cbd9b3cd696fa59c37d79d08bea05a24258a3df7e1ac913872cf131e2e14c994

Analysis

max time kernel
149s
max time network
165s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 23:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
APKComboInstaller.url
Size 59B
Sample260910-3bgpzay1fx
SHA256 cbd9b3cd696fa59c37d79d08bea05a24258a3df7e1ac913872cf131e2e14c994
MD5 b57de9520684486ca7b3de5d55487995
SHA1 9ceb08a63c985fb52072d2001155be791b69cdf5
SHA512 ba40299d995a3bb14560bd31b6689c6db97fd568ff5153ab2aca55df691cce9d1e42ccb22ab36e29ab82077243fae6e31e5448c57ddf553eaab9632db35cd5f4
TLSH
T10DA00263800E80B0EE1609AC55299F048C0326E5895BCCD4A185CE1428CF4E245C3307
MD5 SHA1 SHA512 TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
476	msedge.exe

Drops file in Windows directory 12 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_1119946816\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_1699486526\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_484604089\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_484604089\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_484604089\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_712630844\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_712630844\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_1119946816\domain_actions.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_1699486526\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_484604089\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_712630844\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping476_712630844\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4812	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335561431664533"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{4798794F-AFFD-4B69-B974-6C7133A4F3FC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
7076	msedge.exe
7076	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
476	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
476	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1876 wrote to memory of 476	1876	rundll32.exe	89
PID 476 wrote to memory of 2352	476	msedge.exe	90
PID 476 wrote to memory of 4812	476	msedge.exe	91
PID 476 wrote to memory of 6780	476	msedge.exe	92
PID 476 wrote to memory of 6780	476	msedge.exe	92
PID 476 wrote to memory of 6780	476	msedge.exe	92
PID 476 wrote to memory of 3708	476	msedge.exe	93
PID 476 wrote to memory of 3708	476	msedge.exe	93
PID 476 wrote to memory of 3312	476	msedge.exe	95
PID 476 wrote to memory of 3312	476	msedge.exe	95
PID 476 wrote to memory of 3312	476	msedge.exe	95
PID 476 wrote to memory of 5804	476	msedge.exe	96
PID 476 wrote to memory of 5804	476	msedge.exe	96
PID 476 wrote to memory of 5804	476	msedge.exe	96
PID 476 wrote to memory of 4688	476	msedge.exe	97
PID 476 wrote to memory of 4396	476	msedge.exe	98
PID 476 wrote to memory of 4688	476	msedge.exe	97
PID 476 wrote to memory of 4396	476	msedge.exe	98
PID 476 wrote to memory of 6680	476	msedge.exe	100
PID 476 wrote to memory of 2888	476	msedge.exe	105
PID 476 wrote to memory of 5472	476	msedge.exe	106
PID 476 wrote to memory of 6380	476	msedge.exe	107
PID 476 wrote to memory of 1128	476	msedge.exe	108
PID 476 wrote to memory of 1128	476	msedge.exe	108
PID 476 wrote to memory of 5176	476	msedge.exe	111
PID 476 wrote to memory of 5176	476	msedge.exe	111
PID 476 wrote to memory of 1812	476	msedge.exe	112
PID 476 wrote to memory of 1812	476	msedge.exe	112
PID 476 wrote to memory of 1520	476	msedge.exe	113
PID 476 wrote to memory of 1520	476	msedge.exe	113
PID 476 wrote to memory of 7076	476	msedge.exe	114
PID 476 wrote to memory of 4192	476	msedge.exe	115
PID 476 wrote to memory of 4192	476	msedge.exe	115

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\APKComboInstaller.url
1⤵
- Suspicious use of WriteProcessMemory
PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apkcombo.com/how-to-install/
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f8,0x2fc,0x300,0x2f4,0x30c,0x7ff98444c188,0x7ff98444c194,0x7ff98444c1a0
    3⤵
    PID:2352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,18381350814548893902,10798770152731462395,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,7441406730377034303,16801214403747592777,262144 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:2
    3⤵
    PID:6780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,5027648867035994208,16387528302380633058,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:13
    3⤵
    PID:3708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,16678405125720740721,8043174520580713911,2097152 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
    3⤵
    PID:3312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,16016141079582221679,14917528104476344333,2097152 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:5804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,11023838043639470499,12910714822734734444,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:14
    3⤵
    PID:4688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,14857433778170000296,3248512766625022169,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:14
    3⤵
    PID:4396
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,4686654016824206593,5683126427081264123,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
    3⤵
    PID:6760
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,4686654016824206593,5683126427081264123,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:14
    3⤵
    PID:6680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,13498103573842737799,16913747206923787814,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
    3⤵
    PID:2888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,4977645457349886319,9851050484447375626,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:14
    3⤵
    PID:5472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,109428530748132226,1973240711866938053,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:14
    3⤵
    PID:6380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,10837168953660011128,11905655120675665009,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
    3⤵
    PID:1128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,8284293802903053666,7040000158524436839,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:14
    3⤵
    PID:5176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,9569237785588823715,6998515537692361427,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
    3⤵
    PID:1812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=900,i,9792537556627186720,10530625922196457079,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
    3⤵
    PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6080,i,5684655468547970690,13223353302146036709,262144 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:7076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3332,i,5870978580419579847,6564680098738283799,524288 --field-trial-handle=2664,i,11737137967464210233,8954214690394592171,262144 --variations-seed-version --mojo-platform-channel-handle=1200 /prefetch:14
    3⤵
    PID:4192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4676

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 df0140ce95bd57d3dd994e648d8e8566ef4d2da0bc9582fcc2022194ef46f28e
MD5 dec8862198648ea46b376c5c8530115b
SHA1 07548eabff4a11232bb7b356ba946910c5b33562
SHA512 14f8d2fcb3878a007c9a371ca4e76de8658792036bc9071879b8a2e5fc25b8e4c0c9217e9a5679ecd9cf5344aa6372a8832c042313aac1cd2065518457bbbd71
TLSH
T1D4E0E599C920AC271DFD5B1860545686E751136B3B40894B3B3CC26D4FF077B4686C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
Size 26KB
SHA256 cee53f6e52c4abbe214f97bb6253a70a99c21aa462ee132588d14c7a51468a32
MD5 9a77f37d3b1887c2dbc6e4dc48a5aeea
SHA1 dd37afe93742a18fe7d4fd088bec572e70b79cf7
SHA512 5d2f463d420768e1f1916d133e75903d0bb34bd534c892c3a3659d9b1651f46b789b6626960a05c397b6cb36a7338c85216628ba4c0634664c4f9e43b098d7ee
SSDEEP 384:SMazUGXW1v0QxaJOTxEG9vSTTZdxpUU/JzmIcNgITcay5S65C0a5mlAPXUAONIRy:0UGGGQ84aiSTld8UohQW6ja5FvxuZ
TLSH
T15DC2F19F8B31F4BBC9817CBDE6BECD448BD88005F273663C4E7C0571444AA2988451E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a1825ac328b20f1588dfab0df9d857784b765131290a66a51d98a0895238214e
MD5 8cdc76c674da2d67415d589b4c3e6c02
SHA1 beac2be3a1f246c36d261761f54e2471588ba82a
SHA512 33036dc18fde627d115a8f2a902077de851f54137e92cb9f758c0c13584568b8682daeca51eed669f41a1eac34b1a0e2f351d34da6bfd527d6b876fdc3f9a1a5
TLSH
T1AB615FA0036B6EF1D36086B23DFEAE6832348C6D174F6EE6D150D17695EE32862E1D11
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a27ec.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a27ec.TMP
Size 3KB
SHA256 583356d2dc4a74a8bab4561c5c6e4caa8bc5aa349fae739c06748c7358f5cd86
MD5 4184d8d4641f4cfc198ae316c55c87ec
SHA1 e440898ff085b688bd57679731f8b2c9e60f9341
SHA512 c8c40aff838c5ea3bb614835f9fda4646cea5e0a704b5f251802e4b61570d5690d25f731c2ae4180b50b0e08a4875a84951fa6824c973494b1313352b0b360f9
TLSH
T156615EA003AB6EF1D36086B23DFDAE6832348C69174F2EE6D140D17695EE72852F1D11
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 56e40c6282923d549a3353036f5e52d8fee908153b61b1a22168435043f2db2a
MD5 a21044a3ff76c7745d9b91bfc327ff27
SHA1 4519c5e9a6373a718232f6ad25ca6d08f6c028a5
SHA512 358d871bb5576e8ffa5deb71bf850397dd47b5505277efb90f7b04a0637dc2947231ab888b4de3210f17696dc3b0f7999cd9d0d0bd2a68fb10f40292a1610232
TLSH
T164818BF787F48A2DCE2256F4AB15AF1FCE2D0914432C396A85E49E2793E2461E141B4F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 9772aa66294546fbccca9fc925dd9e42aa876cad41a68d173061eee24d4c00ee
MD5 f89360f625e2d46e0dd92fb09a978eda
SHA1 bb11cb1eb3c6a8b0606a1e7fe9ecce32dd9a8dab
SHA512 c0fa860a43e933701440fef666a1fac101831e854f632f8b847f94058cd6d722cac4321419835b2e9155af5a31e3ca3b83bfa440257f4a5e742dda7fd452b5cc
SSDEEP 384:sxRal8t/fxsB/N/RI4ow/5//etkTmsGQfjz:s2at/fKVWo/5HetkTmsGQH
TLSH
T1F772F816A9349D3BDDCBD219FA957F53D2F9112392905E44AAFCDA1C00E66ED2103C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 218c75b66f91486c902e9b0cbb2ebead07bbc7ec330a4c7b9b7915e01026d09f
MD5 e06f0ac38a4c7c0e767362379d152bb2
SHA1 6b7428ef62a84021b06bde5ee65933e3632b5c8e
SHA512 9ed5039c3f71f702e1c301cadb64b6fb763d3a7fd633adbc40b22232176ed3b978c95448933b1ae2a454ad84974cd014a165497924eb3c87f4363724d553e2b2
SSDEEP 384:sxRalqut/fxsbwN/RI4ow/5//etkIMsGQfJS:s20ut/f4KWo/5HetkIMsGQU
TLSH
T1F282E616A9349D7BDCCBD219BA95BF93D2F9112391905E44AAFCDA1C00E66ED2203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 eefb883dc9358ff6811faaa155b8950f3fab5cf1f23fd4c30243492c77d6de86
MD5 b811a8cd6c4145ae02d1ad29df3a8d48
SHA1 2a9a57af691c1b713a9966049b7a5cd3baf71525
SHA512 df28228870fa072a7297a0e4ffb7d7575a2e8adb5cbce8a8ce20fe889b4fb66175bb0709b71e5aaa1ab7cf0d32dfd15f5a5e9cc1c652f2ba4192c6c42ce409af
SSDEEP 768:Ob4YZx7pLuL7yTWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVKobbDwzrob4a:Ob4YZnE7yTWg1NfwBu1jaxobHwA8a
TLSH
T121E2FB3B280CCB7E4F804ADDEC29BD9A6DA801CF5AD8C95447FA850C03C6BEB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 92086ab65d752fbfe79ac159b0a07f1d264f27cebb7e405678f8b443136deffd
MD5 524637eff793416d6db6b35d3e64dd6e
SHA1 693b0b7f0349f9dc5c016deb001370f0e725bb33
SHA512 1c7107cfaa73269914702a0de9f1072477cb662101ddffa211774f96b9f9e45ae384b1a5b78ae18ef52191b28833964fdc2316c6128c3b163dd65e8b2dd5ca53
TLSH
T107B02202800C3002C83003B0F2C80080333B0C320303F23000EACAF8BC02220C00B202
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a14f1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a14f1.TMP
Size 48B
SHA256 72ab01834b062ddd45cdfba012a968abe00bfc2444c695aa9002262e78e4bece
MD5 1863327379fd55d83ce15feaf685ebd6
SHA1 9bc4b9e2605bcef121962782f95d06e0ccc06dcc
SHA512 b52c36490ec245f2485caa6d95d5bb8f622f540202147df875ff85eda24ba024d8a1d8d45e6a06a546d7a42c6c8558d3d3dfbb1dcc31beba5b2009011a801d2d
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 44bedccb6478ef79791a698d676493754814e909d18d1c975d846358458d740b
MD5 10167ae34830e8b323713863ff54c5df
SHA1 e9a15a5524967f173e401a734b63576a3c8f4b55
SHA512 c3ad3c386fe83ef9cfd907d1fc19d3579d6ed5648abf67f38864fe9dc1e211c3bb53a817095fe935a688ed70c329bfc11d81204ae917d72b828baa2d4470ede4
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9X5b:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRg
TLSH
T165B24C11753F4680387EB90C91B8982F86C2B4637519E52F7BA801A65F67E039DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.20\domain_actions.dll
Size 82KB
SHA256 e5c9378b540360fb4ab0b16bf40ed18bd99cf4a8a5a6923f4f240d373fb441cb
MD5 aeb538c29f46cf0e19827ce47594488b
SHA1 db32b33a5811c303b1e37e1ab956df20ba44b355
SHA512 38488a42e5c532442a65fd4edab683f1f63eea71bae3ba2f801693647f633af9d836171dc751b342dc2e0e7784266eb9a40f677c0d3c9f651e7374f1af707852
SSDEEP 1536:NocewxXknaFpdgxBf8paY3JQzQik428fKagFVbydki806yav7Sz:NZvx3bgrfrPza428fIe76yaDS
TLSH
T1F783F1C0DA6C0117EE6B4D75D17959CA6BB9D6B50BA0B3EB2372845A0E02FC5EF36700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 66ee2ef58cd9ff713da82ddfc308b5d15721472cb29b0e0ef83a361a2771e252
MD5 ae094c515e59ea3f61d4fc381e15fe67
SHA1 ab759cc4c68de264122b1065a55a52aca78e0c62
SHA512 cf2d3fa9911a6a5e981872108355b88f635df7ea97bdd6b0f17c7739bcdd25941fd14dbecd6800c273794979228683e15fcaf08c6244c4981cf70712ead50eca
SSDEEP 384:nViF1tNn/s3n9Sn8Ngb8TUNTUlIRiPvuTub7REqfbzGwwjNULhOObjI9G6w7vw8I:cF1j+9SXbwgUuwXGxMh29MI
TLSH
T172C25A36DC65CEB7EDE68FD9A34A7A46EEE0116785DC5AC4EAD81D0D00C71DD070382A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8a6bb30784465fec3d4300545f12a6fb95356cdeb6e11f53b0e135622cedf27a
MD5 b32116115ad103c50894e17436824b72
SHA1 31fdb0f9fbc5b49471b6001c9963040745145c95
SHA512 ebbef4f445503224125fafab5cb17c8bd07918386d83782abcb2a82449f9f18cb0b9b8904f041f0ddbb23b1f6e9a0f2aee4fd03ed72b0ac94d3ff93a5e03c9fa
SSDEEP 384:nSiF1tNn/s3n9Sn8NgZ8TUNTUlIRiPvuTpe7oEqfbzGwwjNJRkCvOObjI9G6w7vw:ZF1j+9SXZwgUukOGxD2O29MI
TLSH
T130D25C32D865CEB7ECEA8EE9B24A7646EEE0517389CC5AC8E5C95D0D00C71DD0B07C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 f3bd883512ebd3c3a8ffae80ead98fea07fcad181e5be4baf0f6feca2f5439e1
MD5 3af72bfca219cf22b505a78f116ac00e
SHA1 bce647fe8d6176f1f4a4748f95eae21ca56aabb6
SHA512 b7d188a12094b16d3deb101b101a605b7ed68521d7e4d423dd90f518a6de04564a51bb313c0a01fe10b1a811897fd6042840cbc5da518d99227bf4887ebbc921
SSDEEP 384:nkiFiZcIy8NLZ8TUNTUlIRuPvuTYE3oEqfbzGwwjNJG5Cvsa+VYJNd7UP8LEEIzv:/FQyQZwgguROGxDIOhgE32D
TLSH
T16AE2A1F198E7C972E8EE4B97673D6E4199FCD163B4884984B7885D0CCC861BFC706816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 cb3ac20983a775dc1055b4c46ddeb493ef0cf3e460a354437f28a563462c9553
MD5 493e7ab4eac8f0479178e7ccfa7e9722
SHA1 a55c9f22a12203c0926dbb256db731e1a913ac38
SHA512 fd7c065f8134a9d7f190ff7292cfb3ba6cfefcd35c15d1b5ca2e65bf559a9d2bc9d675f7cb37d17af67d15084e94fa4b2b08fd0e2e2a7e6f3710d6e648ef11e4
SSDEEP 384:nriF1tNn/s3n9SX8NLZ8TUNTUlIRuPvuTaU3oEqfbzGwwjNJRkCvpjR8LEEIzrQ:GF1j+9GQZwggu3OGxD2OpA
TLSH
T105B23C31D865CEB7ECEA4FD8A74A7646DEE0516388CC5AD8E5C86D4D00CB2DE070BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 377e16b0f002d927384cc3e6a53758e2c38d82d2dfd1d4f0214929ecc2a3790b
MD5 63185ca59f313d3dbdffb233ecaefcbc
SHA1 dbf9a875fe34199e68649afe38e90f3c25f24ee1
SHA512 7fe1bb1a65bd2ff3bdee9fde4b013d1c1197aade2e592e10bae848114bdef6500949f18a64e3ea58a40d9ff6d9ab41b7d5e5d4b2beb07a80772e0758f5fbce35
SSDEEP 384:nFiFiZcIZ8NLZ8TUNTUlIRuPvuTYU3oEqfbzGwwjNJRNCvsa+VYJNd7UP8LEEIzv:MFQZQZwggutOGxDbOhgE32D
TLSH
T18AC23A32D8A4CDB7ECEA8BD5A74A7646DEF05163898C9A94D5D85D0D00CB2DE070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 44510b1499a2fe58d23b0cda2f4f5124f8b2e3797f0890726d757c080e33a478
MD5 5b900d8c6a28596bfc22924fcef49cb6
SHA1 6283be0b71b6da376a9959392260f245ce9d00a9
SHA512 150c01696493abb0a4745c7826ff987f936f2103d7a2eca30b507034d3e20ea0cb4ea43a7fe9f66e40af79aaa440464261f6b22370fb2beab059d9698252e139
SSDEEP 384:nriFiZcIZ8NLZ8TUNTUlIRuPvuTYU3oEqfbzGwwjNJRNCvsa+VYJNd7UP8LEEIzv:GFQZQZwggutOGxDbOhgE32D
TLSH
T184C23A32DCA4CDB7ECEA8BD5A74A7646DEF05163898C9A94D5D85E0D00CB2DE070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 fc8158bcac0e1a43c912e8899e7f1c5e1d622db63f0096f7ece6833f081442b6
MD5 35a224c2ab78a8e4de46ffe2bbfff98c
SHA1 5bf2c935d683009baad6b104386ca6a2df08bfcd
SHA512 a0cef6559aa65787fb88ba8f2a20f8d8f87fa2a86afadf9c255bd6df6083efb477762c29e4417fd191353f39724da6b875183e140872a4617e941adfbaeb280e
TLSH
T1A8512DE04C3C1AD1D4FD0E7EB44B78FC85EC9726F89434386858EA985A7A61D309483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 c51ba821bf356132d1b7cd4b592cf9c755f7357bf634240dc4df69ef0f699ce5
MD5 eb56e0946f920f37434482d6a27e02e3
SHA1 bdfb4b4a63e6eecd30115d237593cbf05ee86135
SHA512 889497252ba5b465a6c32f6c8f6d7bcc10eb7382294b0233b5940781cb135ac1726187f4142fd174612a5dd98d10e7e360fac7b98ed1c922bceb4caece06d6cc
TLSH
T1215150E04C3C16D5D5FD0E3EB05739FC85EC8726B8A034386858EA985A3A61D309083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 227be09e96c4832820afaacf9d6ad4e465a70ffb9ad647e7506b01eaabc2ba29
MD5 6b31e16abed878ec8f83c2d26611117b
SHA1 708191624e1213c3f87e073e478169f0b74f0514
SHA512 beea38815a8328c54cdd63c2e77537c64fdf3a5fa3ef4fce943c978f9b4ffac236a333b5ece11ffc02821ac21421ffec15a7eff5e2b5771e1ac768c33789b00d
TLSH
T159514FE04C3C1AD5D5FD0E7EB05739FC85EC9726B89034386858EA985A3A61D309083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 5b13b6fcdf04fb96e793406611cf7bea4f0b25a21e6210ff6fcfb1601d456cec
MD5 12233c6bdb79fb5af7e57b25da973536
SHA1 34747b1c27534b8b74cbfee6a2a11d96508d27a4
SHA512 dbd9a12f0c15dfb739a20974af92acf153e278d3895c5b3771f558fd6665e280e51d7fd4931709d73557d9ed82792f579b34710e934cb9cfe292599545ab1b56
TLSH
T153512DE04C381AC1D4BD0E7FB45B78FC85E8C726F490343D6858EA985A7A65D309483F
MD5 SHA1 SHA512 TLSH

Submit Download