4fd142809423b0
SHA512 e776ec42ae2f4fed295fe5b98334dbab8d8c5f12051f5a58613db5a12955cda8d6e45ba0b2bb9c494d93b1e5824d4bdb48b2da64dc4158f9d95abb116d6ce5fd
SSDEEP 48:uzBmw6QU1PzEJwJOrZjrte3FJu4yeRvXLGg12AxyUNe:6BCxSwAr5M3FJu4yYvXLz1Xxxe
TLSH
T19B92B6570D783853FB092B7A262B4439CD3BE19CFF95CC99312550781DF8652A0364EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 079823ad96a94005e7d6340086d1a75ad1ddd482b5d18d06e024b9f1fb541324
MD5 98ca65c83493ec57b587c7236546de18
SHA1 e4b7026c1858f6c514e0bcf01c0e804ac55a017c
SHA512 0c72bff9eca8915d7380d388a33e662aeceb442a7e1683af6edb2da851ae3861f4f8aaef821e1af5ce48e82e71359287d4cd823294b72f1662caf672d5584a98
SSDEEP 96:FYtRHtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/lQRbbEOVpZf24JkMfXSFR+Cw:FlH+bF+UI3iWGVoWN3qL/QVVV63
TLSH
T1D124111F5F643722CDBD913668E744A35C7DF03F8B1366DA686114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 9KB
SHA256 352b7071e8f44e84409a1e73630dcb87d2ed9d7cfcda1500fc4e2cdc890aaf9c
MD5 fc58561c62a50cd50432c16667e5f044
SHA1 896845b6c034d042a3381ff1ef87f25d84872975
SHA512 ded474fe957b6435683c46b0623e60384fa9a04143a6afd2181cfc725d9dd80ad04c9ec22c38886b134d962e78b81c241708149a5729712d6bb11d277b4fad79
SSDEEP 96:zS2nwejJYrnYQ/GStZpZJjiXdADZXYAyKU3Q2mIAM3Ov3y/KPBSV5KXl+CJF9o1f:uGjJkr2tfuU3R3yi/9V4MChWjv2Ol
TLSH
T17B22207FD418847E47778327D18B351ACBBB297E281DF869D0D61D0C026E6AE1211AAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 7d1bbf0436f533a1bb534ba7d63820d26d83b811754918335b10d21a9355f4a7
MD5 315d3807acc044c80262312b6470642c
SHA1 9bbd10e7e565b3abb55a557daea38c356c3ed009
SHA512 f317a918600a1da8c6a091297bda7754ba37ee5656d4b592512d65a3889337b15ccfcf4767089e9432a4e971c5055a405a3185ff4032fef1d58e22b2a9b8d4a1
TLSH
T195E0D8A485CDC16A5614208796287B0CD3A03607DBC8BE051B149C49F445104A79DAC9
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 1fa0a2b2e9b55a1813036cd83a0b36076ad86191214952070055ea8fdd9c1b58
MD5 fa35a29a3a44e1bd32d426e468567806
SHA1 2eff2ce84d7da5b0f3500c90e3f24278047af882
SHA512 ea54161020bb68e21ad88450e48d58f640ae2f7c77ddef4184bc3a5d07a1ddb8cc7a6aba59587ea8b228c70de0fffe67d61ca76e61b532d2a5c64437f3badb09
SSDEEP 48:Txk/LopFMaty423w/a9NUuTTdw+Yv588P5SpUgs5MmYwHNvygEFOIHNAC+o37lSP:qDeMatha9Vd5YBT5SzNm2ORDo0Jr/
TLSH
T12AB2C70E2F202536D2BC8AFADDE044262F3D105D83773566ED4491718D667ABFA018DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c16a0448aa2ae1a18aa23573241146c359fa10a1d9d4be77fdd235517037b4ca
MD5 782eaa8e9d622bb02f981a84d7b598aa
SHA1 429a31fb574582fcff68167238f2053e8561dac5
SHA512 5f8993e06792578e30e32bdd4740ff30b14a7c36d0fa1b849cc50ef583e35e88cda4f417fab9fe9cdf3293dcd638ba72f6d84becb57fe93ea07eadb11ed1fc17
TLSH
T1D9517DF383E4866DDA1156F0AB186E1BCE1D0914431C3D6AC9E4AE1B93E3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 522B
SHA256 00797439e33207b56863e5a5f09cec2db281915425f165714effcf47d4d9847b
MD5 b46a99ae5edb7a29c578ff74abbafbee
SHA1 861f94f73d60c7e426ac86da732a4c22c579951d
SHA512 3dd7f32d8dea0d2d479bfee6e0539074e2e43453551bd38e7d468a543a432df15880e427191f2c968b63420fdec5a63091404afdc8ecf4853e673d6cddede63c
TLSH
T144F02EA3C6BEF4231038883B0EC0F8026AB9E436010594F6DA96862CB0DA0F3D70606A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 716e4608e2c5c85ff708d96b8c182b44c46fd71acb3afdf0f9a0625da2f3e9fd
MD5 6b388f28c3e05232b14e89924a9d4e97
SHA1 8dbaccf3ddea3bf00117cd786c0aedb975d93167
SHA512 546d842bb37f8bb21357eaa2d2f43297fa105c819f8b02941094c36ca35e543f197501e95582032493174e8ee27605dabd1c16ee916d8a734c3b0e73321bbe48
SSDEEP 192:sxRQRS13/ffsbWpVO8YxwGgXzoA8plM/g6+WNHFdkL/Yg/seCY/gMIgVWJ:sxRQo3/ffsbWvO8Apg++/5lO/Icg
TLSH
T13942C716AD28A93B8CD7D21DFB65BF53D2F9143661D12E48A6FC8A1C04EB6DD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a1090eda1c72aa89941b505ca4ae90d922f4f7448e7b32ce4ad5d8ce7088e49b
MD5 d5873c4f86f86e7276a820c1fd35943c
SHA1 9f3ba58bf0dd8a3100dc1186fa96e42d5537833c
SHA512 f4e56657742be5e627932132d986f792bae7c47419707f2ced0783bc5dae4c437cab58c5eb6590f329d2117b78633f78d060887f0811b6c1b5b7fa0cf5266169
SSDEEP 768:j26HWo7pLuL7MRWgs2fw28F1+UoAYDCx9Tuqh0VfUC9xbog/OVoVuwjro9de0Urr:j26HWUE7MRWgs2fw2u1jaX4wQIr
TLSH
T192C2DB7B640CCEBE4F800ADDDC197E9F6D6802CB9698CD8047FE951C02C6BEE51164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 80e93f3472e5a31f50c733de0f09b03b63bc5ad57b4da0434e12c6963139baf0
MD5 cf9665585995a2de9a3b9f57fbf8ae94
SHA1 bc93834815a152ae1420b371381a8233c54ffbbb
SHA512 048b70293ab514c627f6408d2aaa8869b37f58ae1a5d6cea4a3cb2d6c0803b52f3a5286f87ddbf5d0fb9662cd3159ead33e335d527a216a6b789ec699aa2ceb6
TLSH
T1FFD0A7BBF0154555EABB8BE51D225639862138CD1055D148A05255154898B97D103FD3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 c70f8ddeca600c5bf0b53315550bc5d870dcc7eb510283707b87e081bd215862
MD5 82608a6e1ccf80a178b2c7e85730af56
SHA1 2a2289924c98aacb4608ea81c484fe704da7d2f2
SHA512 3c2be585afe688186067dad44b79e3cb9c25456dbf32b3c812d2144c453be0d635eb53f6ed14d760b7071ffcbfc661cc37af6bf9bbd310b0e3a03cbfe6bdc75b
TLSH
T163D0A7BBF4110555EBA74AE65D22566986213CCD1445D148A012751914B4A87D216ED3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5c1d15.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5c1d15.TMP
Size 138B
SHA256 0c7c9fc7fd75a6758f8dd42afbfb74ba77601e3e1647800ae826b8d99aad171b
MD5 11a24a90bba88442c9e739f886d2f040
SHA1 9f3aa8f0e7ac884a014fa6ad9c047a6aff1a9f80
SHA512 7a5c174af0f690182a52729162b206e240f683e7e37a8663b2d121e6a210b86e5fabc1581023427efac27f254918b4c8a406e2f55b85709e9a3688d6afa5e33e
TLSH
T19AC02BF7F1000921DB2703A10632D21C87043CCC4885C14CB01334541074F132107FD3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 fe9d7faebc912d5eacef27553ee9e19fe135974ad1666ee2b05b5d26eb8dcde5
MD5 2cff9383b8794e7dd87d56aeadb20304
SHA1 97c23e33915b36668cf1effe72604f8510e40366
SHA512 3732b26e516bb3c2f6898c0ae6da3fb11fd307da20e206634df47433c613a91c784c057300ae8aa3701fcbad3330ccdb05565ac3c9abe673c911b6f0f92ccc78
TLSH
T1E6E0261085C8C1FE652562834628A30CA3E87707D3C8BD1A2FA0F8487986588B29B680
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 b62309e46d4b1e608da142bfbbeff32dd52b7891afe38235b789a249a49ab908
MD5 6e8b4a7331aeff2251507b741e1f7dad
SHA1 25d2b86204f4b6227d3325e4cd3a4a52dfaa3d50
SHA512 208a11ca4d3f28a1b4e800ddc59d39eb48be51dcfdb126219afbe7a0bd048e1b91297ef41fd53566efc1ee6e5b32bd28b9bcbab4b63ba8be4c051a9e286c44c6
TLSH
T149E0D82055C9C2AE655520C7A224F30992E27602E7C8F9163B28A448724A1447B4B680
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 14a1bd330642f0b2612d015f1f1382338d24e2a48e7a22b5019978e4ac613500
MD5 f0d9d75073fb2fd3e8ae11ee35e1501c
SHA1 7f689ef7c44beaa86bae6962b689fc91645f14d8
SHA512 b4f3c9e7cac85620b08f163d2ab725167f7d56bc76dfe3995eae197f7a92591586f213bed787291f123bc3b46b6c398fbca2a1964b3e9dc7198a601d753797d5
TLSH
T1C5E026B085C8C2BE581661C38374B70ED2F07A1693C8BA0A57185C88B542100B7AEB98
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 7be26d2695299b3a278f8d35bcf62399e9a0faf9f6b1d604bba22264f18ee802
MD5 fee6b0d5cf9f26d4651030082f16fe9c
SHA1 fae58d9981e69f6a64683439b170ba11492a0ebd
SHA512 70a14fefbf803c83a7bc141660f36a309599a14a292a57a16f2e22190f27b9f7c3b4927b511e971263dec65ea975b5866a01051e3b48b306ba1e7dfcf4523223
TLSH
T153214D13E1F612D46D7F2E0C8954845B9A4171B33116E42BBFB900990BFAE44AEBD4CD
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 8e6eae8e276e1fcc589dffd642a16243ac81ab16ed75a99ea00e64d1d9e0ae9d
MD5 1466e2af5c4dfa1289c4e1a7b9c9af6c
SHA1 d85ad67ce088da7d086475aa79a5d3e42ddfd017
SHA512 fdbd849fc64d5257ccfc767cd4ad84186bcfcf2563cba8392785ba2db5b1d0bf3e2c6ff4ae3fb5da145a4610481a11e089949acad6af4d044be0537156ec6785
SSDEEP 384:DNrRZyCSDnxTICPUMEhIKyll7svbFKfk7:xFZJSDni2lyI1l7svbF9
TLSH
T12F44750A7B747001EDE6D9B25CB080771E3CB16DCF22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 99b45c0e9019884b44853d0b047c6dd4304471e996c5658ba39d0ac5ad9e2c64
MD5 d66fb76c347171149f1f2035e41e9e96
SHA1 61be9e65bac5cbf61fcd843bdd12af84f9d212bf
SHA512 357bbb7944752e1bb52c2e9efe8eb5425ac5a4772108926074093f999bfa8278ef8dad2dcd18058b7924dc42e32b19a9b999054cf675fbbbd1d3f15f6713f676
SSDEEP 24:LL0OGxhK3thdkSI5QjUsEGcGBXp22iSBgm+xGt:zEK3tjkSI5IUltGhp22iSBgm+xW
TLSH
T1A452579BEE743212DCEA83319AD001E17E7A903D8FC1EB0255D610115FB5691A71E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 248B
SHA256 c37c74060077da4148a2db60a795b8e3764e58b33c7daf47d69ef17ff5e2fd17
MD5 15a076aca4aeab8f4d742f96af7fc06b
SHA1 b22cc21d9a2c3c009373dfa6272e59880329a624
SHA512 484f9315ed6f81ba1b1c14db1c5020965307acfb287d21f4df1390b18385cb2de29aef2d398a7b0abd44187d0d5195fa678179a7b377a991ec7f9faa4405a4f4
TLSH
T1E5D05E6293EA30F4AA9F9D48D0043807F8883AD31A57C6673B6A054847D88089F2DC3A
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 497B
SHA256 984a417a4e2ffa3101fcb3886105d2cdd704894ef08ac59f35784f6b022da83c
MD5 d2cd44468403a51b916a3b23a1bbe886
SHA1 4a755208eb6599b1d96fd88c0440005770eaa8f8
SHA512 c3b3a8adb5b0b8246ff88d472be982396a92411b3757a7b433ecb69770aad7856f6dcb34420085d9d32be5f87a4f1975220908a0f3bc5247a83c453773ce4625
TLSH
T1F9F0C2CBAE030977DC02503151336782FF6189CB08246867438D246A2A1E1F1CACC1D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 fee46b4e0e3782a649838135e65e1dc1a5906938aefa1d86583b70918a7e02b8
MD5 91e558915a273a5405bc740cc5004ff2
SHA1 99021737f4b642abec61090eef7c4e8034cbe7dc
SHA512 3ed4e8aaf279c45cfa736f6d107c94092f21ffb5480da83ade39544058a4e635ab70915862c31e3cd49c4d9bab7e7de1f38af80514b08a9e979e2c02cf68e57e
TLSH
T1A6E02620E8C8C1EEA82720C75134770DA2843F23EBC8B90A5F14C88CB445100BB8EBB9
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 97eae66f849a6e7c07efebef8b548b94cd9c2ab2b2b3ef6e60cb23540ca14695
MD5 58a6eba701d969d22b460ab15e019116
SHA1 7e91b8415e271e902b449a714abf0a003b23ea5e
SHA512 78afa03cef73b1097318a2c86f7968dc12edb40f72f108fe5e567bcc2614638a9780673dd235a29c623d9f9c8d5f0754b3f322e2bb3c2e9b213091789c27b12e
TLSH
T12F21B515F330D014E25A827A607F9B351738E8569FBCED0F857A20746E72A440D4B7E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 ba219849f2e837ef27a32750bb7673d865d7b505a8255789ac63c3f8f00b0e7d
MD5 9bc62b275b91b9eb0a77be8687cf76b1
SHA1 ec7ae1388da2f2c38c482107d18c28497eb4b7bb
SHA512 983246a33fe2d20c45609104ecd64b1a43194b40f0e3778d29bf6171674d9af92ab661f56740969ab877c766149271c19724eb7310a339e6196e397f9775a421
TLSH
T11CE02010E4C8C1DF502320C34174B74D92953E17EBC47E051F10CC4C75451417B8E795
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 46f74cee5d2e47a0869c05ed5227543987aea04fa2cb0278557c79aa6762eb66
MD5 c69cda79885a1ee5c315e1e5b2ca78e3
SHA1 cc13a426325eb0d353e6b1892206df0a1b9bc857
SHA512 4494b67ea9deb837446d559ec2082956589f0fed7045a001e07cca1d2dddfda7daeefa901f469e8d40e4da389f9e31cd996362b5633e89b4bbe209a8b3b8ff81
SSDEEP 3:MsEllllkEthXllkl2zEfls/t:/M/xT02zN
TLSH
T1524404047FC0040DC500113054D1C3743370D51005155F4374F10D33FCC75400C11000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 c0152b38b7f07179ca3e2ef852ba0dc646dfa78b9e3662d8d55124095d3023aa
MD5 893cdc0a0bd227277181fc1265f13ec0
SHA1 8cfc77921cae620e91fa0cad48f979b398739b61
SHA512 2497fe3a6e28fe538bbe9f0c56ffe1924db1f764f3bc082f84b336a3d7fae467a85a11466b589c07fcbd73b80c409ae02cd764bce2d0458535a8998017d48118
SSDEEP 3:MsEllllkEthXllkl2zEflmZRq:/M/xT02zXv
TLSH
T1B44404047FC41F0DC5011131C051C3703370D4101FD1775334D14433DCC75400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d29e0f3b60c7d3afffd2badae4793f7d412de44f90bb7773d8c9b6d9f2133c3c
MD5 adcd73ead69356c32b8ecbb079e2325a
SHA1 eb405a229f9355405318094aff087355e3395fd5
SHA512 79e2e4efbedcd8389c0508357e678b6a3651ccd869226548c1803a148e12089cd5332a2b6a5d8c524b86e0ac29257e985c80ebe98521a0c30ec3953a118be45c
SSDEEP 768:hrv+4UNbdz3gF/TBOWTONXyer1IRCzniBJeVH1SK7:hbsbV3edSIqneEH1l
TLSH
T18503BF32E4989E338CE2A3D5B047B6437EB86057DA840790EDDE2F4E069B59E130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 57bfacda2d57d4a190564cf548aa22f60fbd5d708c422d1f6e291c2a7141ba9e
MD5 1429ea7606a38cf1dac456efe0c53afa
SHA1 d6f60966bac44221cd4118d08881bd57d89fcd03
SHA512 41ac748baf05c065b08b42b0bdd8732576fa30a922f843a5dc6ea133cde61100cd5b38d97fd883485794f813a46ad687ecd0743c5a2e6a2c18dea4fab63a75ed
SSDEEP 768:8rv+4UNbdz3A+/TBOWSCONXyer1IRCzniwVeVH1SK7:8bsbV3RbSIqnpEH1l
TLSH
T1F203BF31E4999E334DE2A395B047B6837FF8606B89800B90EDEA5F4E059759E230F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 35a350c0a40b5a95d2dc89e9a465dc80e8ee33cb4dc97c7d3c06942a6bea877c
MD5 7344d76dc096e124f4206f87fde98982
SHA1 b644ca87dbd245d1d10864bbfc71a30f943f1574
SHA512 dca7f8d7ec50ae7ea6f085da0f047c1887fa03c99f427361ef83ae6aa614d7a23b304e6b426718d3ef661956b0d695720934b9f7a9d1116fcfa84190dfc607f9
SSDEEP 768:urv+4UNbdz3OM/TBOWS5ONXyer1IRCzni9ozMbGusc1:ubsbV3tSSIqn1zeGusW
TLSH
T1CD139D3CDC545E3F8CAEB385B10E66532EB8513BC5A00690EBD92B4D817B86DF30B956
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 7d5acd06d6a282e0d2b464be22bce1eb55b3e341187cd5f7182cde2b7debb62e
MD5 615b2c014121b90e63da08c5e2c60f7b
SHA1 7487c42b6e2856be1a82c2f475e2ac359ebe92e4
SHA512 eb23a4f2de35f212aa89878d9424ad233e479197add1fd63e1bcf1e4cc685bc632d9c7cd5ec6dd0928b93b81fd3edd87e1201dd7694d83f5c8cb905819a53e86
SSDEEP 3:MsEllllkEthXllkl2zEflhTRKX:/M/xT02zeI
TLSH
T1824404447FC00C1DD5101031C053C3707374D4100513574734D14433DDC75400C10014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

README.txt

Path C:\Users\Admin\AppData\Local\Temp\7zOC2210FBA\README.txt
Size 374B
SHA256 fd789bdd8753b47c09399637ce891cdd31cd42ce2f4b503d1d1e7971f8620d7e
MD5 2344f07c984477090d9d1f79933b6222
SHA1 35aef47d045cc1d78ef4e51a1118cdf999938c4b
SHA512 5d4b3b9f1e5780a716d9f98b9ec7ed773da51f801dc9107f01205bef47ad2c7293f984a6d0509b55461862d1c9cd27c59ad9ba9d866cac5bb3ad2803a761a55d
TLSH
T1D3E0C63402EB103B612AC8619118ACAFEDAEC2B2D892C273398F0300025282CC7CC9BC
MD5 SHA1 SHA512 TLSH

Submit Download

zyntheria spoofer.bat

Path C:\Users\Admin\AppData\Local\Temp\7zOC221228B\zyntheria spoofer.bat
Size 7KB
SHA256 dbd1dfa4b1bb8a70337ae709c9593bb7d950ac9e7d48b50dc86ab30f065eb6f7
MD5 30f632fb7c4ec76bba0e2b93f0b3dfb8
SHA1 b1f742146ff99dd89aa0c700ab671d744dca5717
SHA512 6fec683168b30b40115a357e74e5ab9e84c5109e857f2ab14d3c3b1d352f40db815a5259a015774281231e44ed27aad0f63588e59b689ae84dd51eb27b366efd
SSDEEP 192:CkOFl54EY61EcGy98V8n6SJaRaOna80jaMJ60q7:CxFl5bE8CSJYnn10jo
TLSH
T190E162F33461CC2268D5A7639CA0A19536D883C704192ECE715F5230A796FC47AFEBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 b703580ab6d5e993b62c89ab20e53fc328a58e14b1be9c16220f868dd5184e15
MD5 78abbc76f070c590dc62c8f2db92cad4
SHA1 37b30ec73d5444b100e704c15cc0687cba01284f
SHA512 687246c3245b2c694037a104477faf4553851b17f604e5f4bfa390afec9be3ddac0d1c064d4289179745a99e52e43f736a55938cf6024a3b3800dcaf4c009fa7
TLSH
T173110A903422B37F06C24BE8E0364CC59D50B896532B6B9CD9175031FE6CEE0672D7CA
MD5 SHA1 SHA512 TLSH

Submit Download