hxxps://web[.]roblox[.]com[.]kg/users/5308128773/profile

Resubmissions

08/05/2024, 18:57

240508-xl8csaaa6110

08/05/2024, 18:27

240508-w339qaha8w10

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 18:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://web.roblox.com.kg/users/5308128773/profile
Sample240508-xl8csaaa61

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Moniker = "cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4124900551-4068476067-3491212533-1000\{E5E1C640-5597-4CA2-9F6C-D8C0B1B946D5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949	msedge.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
448	msedge.exe
448	msedge.exe
4620	msedge.exe
4620	msedge.exe
5020	identity_helper.exe
5020	identity_helper.exe
2772	msedge.exe
3420	msedge.exe
3420	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
2300	msedge.exe
4540	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4620 wrote to memory of 3464	4620	msedge.exe	80
PID 4620 wrote to memory of 3464	4620	msedge.exe	80
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 5048	4620	msedge.exe	81
PID 4620 wrote to memory of 448	4620	msedge.exe	82
PID 4620 wrote to memory of 448	4620	msedge.exe	82
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83
PID 4620 wrote to memory of 3824	4620	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://web.roblox.com.kg/users/5308128773/profile
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8591c46f8,0x7ff8591c4708,0x7ff8591c4718
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4668 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=3980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4868 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7060 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6708 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,6984958690385586172,10278650946841826943,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1
  2⤵
  PID:812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3496

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3128

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

7f1cee26-3251-49cc-954a-ff56a88495d0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7f1cee26-3251-49cc-954a-ff56a88495d0.tmp
Size 6KB
SHA256 810d157416339fed7136f58775a4d9a8dbeb9736738cfe6c1cb1c5c3ee55393c
MD5 110ca04a525364cd84a8d69c5264dfb3
SHA1 f33b0b4985f13bdc8f621a4dd1f695235caff99a
SHA512 ada74e12f49cbd4775ab7f6bc3696e6f56a0b3a7ea324150a7a5ed4166bee3956acd5c2c5e639f0e8ad0ab816f91e5e5ab2e1dbf891ff4f8b63238d70456ffc5
SSDEEP 96:nHkysQmY1lzwphtWMoiVmdeSXkOMBr08UWQyV+VD7AiEwb:nHkaDzutWMiXkPLrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 20KB
SHA256 65c20a747dc3cd63e7f2fc629aeb1258e4b2828e9b85eb85f70ce500c8f137b4
MD5 740d5efbbe21e49b08e78a63a4f47b00
SHA1 b28bf093b8030c9f37c94f7b2c17e4451312a031
SHA512 005b8fa6cca8720bbbfd67b176f031d7dde7475503eaa9017a72d234724e146257ae16b7f9ba73a43a7bfd51f09b43fcd0e08db9654027686109689502840073
SSDEEP 384:bDzoBXThRSQHn8So+LSXbSUWeqFvLYQ+B+duydGvE2KyPI4Uha9aOs4DV:bDcBdRSQH8So+BUWeaTeB+duKufKkyhM
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 23KB
SHA256 ab25f94f51f31d69f3a7ff1959eafe9ddf3fad8e983fa216c91795bae573e13a
MD5 e4b0d20f483b4c24ecffd4678479e3ae
SHA1 f0f3175f2c92922d123eac1e3a4c5bc8f6091b49
SHA512 54dda1d96956961788768dd0d5cb0ef9f660898b3b4fd1f6c02d5b092fe3629cb38f478e5e2fa5b074963616e63a235593a2de9e3fb420b502b40ded7430a715
SSDEEP 384:X3tyR/ic6VQhvi+kswPsg79x6iLIY1U0P5PiWx2iLD2zzBbmfLsFJ:X3y6/0XwPTH00tiWsiLD1fYFJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 44KB
SHA256 2897ce935bf259f030e1c67dc25840da8793d4b58bc5fc8d5450525490d62590
MD5 28d6deba0823880f8331bd4695469645
SHA1 a9fb38e13eddaed233b777f4db8efb4762c215a2
SHA512 05261445ce6c11d1cf49716c0a2c6c2abbc930af4b7c817d36afa7819446f7e40f740a31b8e9734a5f68a0b140f2424db8779f27bae349a429002bdb30c79e7e
SSDEEP 768:/iQEwW6W1hUsXp2x+sIsuw+4Dl+4BhugELH8rJ/+/Ewifjb51qiRK+KZSOAwB:aQEwh2isah1uw1FBYFEX51Y+sSFW
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 59KB
SHA256 a746ba588555b584fe98e42ac1a2dfbb92c2831b54c263f51fe91d124b9214d7
MD5 7fd069146ea79b16633bc8b45f90482a
SHA1 98dfafac54f6f5db51e3baea698208833ed1b642
SHA512 c31822f497ebb35a5da455e77965f16a83e2007215ae88e64bc21019d8d45fff4671ab4300d9cf518bd2b652d071cc582fdfb99b4807c75e2022755e6c60a06c
SSDEEP 1536:b46bMpp4L6aMKTABNx+7ACGrJN5H5KNjW/953FYJBL8c5H9:rwDaHABG7MHgNjW//C7L889
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 75KB
SHA256 aad6b6bb918d96aa219dcb54ff8a8a9587a9abbe51b4ee131fdb1a82f028745b
MD5 15a2f0d9497bdefec193f1951b076696
SHA1 b673c0729fa90d589261edd38bcaa74439297cdf
SHA512 36cb398ffe146e46e57ba37a2ac92d03476ac0b0368c64ce0102ac3b9d6a484d5e4200c136db9e04f25b327641299457b8f9d140aba6bef6a9fdc04313415e42
SSDEEP 1536:DCskQB+hJDyNMwuIq47QF7/OYLKHuHrlcG26DDwKVTayX5c47f:DG05uIFChVrlR26DDwKVmyXaUf
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Size 101KB
SHA256 39e523ab1d0c7f7cb84c9d0962388aa528974dda5aba4066378ccb13711d5422
MD5 5686e73cdad32737f07278bde69d3335
SHA1 e364d3a8844879ae6f24f57df12ce92ed4499e25
SHA512 c95dfac87a53a22e5061a9e2f262e7f4fa28dd33e66146d34c52e8b4a1eccf61f10a68a88d6ee39950b75f66232273048e4933d63a3d84ae17d4f0ce58317338
SSDEEP 3072:wIHzlJaet3hr5gm17UXIddMJez6lGKAQSZVHi:LPlrNCIddM88GxpG
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 67KB
SHA256 c2463bbc7cb653930151b0c1a3f70272173db75929edd61f1baf61336575bd21
MD5 6817d2ba80c4b764676dbc49feefcd90
SHA1 84ff8f9b1a9fd42a9f3e9c27440c9f312a4ca21f
SHA512 bbb1e51c1556dfc76b7754233850aa4f355be190676ce2bf892aa55b6f60273a25cee571de8c93fe355ff3b4cdec1f1708254b393e730ef86de9b76a81e1d9c4
SSDEEP 1536:dePxR/G3VhxaAG63ugNPrdneQFa4P88RKTjTmReXifziV:d6MhxaAGWugfnzPRKjceXifzK
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 20KB
SHA256 3eb3416904e2d4354a4760874b015d4b7ad0f4f231889eb2e80a7c2ba79c22b9
MD5 efd99f6b50b61e6bc88ab81db271f5dc
SHA1 13a91d8c6aae48306779d950cd3da773bac54a04
SHA512 3532987383c85b0cb80ada4314a3fd155cfb78d23470aa7ea43c40342d48982bb8b3824b65c05fe496662e433ce65598cc902cc9e51d6a32802709683221e160
SSDEEP 384:B8OUheb64y5IHzKVq/2jMkb7pqn893l6DYW4nlhAqZQeSPbl+mTqEB8P1zV:aOQ6Tuq/otbgYs+4qM81V
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 23KB
SHA256 bea9a27851d3d3c3316f7823d07e73ab9a5a24e58e19a8187cca4651da08e922
MD5 8fdb2ab7563495ff9488fa1e89cb002e
SHA1 f6da107f145bd7fdf43fbd73a32e114a4b5324d7
SHA512 f8f9788b0f7da21b5805b4ec223fd25acc7d391265b7b5d9d1a1f7e34d3fd12f598a65d74fb9613bcf120ff16817e4173056dcc0901c9e850cd2c1e3f33e6d6f
SSDEEP 384:LgNA5Uj/wrRYYCDwwizL66UeEgy8BmYy2Ne664uNHsCjfBn3Pc9iUMKU+Q:IA5UQywwA66MQwEuNHzTJ/mhQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
Size 30KB
SHA256 57b9a684f743cf229723c1a5e9936d930cf48c3b5056c16c09cdd71ee6fe803d
MD5 6fd1421c547715cb7b78ca67104bfb78
SHA1 cc7f1d6761d9c7256745ef7586ad53e3183f0e2f
SHA512 f64899cf62a1696adbf62f597f69c3a1ddd62319071f9a87076977b9f6c80992b333223a07cc1645a2fd578306e30abae12e18afc41cd582ee9717ebcb423a69
SSDEEP 768:LJzWwtsJOD1m6OKCj51ZXm/bv59n7WaupX:LZ/tsJOZm6ZK1Obx9wpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016
Size 16KB
SHA256 850ade08bf44e4d128d93dbccb9b99b71dacc2045aeb1c20697ca2a3be2c332a
MD5 9eaab132f23a9da7998e0c0e260cfa6e
SHA1 fc8d2cbfa7062bfe08438edfbca63e046029b216
SHA512 33d609597682e315e04344c813def0cfb3360002a5ac5b7569588a27830fab396db711874f51832e498eade42d3565f5a0b7927f2497e8ae9a425cc45136c3fb
SSDEEP 384:3CEs4UbeqiqxOk6HlRPQRCO7pObNuXi/ylVX2Mm+6enZT:SYUBiGnAlGRx7pOyi/ylwMm+TZT
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
Size 20KB
SHA256 a2d804e54d655a53053419498366fcc7e4a9e485fcc872795b22b31c6b889720
MD5 f550dad3dbfb045a5d3b91aaeca0b384
SHA1 ae0700d295166c471d2e3640134d7bcfb183bbcb
SHA512 1eeab46bbd2eaadd75ba18fa3d74f9ba0555082588e7dfca77425adf6716d9553b669250af5cb2948cd4d4a5a4453866834f018709941da5aa67214c0f6b8b95
SSDEEP 384:dTbKFgOymon5sOckpPr+KcrfhIK7DRPnkqEwZs4EMScBjofN3DA3ir:dTG8mon577pPrafKgN1FZsNMScO6ir
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
Size 48KB
SHA256 e9515acb1b0c8f7c1008358ed424d6563cae681f0e87c53547d0cb7b9f51b051
MD5 21af9bc981d404957c6344aaff4b3e28
SHA1 e5569bc0876884ded0d9594432cc261effc66d47
SHA512 fb42427a114a3cb5739c30f6235c4fe3102876b2063772665c82ecce483955d357dead930e6da185f2b27fb0e72b9837ee272c3271efa5b7e80f98edf4cfaae8
SSDEEP 1536:sDF9H9bZmzQSOU6n5TxW8FVkQ+Bu4OcxeYvXkX:IF9ddGQSOB5FVwBBOcRXkX
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b
Size 80KB
SHA256 f652eef37fe30dab759f5fb84a868b046e49842ffd052f02bbb4ad7e9d5c2c9e
MD5 78c49d6734fd61960e6c50f70c550b67
SHA1 387339d29362b7402e5b0c84428a9a0d70495f76
SHA512 0bd0788e7a9a691594a524b2d299e1e806cc43c4fe0cabb644a0ca2d3c46f9bd683fb06971ec7e24440db922f6cdb8eaefd65db46b7c5bf417bfaab5c0e587b6
SSDEEP 1536:e2kY96Y6NHt+TTHCveDerbN4ha2j2291cJCutbfU8:rkY9qA3HCveDe/N4h8CutbU8
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c
Size 43KB
SHA256 252d971616775193836fe6c0c057edc13c511ed2bdbdb61fbe3c4567a3a8e530
MD5 66d562e3299ee732a53db150038c026e
SHA1 f514a9e346cd443d196c1bc401f078a9fa147323
SHA512 ee24be2709cb98ccbde710654eb1ba533e432819caa8c6bf1fedfeceec452fa3c5f3b2402efc06e75d59e55b6e7beaa71f88bd049fad8e17449c0fde217a6468
SSDEEP 768:Eb2JFhdL049DkFURTek2yllUs+M4cEFFCehq2SDDAmHKbW53Q0lld0ZAjibnY1m:m2ld44t3Tth+HcqgekAmuW57lq2jmnQm
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d
Size 42KB
SHA256 dee6942321440ad24c989d45fd96bf0c0c11e63e04357af2128118eb75eb887b
MD5 6eafc48312528e2515d622428b6b95cc
SHA1 8c21c748004366757a93c587668ab55cb6a4bdf0
SHA512 c501160df9b93014d510cd22060704b434fac4c6ba242d3e625e1bb6e838aca31889197e74fd4d082f4333147ec18197b2a31619d55d37c9157ec275621ee64a
SSDEEP 768:/e2BFH2TGJ0DdJWBXTZ3Ul513BAc4YrToGxEQfSG74XhVKJqE8Sns+Jp6/zj/6:W2/H2TGJ0D6BV3I5jAdYA0DSGUhYf8Sh
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027
Size 41KB
SHA256 cafe3fe334035fb21ebef6484cfbe1efa85c46f02113c57f8047c875fb9928c5
MD5 38e00f7de6f417aa3a458560a15e2b8a
SHA1 b451a3a2ab0b04170804d6cf823c6465f33f6f44
SHA512 659f0a9a53e98b2e5dd3256c55b96e5cff82f6b323edd5f92f8eb9897e1376329454734c6c799963ae392833d948eac84fb9b483a5a099c9ab942990a18e7f91
SSDEEP 768:3AuXdW5MOFTK/6S5tJxE97FOTBEkafsXk+8inJVGVKHTq53qwSXIjoxlGMo:9XdSVWpVG97MTBERsUZiJVHe4Ij4kZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b
Size 43KB
SHA256 ecc55e4682a2b83956e183e86dc4d475e91bf192ea71faab52a8ed8cde83a3a3
MD5 0acd8ff34f3a5c177d02e9011ee74eb3
SHA1 7985774d3676c27586c71bbf28b1f53598951a05
SHA512 bd5402b5214bbe9e499ec5cd9c6933592e1d3599ee80f72fd2ce2076fcd50dbc355cf3d58e923ae2400d09742768bbe9086c7cebc8d2560e741726bb37374ac2
SSDEEP 768:EWIgB10sj+CQrQPNU/22EPvb9MnG0yuJeM3cwns/bnqYkUrw0vfOdkG/PBGf5k/0:EKBSKNU7EPvb9MG0ZdsDmUrb+0f5k/KJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00002e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e
Size 97KB
SHA256 c1b09a841c20685a6daa48219db49055230b28ed43d27a2511e66724b85127ef
MD5 4a83e7aa0862799ddcef824dc5159fee
SHA1 6f915c0aa65397411934a3ec6981a211dc810f7b
SHA512 6d699227be5717f220a95ab6372a98cd1cf8853dd185197aadc23e97534917f3f79fd8729e369437f1e95d6d90798fdf5ba178d5d818613e7cbdd3dc35a7c72f
SSDEEP 1536:Lmh3nM2ZDRnUtuuZDESmvLlVLimuh95lCbnjXvd4HabnqHvOQhNSZOpFwd9U64Rt:OZqEuuSAxS9qnl46bn+OQvHbat6t
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f
Size 21KB
SHA256 998768114f2b646e27ca899062588555c326cb118cb535ce287ad59689014427
MD5 63e694d963338f8a9048234bcc88295c
SHA1 eeecfc90c1652ff17353b2f563126fe889752ceb
SHA512 6af87868f2e042fbb5c9c8ab567083d2f6ec397f4c265f0147f491c9252bb31ab7c6a1bbf5ee02da8c0e418a38015a7dec2987ea15ebf4c4292c8c641f1e80cf
SSDEEP 384:tjAFxl9pImBV5ltJUjA+w7KlEMellI4WqD2gWGFdYrw0h7dULl8cujYS52Gqdm:tU3lTv5ltyj80EMeleY2ZzJh7dULmc54
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030
Size 41KB
SHA256 ca2ecd1e95f36eb72ac98a4a16cb74a1f1184764186588c13df91e768b71105d
MD5 c2a9a44dafc1c7778a6160348f1bef9b
SHA1 b6f006da4c62788f7a4a01fe6272961bfc99c91a
SHA512 c563e46e3444f5e7a8dd3f21d0cbf973a50cd616bd67221256df1d56848ac9e1d5eaa19c0503154dcf853d837666f22a831f51484f5c386dffb7130f98e60578
SSDEEP 768:LsbxSfAUrm9KmUaaIIL/l6ZzaPTGfasPPQVFUlkmuHoXs85K6oKMRNl:LsbxO1mVUa3w/jPTEJPPIk1TKtRNl
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000031

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031
Size 29KB
SHA256 6848ca275152cb21d5f7f9ef6f617fb5ffb3b1cb6431723b905a2463aac6dec5
MD5 9b5ef1b7cf19dbdc075f6929ee5b0898
SHA1 51411b7d1982526e2e41081b41a2304170c76d20
SHA512 0fa09f07ae2e213174663621546c8645082e95844d613e42c35e97edc839d3ff6dd5cf630a17c5827900fcd034a85ee20cca1fabf14fd1071730cdabb1085cf1
SSDEEP 768:h7wqnujifROHS3OwmAeg2T8g6fIzmXgvV8VDrgi:h8Kujiwi1eg2MIzmRVDMi
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000032

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032
Size 40KB
SHA256 0ad121e8e6f746ace5fa489a9607dd33d961311a8c288b48b3ffbeaa9abcdaa6
MD5 e51713de8a374eb38b63f0da6291d8f1
SHA1 bc585e63368c4df5904a95f3799f6e9f953a1dc5
SHA512 1c91b39730410d0b2e587d67e9790080847577e1605118a39894e8bd158fd3650f9b0eb294a8f3e5f280b2688b8bf7bdd9e703894606255c065826e55bd6210d
SSDEEP 768:SCFC6JLYxUs/RHQfFKCzN+VqmHM8T7oeP35I6b22051DOrU7jWz:S36G/RHQfACzPoMsMIG6iH7DsUu
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000033

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033
Size 85KB
SHA256 0e10069fab6bb3083dba1b56b844c6682e9092ddd9d7932f78aeb902c14a712c
MD5 d4a9bb7e8de8f088750f8da0db9ddee2
SHA1 d66ee47dab71c9574724661c929edc45bee2f21a
SHA512 d351afa877d7abb9152631d5aa897718b9ad10a87bbada7852891a814ff95a6acc961f81641640ee061f7207df0742b5e5ed3d833fea0a1ffb5e0aa219686c70
SSDEEP 1536:u0nMvhIP0ZqEu0LKw1dG5DiWGAUUh3MJHMVx12QDDgWhot/cG5Ff:u0MJz1dGUWGA79rVx13TqpLf
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000034

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034
Size 64KB
SHA256 d5028b4d18e3c96d8dfec7c3b72a875334ea87a2b4c397e37a83a6191437c7d0
MD5 251ccf8047bec87c358eeb4b22c8e4d8
SHA1 38c8fca14364e6b367b96069f4c77256cb49b2c2
SHA512 8400ff8316a96b71ebc2e2af44d8edb4e3ecc5b23b019d31965410225ecf3c6438902108092e0a4dd3cb5773ec77b8e4c3f88876f835c563bfc6408120d83bc1
SSDEEP 1536:jLtXeEXCNbASyxrlIz5bp9wFuV6Fvdhrl54slOaY5HaC+BTIn:/YEXbt4p9cuVbslmn
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000035

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035
Size 29KB
SHA256 d19c3bfb6e819098cdfb151395202dc9efa6d6d9c7c8899eae615c431c52ff29
MD5 80d03c3470bee7889e79701640844205
SHA1 ee1fe3bf2d2dfc33142d0fcb584d3cf415b60bab
SHA512 882a6020c9ec57362fe09248cdea5f43ecd4c9abd1ee8cfb46be99ef013ce7de53f65ac89a77267a1f1542ce27cdd0b52e410f8bf3f4e8070255913b9979ddb8
SSDEEP 768:ZbahEG+J1tFInM3ZUVKQrSy5qdocI9pesu2v:wf+wnao5vj5u2v
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036
Size 38KB
SHA256 c4cf3a4e614f76cb610a4431b81dc522a10ef5823c5ace6889ea9a5a5b0b8480
MD5 36ead7a48388c8c18d849727e2ccbf75
SHA1 376bab64d84d7f4eeef458beddf3c53a9305c10a
SHA512 bf3d466ad95117b4e83b938d3a1137b3c12a04588c853f747dde2069901e7bd663a0b519ab5f2afa74ebb62a3a5eef561b2d264cd5e157eb75d3378c62060db5
SSDEEP 768:F6ToRxXbO7aSiq/IvM4vTzCDdoOI0Mx1JUu3RDhCMziFrVejeq:F8oLkaq/IEwzwdoOLMzBDhYrVejT
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000037

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037
Size 34KB
SHA256 4fb12b6b0a6fe7c54fee18a9d78527bc41e34836742d2b5632d28d55865b4698
MD5 d2e445ee1dc23ccf5d2c416ae7df4ff5
SHA1 1929e79c8c7f398eb041bbca1ef705f85454a658
SHA512 24d64c2df7d97fd5938a80d69ab9e8e33726383e54c5745543166c1af31f2b71a0c2006e97060047233a31c5b8037defc59dc10b496a9fab1bb81f69c0021e82
SSDEEP 768:9Pr8lZaGzNpr7E+43l+z7khOMaUa2jcxy/n+bdFAYtwOmBf2ifIs/9fxp:trgZxg+4bkh2j9/+RHwlBf2iAa9fxp
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000038

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038
Size 80KB
SHA256 5a513e13723b5e45f112a2ba2df3ae0a95f5991b57e4961c019dfaf736f1665d
MD5 6b306df16e444c24dab4c9af6e6b2b39
SHA1 71e0829eaced4805273c5e458d5609ba29230f30
SHA512 15be598de16c7304a67dc9fc4a7898fad7ce0c2584a96fb11d6d21c280d4512c6b2c7559c5ea13bcd0a84358f630577987df9f10fbf21fb90211401b66f2c5c5
SSDEEP 1536:U3X04Kreqo9o2wxjsuyuhToga3TTuoAyvCFcSGDk3:U3EF3o9Tkjx0/3TT9vC6e
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039
Size 42KB
SHA256 1de3128d8fef7c5ab2149e8d9d3f8c29deeac3aaae4489a542664e10c9f2f661
MD5 0567c9d6c045c7ca378a114d5afc9cb3
SHA1 bff994f11a2a91d956d1fc28460b68ef65cf549f
SHA512 b1caf814c20c8e3a4f028c4a40003977e04e97b8770bbe2983be2220d333b06df892e474edfe0fcd053af63b8da9a31f1c6d4b1d2aea677b491ff2713a8c7b05
SSDEEP 768:ILKmPq85/ceWBmSiSd7nKBGPG1nXGb5bPZje4fMeaMR5Rveou7uC3a5M:ILKmPqOxWBmujynXG5c4UeaUe9dKi
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00003d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d
Size 71KB
SHA256 d82a46af347c78504cedc4c7867e255f9fc4e66a9a81cf714f8dd3798794483b
MD5 f43f784b16042c2de6d92751fbaf6529
SHA1 e5d5963ff20dd5faaf3a1c64262431dce2148539
SHA512 351805d9f07b025e3ac0f30e1e567e0252dccb496b8bb23186da1736242c143e0eff2eef2835431eba0c7bef0191e2f31493c1812244537a6beb29e0db88ae51
SSDEEP 1536:W2bME+j1vayYnN2KjsPq0KxsHPNWJg6QKxDrapstWtdEOgYv2q:vR8vaD2qdsFWJPfJlWx2q
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e
Size 59KB
SHA256 8a7582309f4b7a817ef76cb02fe1a1dfbc998983c3e4afdf0ed96c39a5767ef7
MD5 15592065f79bd85c5b133816d6d6a24a
SHA1 bdb19e6bae5d2bf2412116163e0079fe5a7436b6
SHA512 18d84fcdc6b806fcb8098bd0af8b83408d98de089002135f21b12fa5ab6facd0c91cd7a5d99ada4763592a574cc6acc55b89695a9ad3950248d92c3f312d206c
SSDEEP 768:6qFQhUW4U/swTNuKf2lZtEsO29S7hA+OkfjlzUxlfJ5fpvYVpmmW3n2HJxN8:6aQhUoH/elfO29O2+BhWfJrwVpKUJ/8
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f
Size 37KB
SHA256 ab07ee0224458324fa0ac3663424fdd0f917817a9cd8ec8d2c28637ccae05f9f
MD5 4f4c20831f9f52821cb48074b8ef3b0b
SHA1 ca0d82ba5eb304ca5a6fe3f2cf10537506aab493
SHA512 068ebcda02facd7b3004bc8dee0cf860d653ce545886f3a742709af95fc811578b4889c58962cd131ef6d86485d35f886e4bf8cc02f796ddc4e1ed1dab330870
SSDEEP 768:C6wBW1Xj/7uRE5MKdu+/84iyGdDGuVrNp03QbumF/vdgfLZPKIqc3:CBBWxlnXPGdDvrNp0gb7BVQBV3
MD5 SHA1 SHA512 SSDEEP

Submit Download

db4c87cf5b79dc25_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db4c87cf5b79dc25_0
Size 319B
SHA256 271b0fe8b7c48d34a3407c224420aea2336470f690a7e95552fe7e5a10ce2937
MD5 623cf36741f00d1c05da0ef7ae29b85e
SHA1 077e8301163961e924d10244eb79a621a7b1357a
SHA512 d6931d2161ccaa35b7bcde753b7162745eecb0463be9ba40b6476739dfaedab80e0e4f7be7eaa73e795b8d8d7759489a2801b05b8cedc0937f152368e594f233
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4c9fc1a79112e7de7bab58b1e7f58cd97ef8560d1e75d9045271ef47570b777a
MD5 a5c143e0da13d2828e817fa822aeec6c
SHA1 10f28c35ed1b99ea27e3bd310bf49d2dbd57f33e
SHA512 7c726d4c3fec2fb774b5ec20bf858bfeb1dad79d4c78cbba83e96648ccc7ac796b04e7258a477ca6dec1bd295f4fc00b620480ec5b9a6136a9b0e59c447ed23c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 11b13be0ec7ad829b9f1fa6cec4f6a5bce67f44f102567ca39e49e8b4460b924
MD5 f894dd6e64d988b92b97f1aff3b4eb0c
SHA1 0c7ebb66c4c7b60d31cddb029b8bb6775474184f
SHA512 5d03e9132b77f7a9f715ff63347052628d201500c7c1a6a2226f2ae2901cfac8c312c19ddbd7669749b96073e5e48f86552b814e744c4fbaaefb413a4c313015
SSDEEP 192:q16w9uWUBEJBSyOaq/SPSSYgSZcfw3b8NRSV1:wPaLgz9cV1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 56c1b22bbb2fbb3ba956eb296184a983d1fbf8565ecdd4eea60f5a979206ed50
MD5 a0a461a30ad1910ddc981d24748e73a0
SHA1 3a54cdb63166c04972ed4c3daf0bdc6cfc4bd578
SHA512 d3f11d006dd630d1ea3a3c6861c4a0ec1a9af938ac7085775977e6f09962fc6ad759f5bf3185afcc8d9c7210ee1e382f2c99e1758a92e87fc786d6f96b02e212
SSDEEP 96:Jf8NpnF/wlFKuKde0jLCAZtexrazHgs9cF4S6ndo6Vzbx2Dl:J0NpnF/wlFKuKde0jLCmtexrazH5cF4c
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 4c8ca967db47215bd21e0bc4cbe12e3fcf8e7655a2d219f082d2d78186d5d073
MD5 3b62dbeabdadfed29cc081ba1aa46d59
SHA1 6db7ad02e36fae03fb95417a27c9e85d6f15d7c6
SHA512 86c2af7990aaa214b962cd49c339ff64c46002716ee3c34f5cbb4386bf22e40e6cadce82dad6dc4f4a10428988ddf2ff40f7138c0b081dbf905ce92d34d162c6
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a2b5ef8839c68cfd79987f770cd5a882b66f94fb97c4baebacbebb8df8d28a15
MD5 03f560ffb1c4ee9f626e205c535d38f3
SHA1 c77d63ab0fadca304d2c31ee5dd7d8bbeab20110
SHA512 6f971d24f4bdc80cebd3069b5a7be6727211068e1acd0d41f536f5d503d4ef2e6ebb2347dad88d0255b8f9262e0e041765fcaaa679813599fa13c24cc5ef293b
SSDEEP 96:nHkgY1t1wpvWMoiVmdeHBrz8UWQyV+VDCziEwb:nHkdv1GWMX6ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 76fd62e228fcde2f0c267af78e936d840eaad9b04efb5201d17d04e21d61b5ae
MD5 277dbc830708f9cbea6229e1cfee124f
SHA1 90c84f3186160037ac01b8ad036cf0d44fa98505
SHA512 ff3f2d15d08c50c61e21b9fb314b1d9448267b21920bebd1e5fdc6a60015a8ff644270bb3a2ae2ead0ec324bccc48f80c53450efb18f5c3b63383d3db5ba5fd2
SSDEEP 96:nHk8Y1tFwpvWMoiVmde8u71jBrP8UWQyV+VD7AiEwb:nHkxvFGWMMu7hSrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 cd348eb2239b842e48ee361aab1f0d7cc60010dfc8680f2e77f44074a5578139
MD5 ad7a6f58b3cc0fb3d4fe1471c7559faa
SHA1 12c708309f0c8a6badfeeab7c8b7fa84b294c133
SHA512 19be37b183e6b7c8e1a33794296186700c9e10802781818e9229c4e744957e6e5c584f23d637512d4bdae0c583af257c39ab1616fd1d1044cf3d7057191855a2
SSDEEP 96:nHk8sQCY1tFwpvWMoiVmdeGws4jNBrN8UWQyV+VD7AiEwb:nHk2vFGWMWwnpgrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 c86739a7401ead70376ec897a4465a45a4a53c2223fbff3cd2c82ee2edaf69d8
MD5 49c04060f3a12caaac04cae25d5e5f2d
SHA1 5943f08ba4f1950f465f65d7b88f149774c7f896
SHA512 69c8dd5efe76a8f22f5b4fb78f2d80c33a6b68e557e0f98f0a62a0865ef457d41536b8f7034cc6ce873e60ba843d0558f672dc02212a9e38c8de85cba5da5c8f
SSDEEP 96:nHkysQmY1lWwphtWMoiVmde4onXZBrj8UWQyV+VD7AiEwb:nHkaDWutWMIonpurg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 42fe2fb1b59477b6ec74fed9ca1f2b9db03851100c7f4cb81d3f9eab7f74687f
MD5 d2b64054e418a61dbb0cecb8de1c43ff
SHA1 4e5d5c765e40a80de8ae124ba436326652dad17e
SHA512 217d8f2c26d8e51b2543bb00f7925b74e90b607d1cd3020f0fde03a7b62d8ac524d4feaac48732231d0700c620cf45921cacd9da88216e3ea560a2f3f5852d47
SSDEEP 96:nHk8sQCY1lQwpvWMoiVmdemb/MF0Brl8UWQyV+VD7AiEwb:nHk2DQGWM2b/7krg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 c057afb8fefa2f5d8e427a366e56b445f33e9c5830a68c92bc5343241961f5dc
MD5 68c02113a44620debb2911dc0c046500
SHA1 5459f3c2eb2e3e2e12eb877ea8b19e56524f6d06
SHA512 928f62e88b2b76cc0954cefb4437af37457a7fd20b2e06a87a0d3f5323469fe6018678de5041b118a05f335420c41d5931205b01f5300b2f927fa4e3242f50e9
SSDEEP 96:nHkysQmY1lhwphtWMoiVmdeVM9fLNBrc8UWQyV+VD7AiEwb:nHkaDhutWMlM95Lrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 a9e674fe5e486f6443955323acb76aec612a0c80d21a8759762851f1e58106a1
MD5 67188f4c5089e9c20e5412139bc8450c
SHA1 e1ba2827cc39c54abf5fe681bb4f5c59469419c9
SHA512 1e6adec3fb191cc8044f715932fc502d42e60a80ea82a895cfe0020c60223a29d1ebc36e81b40da70ea869a070fb74b9233f87a11954b3f99cf4b1f35bf7dec1
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 d7add01741c0d104030224add94065f5f0569b1710aed367d85db76eb1bf2354
MD5 91ead3705f472d1133dde8f99305cc61
SHA1 2440247c2ebc3760fc92b016e937e96fba18410c
SHA512 4ab4143e6f431d042369a1fec22cfeaf79b42ac08e327f57db5aa278ddda46bb8baf4c075bd9ef25c293acc3bb98d1bc8eccb6df1f366a38a7b2184504fd7ead
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 2KB
SHA256 50e7c151edfcafb75cec727c0c65d3314292cb657f1ee3a61bcd2eac748ce429
MD5 9d41b82b008578da51f735901f7be1df
SHA1 ab6fad3740306abc6232c2faa62f2cdedf46f85d
SHA512 5c333a8884bc74d52636cb56f1fd67c06fba596d0456704b2d276fa6df213d887a74206950e04c392309b0e6c75128867544904fbca1b0683b0ff09eab409059
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 2KB
SHA256 4faad8ceb4f5b8f4cf76d15b423fff3ef557e6ccaf61308ba7bc5f11fa06ea13
MD5 3044ea7a564987541cc815ec8d9c94e7
SHA1 1bd5b569ee392b4177bd415d13febf9cea89e523
SHA512 f88b610f3791096bf1eee1136c2bdd4600e757163dbfde80558c7ddbd865c75765cf845c4738365d3434c1b78990903e6383a3bbac2318f507f831b57b844daf
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 2KB
SHA256 18db30792248b0084a5e865d89b4ff435f2ff1f1c5bca3cdee4c3bf01727f75b
MD5 d62c62185480872b1cd88f555ebef01e
SHA1 97b90faa03e95cffc6c4f511f9282694089064da
SHA512 4a1d52cec29a549c3363555040e3763cdc73bdaad9d105d05ef4b4417d1f400312730ad74d346e3b9446947d12bac81df67e3efff2706784122ed4835abb42a9
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 2KB
SHA256 b5a033c116cd651b52a6998a8e41cd0d1fe493a00d33d665379808c555a04a05
MD5 6194e99d3e977f445dcf960ab7399c63
SHA1 08da10f8e4350102348ceb24d6667902da26f052
SHA512 24cd49c606a73e0835b893d3557b710f1602e53b07f1d9907fe048a0dece0d6aea45e35a6798676402cfd559990db97a19dfea7b7efc9b43b1724a24631cf9d7
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 0d5ebbb13866fe72fc1f4c153bc95882317892f66af7de240d004d9a3df144d5
MD5 833e928ec29c99b3cd28b0b466f8591a
SHA1 4e26d2a2bca4a0ed1edfa68393cd3bcae149d4d5
SHA512 0bd3962a57ebe1c5f86283540140ae1489383ed7dc99a0cf8423fab52b1b30206415373381471212aa7a44cfae1a3e8121769b847180733ade671db4af7cacbf
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 2KB
SHA256 a8db77900f2004c080e77f955f9a2e6f29eec0907eea1ba9dd0412902be2212d
MD5 65b599580b9fc49504b3d0a757782ea7
SHA1 b78eecf2b5dad09d68c4411810392b9c99bfa260
SHA512 8aaf3bc632753319f09f68e8087a63429fdebca813fcc08199527fcffba94fd26c95551ed6a7fc1b8324f29fd352f5618798c8dcde2cb0e97b09bc282930f513
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 2KB
SHA256 bbb33f25f8c43e17cf0a5d0013697eb39476aac55d015802cca0cac396686673
MD5 ec9e69a15f3f648d3d3863474cf03a70
SHA1 2214ad134226df3dacd2b6723b2b45a4f02db83d
SHA512 851570eaa92e40f8abc156acdd6ab34a4aeb0f1bdc6c038726c6aa7e78c6c9fd6aa0fe3681b20eff29b545570716e5d11f133c5f462ce641c672478199d4e541
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 2KB
SHA256 6c5615012dc602dfcec4181dc57aa4c3649a02ae8370a8e7c84eda971b035d41
MD5 b5fbc61498cf95fa6d2db3f9138c7885
SHA1 c15024135c83258757a14f8b4d22bb4956f10717
SHA512 2dd868064ca703abf60a10bbe55b199dedb17c3d9c93d0ec6883b040a5b09d9f9b681ca6086ba1cef7ea45ef1e05d5c1d5303f2d430191be63cb7c3344da6cf0
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57a141.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a141.TMP
Size 1KB
SHA256 b5c3f206011339c3dcadc8334cdff4d771352574f3e1826d9137bcb34d83cd40
MD5 18c07f79d57d558c9f5a25cf60fa6638
SHA1 b35e89e27b856fcf7c74f1ed0c138533143029c6
SHA512 1eb4c19b4dfb3a6455aeb6c9900639295d769bd84e4c0e0141dee2fcfceb87d0969cc09b8749cd424adadd68a814e2f34ceb9f8a4e3f0d5ccde44cd7fe87eef2
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ffc84874eefc23a2d568a53b9ab7a09fb06860be7683b3410d79ee867d5d043e
MD5 eeb1adbe0afeab86a02a03c3b36070da
SHA1 e75af36499bc53b5a7c2b6bac148ec3c666c0337
SHA512 bd52f7fed0e472424b6f3a5bceb181b2397810eead9cf23f728f60e81f257837f73808424bbf8ff47f3da1e4a724af32f09365407bb58d22d4a3fdf81d7f2778
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup/Hxe2RUwOMj2Jk+OblfBh2:A9iIxuERzA83h09RZxY/Hll9yJk/XDa7
MD5 SHA1 SHA512 SSDEEP

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download