hxxp://roblox[.]com

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
140s
max time network
145s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 19:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://roblox.com
Sample260420-x965mac15m

Score

8^/10

bootkit defense_evasion discovery persistence

Malware Config

Signatures

Disables RegEdit via registry modification 1 IoCs

defense_evasion

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1"	salinewin1.5.exe

Disables Task Manager via registry modification
defense_evasion

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
335	raw.githubusercontent.com
336	raw.githubusercontent.com
337	raw.githubusercontent.com
338	raw.githubusercontent.com
339	raw.githubusercontent.com
340	raw.githubusercontent.com

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	salinewin1.5.exe

Drops file in Windows directory 14 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_628689005\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_628689005\v1FieldTypes.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_1268309112\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_1268309112\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_1268309112\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_2110866210\deny_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_2110866210\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_2110866210\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_2110866210\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_628689005\edge_autofill_global_block_list.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_1268309112\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_628689005\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_628689005\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	salinewin1.5.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5684	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134211872853872008"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-600123060-2148212387-2211176695-1000\{7B038690-7E6B-4A66-8566-39C028383AD5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\salinewin1.5.zip:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6124	msedge.exe
6124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4752	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4752	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe
1924	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1924 wrote to memory of 2148	1924	msedge.exe	78
PID 1924 wrote to memory of 5684	1924	msedge.exe	79
PID 1924 wrote to memory of 2004	1924	msedge.exe	80
PID 1924 wrote to memory of 2004	1924	msedge.exe	80
PID 1924 wrote to memory of 2004	1924	msedge.exe	80
PID 1924 wrote to memory of 5184	1924	msedge.exe	81
PID 1924 wrote to memory of 5184	1924	msedge.exe	81
PID 1924 wrote to memory of 5392	1924	msedge.exe	83
PID 1924 wrote to memory of 5392	1924	msedge.exe	83
PID 1924 wrote to memory of 5392	1924	msedge.exe	83
PID 1924 wrote to memory of 5372	1924	msedge.exe	84
PID 1924 wrote to memory of 5372	1924	msedge.exe	84
PID 1924 wrote to memory of 5372	1924	msedge.exe	84
PID 1924 wrote to memory of 5932	1924	msedge.exe	86
PID 1924 wrote to memory of 5932	1924	msedge.exe	86
PID 1924 wrote to memory of 5932	1924	msedge.exe	86
PID 1924 wrote to memory of 4352	1924	msedge.exe	87
PID 1924 wrote to memory of 4352	1924	msedge.exe	87
PID 1924 wrote to memory of 4352	1924	msedge.exe	87
PID 1924 wrote to memory of 1332	1924	msedge.exe	88
PID 1924 wrote to memory of 1332	1924	msedge.exe	88
PID 1924 wrote to memory of 2216	1924	msedge.exe	89
PID 1924 wrote to memory of 2216	1924	msedge.exe	89
PID 1924 wrote to memory of 3228	1924	msedge.exe	90
PID 1924 wrote to memory of 3228	1924	msedge.exe	90
PID 1924 wrote to memory of 3972	1924	msedge.exe	92
PID 1924 wrote to memory of 5300	1924	msedge.exe	93
PID 5300 wrote to memory of 3728	5300	msedge.exe	94
PID 1924 wrote to memory of 3572	1924	msedge.exe	97
PID 1924 wrote to memory of 3956	1924	msedge.exe	98
PID 1924 wrote to memory of 1124	1924	msedge.exe	99
PID 1924 wrote to memory of 3916	1924	msedge.exe	100
PID 1924 wrote to memory of 3916	1924	msedge.exe	100
PID 1924 wrote to memory of 3916	1924	msedge.exe	100
PID 1924 wrote to memory of 916	1924	msedge.exe	101
PID 1924 wrote to memory of 916	1924	msedge.exe	101
PID 1924 wrote to memory of 916	1924	msedge.exe	101
PID 1924 wrote to memory of 4048	1924	msedge.exe	102
PID 1924 wrote to memory of 4048	1924	msedge.exe	102
PID 1924 wrote to memory of 4048	1924	msedge.exe	102
PID 1924 wrote to memory of 4492	1924	msedge.exe	103
PID 1924 wrote to memory of 4492	1924	msedge.exe	103
PID 1924 wrote to memory of 4492	1924	msedge.exe	103
PID 1924 wrote to memory of 5648	1924	msedge.exe	104
PID 1924 wrote to memory of 5648	1924	msedge.exe	104
PID 1924 wrote to memory of 5648	1924	msedge.exe	104
PID 1924 wrote to memory of 5656	1924	msedge.exe	105
PID 1924 wrote to memory of 5656	1924	msedge.exe	105
PID 1924 wrote to memory of 5656	1924	msedge.exe	105
PID 1924 wrote to memory of 5420	1924	msedge.exe	106
PID 1924 wrote to memory of 5420	1924	msedge.exe	106
PID 1924 wrote to memory of 2616	1924	msedge.exe	109
PID 1924 wrote to memory of 2616	1924	msedge.exe	109
PID 1924 wrote to memory of 2868	1924	msedge.exe	110
PID 1924 wrote to memory of 2868	1924	msedge.exe	110
PID 1924 wrote to memory of 2868	1924	msedge.exe	110
PID 1924 wrote to memory of 3184	1924	msedge.exe	113
PID 1924 wrote to memory of 3184	1924	msedge.exe	113
PID 1924 wrote to memory of 3184	1924	msedge.exe	113
PID 1924 wrote to memory of 4016	1924	msedge.exe	114
PID 1924 wrote to memory of 4016	1924	msedge.exe	114
PID 1924 wrote to memory of 4016	1924	msedge.exe	114
PID 1924 wrote to memory of 3956	1924	msedge.exe	115
PID 1924 wrote to memory of 3956	1924	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://roblox.com
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b4,0x7ff8f045c188,0x7ff8f045c194,0x7ff8f045c1a0
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,16540294210126693523,6685337759755705949,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,8063177355286053246,2313592265418534300,262144 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,10026633938184952816,5808166395225400640,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:13
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,2827356605577626470,13934078444236532683,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,12954180941081155487,11202362593728930734,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:1
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,1811617765773210229,8735948726179621292,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4860,i,10705085846221265626,13756199790236826788,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,9882599032162120289,3919980993420354080,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,11694362165866990870,7803390875736440754,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,7948618884530255750,14196748968855090539,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,3831697726523905925,7884166111271300410,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,3831697726523905925,7884166111271300410,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,13038943334851005256,5229390105483903973,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5300
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,11549342829600888980,9849726635041984377,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:14
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,18320482466757960567,14503510438069789276,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:14
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,3744642385893310261,1682747496831105403,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:14
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5500,i,6383260794248265056,13427529658743029381,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5208,i,2621449298042543898,7510416847583840023,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5468,i,3428474091052766848,6578247150639652381,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6976,i,1060416965524983039,12394749109902215673,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6972,i,18172938413908887843,12975530627257073460,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6852,i,3123731282250785789,9862383167621695422,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,4161842643266313469,11489705416577080259,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:12
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,6033630284929950603,3167805642689854787,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:14
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6580,i,9364069015433588080,2550409297460032951,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5660,i,12485872517041975161,7389179520385799544,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6976,i,1490671742079361616,462746768392379813,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5860,i,3083258061244691497,14099192640507847674,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7468,i,9451522536037249710,13241220269648837082,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:14
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,13364002293422726858,4269169549321263466,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=7424 /prefetch:14
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7600,i,11161239756783835332,14489790526469983117,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=7456 /prefetch:14
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7452,i,2376199878281345084,15433053274911501428,2097152 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=7552 /prefetch:1
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7760,i,11144266967867447688,5213778620107311559,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:14
  2⤵
  - NTFS ADS
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7392,i,15738926729569978013,9044885190633885678,524288 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:14
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3580,i,13393298265458632452,17501342607249270106,262144 --field-trial-handle=2072,i,5999368251623462878,16527508214897920353,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6124

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1800

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3872

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5560

C:\Users\Admin\Downloads\salinewin1.5\salinewin1.5.exe
"C:\Users\Admin\Downloads\salinewin1.5\salinewin1.5.exe"
1⤵
- Disables RegEdit via registry modification
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
PID:4420

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x0000000000000494
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 71f86f37b013034051fae2e3307728bc40653c617383d6aa85219dd8ea093ca3
MD5 2ee9c9062df63fee32f65bc087b93005
SHA1 2874f6b34fdb5f9ff64aed6e38005f7940050b27
SHA512 99729f971f840d780b0e5404260284b048d532cb0dbd20969536cacd61a2d2c52568d6b9d96f6f0168b93eaa3c7236b49d8aafb6138d1b1fcbe89990c6af5af3
TLSH
T1AFD08C4821F66CBAD09ACA7219057B0A2959EAA79E93AB2A39B36C784C4300115911F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d8c0ebc33f7882ac8aaa0f941413384749c7672a7744de3485d53f3d7a832ce
MD5 fb7d9391eb1040937b5c31ff61febe79
SHA1 0be0bde544b492ac590e441f96bf8d0a378d3782
SHA512 d4a405f080afee18100d407e824cc3366114b1acd56307d247bc25ee87ffaba37406581a2dfcfe9320df4d014582f86fd300e9f67a54b4fcd2e471e1358c493d
TLSH
T1AED0804425F15CB6D046C57115457B053955D6A79E539B1A35F36C784C4300115511F7
MD5 SHA1 SHA512 TLSH

Submit Download

92ccd05b-b32e-437c-9405-53681c20fb71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\92ccd05b-b32e-437c-9405-53681c20fb71.tmp
Size 18KB
SHA256 8c41e975f6bfd7287f65acef7c97b81500682bea5456a23a68bd42e99c1c2f21
MD5 89fede006cb7498c0b3ad28e61b0cb26
SHA1 943b2fb905dd82e85f6604ba35978f223fcccc5a
SHA512 86b1c7c7c7dc3269f86a48a22915230fa39a2ac84a81b99b820de20112d6d650a625016e43a339cc7e95ce35c644b4dba0d473d55f307c595f57761386894067
SSDEEP 384:sxZcnXCEOH/frsjFajFrLTiX1/bjE/oZDifjv:sOXeH/fIFEFrE/bqUDib
TLSH
T1CC82081666344977DDD7D219FA067B53D6F81163E6804E88AAFCCA0C04E77ED2203C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f6a3e171640504a254a6ccafb5bfef4eeaeb89f63475a41051da946735a03aba
MD5 78cc93c5120586ef3de9dc0358ead0bd
SHA1 12a4811cdfea940910f90c54bde4aefb2dbefd41
SHA512 2c1facebc16c7123a79009ad3965f5002e74c4acb2b0181a0bf68f6613405bb4e17ad82dd2773d9189e006a869dddbcdd1685355fbbad01b59b7c3f31d33ca83
TLSH
T198E02BAECD259C3709F9071921000746F66553671640690B3E3C920C8F7463A45D581C
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 34KB
SHA256 d27f23c77e9f765ff3b019a8016c04dd8ff4cb4fd2592776283adbe2c3a7f806
MD5 237b4fec77123003fc35c0992efc1a1d
SHA1 1c54b71cc9c55929c2d297f963e4fdda1fb35226
SHA512 3388536be0cc74f5bb77e64723a2908003f382b05614f15165eada4fc25f2d605da6a003d9337b88f9ff16c42e6424a899e52c47954f3df95ed68aaf24b8fa20
SSDEEP 768:tGKnhTmzHW9mqMmKHGGAzrRubGexo7xh5AmhrF01n:tGKnhaLW9x8GZFuaexo9vrFC
TLSH
T17DF2F14FBC2176ABA6BD6FD005F3015796AA2C86D1A3308DF3EC591C5216920A81FF3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 99KB
SHA256 281b893e75496de203b9a1950afc4e961317df2028829adcfe570716b3f2fc26
MD5 066fa25fb8faad3bbb4b495603fa48b5
SHA1 77a2d254c4fcf4923e6bbe13e57a5e3c0648299b
SHA512 482031f99e9c31733c73281644292422e3a06c8e360b23d5054e04a0ef0e4bb1cce5bc3a68187f9b56bc3752e68dce1f07f404f11e8d008931726482196b9bbe
SSDEEP 3072:nXRistX+12oS74RcKkkltibc0+Fe9az0LOH5BgugY8:nX4s8C74RcultibhPE0LO0uJ8
TLSH
T168A31290F5C63AA30D8C36C03DB385772DEA1ED9482C7936D724809B875FA54ADE86B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 66KB
SHA256 69c528a3ad5873ca0e934f209fc93bbf78a57a425376eba15d5edc88655f54cf
MD5 65c4a708b6601890973b60c3c4ee5041
SHA1 ea8852913d0c7991c4a785157a4a83e13aee460c
SHA512 aa44b5f2bbdee1afc70ff0db47c44aee7f08bdac160ddadecd1aa6d7f12411ea2c934a706bef8198551b2af8f29354be8c27a2034f0c5ad57a66c58e54b28d64
SSDEEP 1536:pgIarP1oKtcNR7sZpe0hNQkVIjHHUb4GF:darPJ7QeIjq
TLSH
T16363F228477034CB5ED701567D6C3A670A7C5301AEC828783EFD11A68A5678F9889EFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 402KB
SHA256 9c7cd08feb3b027d3489a0f2214df42773a4ebf89598ad5f5cc4b5052b548903
MD5 cd40aec7a99afd459a3c06d1a4d4e4cb
SHA1 b181cbf1c07f2a7d85e6df7e986dc4a358e03237
SHA512 caa6c6122b4c240cbd381a5ba857d9c9a332f6c969906bca7d92586572b8e4477163b8f4e6c3044b8e7891a0607e709d19ba1b04be83d0e15e548b9d4d72dc6d
SSDEEP 6144:NdkzUDDCQE3YB4ndtdX0lw/a5l2WEco3RKO8O/GfWVwHn6PG/20gp0V8IkdOweHp:nNCQEomveZ5MWNe8fNGpPIXHa628XW6
TLSH
T1269423D51EA0FB65D2BD522C50D8C86C11C085B3886EE6F0A3C0F70F6F58E5BFAA6590
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
Size 256KB
SHA256 adb7287fc26c0521616bb69adf7889e9318a0c1e00398825c51c01d2a06f4c05
MD5 81d44a31aedf4fb57ee9d944ea23dfe0
SHA1 9c1bc458e74d05c7ae5dc59dac6cc4a6dd67c43b
SHA512 d17ddff7df8373d8fb4acde11c43d00ee9bf701959e330cd4a14c1558a83ad445aa6263b3ee98e5de3daf98b431210ee149e7ffac763c6d50c06e93126b00a5f
SSDEEP 3072:zANhizEqXhXHWDRs2JZuEDBy2MoZLyBa09819SQql9jGdrTBvGoVR00I4QzUlW:zACcdZZJM2HZ+0nYjGbB00I4VW
TLSH
T1AB44F1B4FB829740CB036ABCD07C2E374B9A54E672C40E1B0B669D212684765EB17E1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 128KB
SHA256 0825f050d4365e786b136532ff665fdc5f7aea536174b37028c57f0ae48b269f
MD5 48ecc5d2315ff123241c0b4d0f34a91a
SHA1 6a12e180f691280512127d28abef74f9e2fc045d
SHA512 beb7516b76184ef936fdeb482bfcc2a2777c1e5460a78531847542b6ca077980a6297d4e26f7bf230c528cf8b6d44f8be1cbff47da093193b67a5e16efe34698
SSDEEP 3072:FEJlk41bN0vbRuAygSqCc8KpEsILReSHW2Hkv:FE+5yg5Cc1pEsIsgQ
TLSH
T1B2D31674FBC3D781CB072ABDA43C3E730B5511D221C90A1B4A636D52A544FBAE62763E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 512KB
SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
MD5 063ce058cf92f6249d441c03c9dcddf1
SHA1 6237aa7a601d9500ac6bf6fb7ff57c64a936f9b0
SHA512 cd8f11170f42188e4a5334ae234c046ae722c3c2f7e3c5c428a04b3cc382fa0cdb160ec992db5a3af7dd968e428fa99475bd7375724bc501e4a86bebbbfa2df0
SSDEEP 12288:JqPcXea7AxraLRORPUdUxYUtrM3GS1fhQBcLLY1bKd:Jq6VQRPMUxBTSACo1G
TLSH
T135B4237717071097D53AB37022CA8BCEB7AF77BA4B01EF7629239744E2C8445F4AA490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 22KB
SHA256 2bec5cc37b268ecf142344ac3311294f05b7b8f35c4a15eb602155097b16bf9a
MD5 b6eab4a17f9236971d45501abad153a6
SHA1 1d8d873c85781c089d3288eb8f5d1870ccb83b04
SHA512 667ff9fc92bb0a6fc64f05cebe551b3f6235dcf7cc2f3b5f6f5d78a2f54d992b779e69b1705f25586fc35d9ca0a0879fc8cb3ba09b86c642c71f284e52969a25
SSDEEP 384:yNk9++QEL0wBJj1WedTBWXAjxW3R+yPvSQvyPdmEt3of0399+PjYFn+fNiixT48:L9++lLL/j15dT0X8c+yP6Q6PoEtDN92T
TLSH
T105A2D19895B48830F306438F16C6F22E37F846E5439ED789C63159E9362B750FD96878
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
Size 31KB
SHA256 dd3077a5a01f48d0c6b3a9ecad6c850de13ccd3e256e39224f5f4e4cd17e56b7
MD5 4fb276c1ff53ea7b34e75934905b517a
SHA1 dbc08bfa2e72e837973255365ba5462c77989b5a
SHA512 f550c23720e638adde3fad52dd059fe512cc4b258e6e8478d566785ea32fd0bfe655541a72ef726acb90ee96fa61e5e2617b3d4baa27743436defaba866ade19
SSDEEP 768:ZLVVQC7lotYNeWAD8cvWK4GIYvxsbTMlyJeCgBp:Zvn7losEIcwUmbQCkp
TLSH
T156E2F21B7B53C1A06B4C0ABE102860E58F9D87B034ACF3026337A7D6BE1351D60DD497
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
Size 24KB
SHA256 e84a4118b27caa95151a09ed3e773e45aa7c96e53c0f9284fc91143a5e13d32e
MD5 26b12f3c891fea18a731caebeda13f11
SHA1 0e4bcac259050be0acf24f4a66f0a405c688d2ce
SHA512 bf16f2cc302d152e19adb329471162956f4c476c37fa6a1a5c6f128aa05ef0c9269622691e5c1514bfa1d9c182a63a9f384f823a657e5a685ccb77be1e76b620
SSDEEP 384:Zcb/ZXHdalGcDRMs9O9x21bar096BFalty8NhnEJBjUAjrtyJ+a2UkD1Di:ZcNXHolGrnuqDB5NVUAVgR2UK1+
TLSH
T121B2F1025824EDAB0E97534627901D0B07E9C51579FCDDB7EC9A852A040F7EDEBC1C4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
Size 23KB
SHA256 76bbb0f704e009dce6a28efed08531e5cda77ff905dc17dc6090affe192a3c61
MD5 f11b8d055cb000c9b26f432541b03499
SHA1 309ad4b94342650a30c8b9ea2c9e89bb1354d434
SHA512 bca26ed1bf4e4161044781b8dd62313c6b288fd9bed34e59a715782208e4f319644557290b5b879c572b71f48b00f5cf074eebc557250be843a009ca6362ebbd
SSDEEP 384:xWY0E6UJQ6ifPD5ZZslcEASCaf1Tyzdr+vmthqQ6YuPJ4Vh2i5SN6COCmDxPeTk:07UJ5qtslcEAza8fKlhP65DpCkMk
TLSH
T145B2E1695BC3FD4C05DAF4AA2F883C54F82EE8535429E811EE7AD8CD3B2F00225D1B85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f5
Size 171KB
SHA256 7ed4def6a81ec927bcf6d3147fb1a4e2f171e7ebfa76b8a1481328c14d19cede
MD5 27ff199dd27592cde4e5bffd30fc1cb7
SHA1 a0130fe9fa6e5ad5267084433d08cdc018772af5
SHA512 fdf72df7db2715547604197d9df854c5304a2b9d3aeb2b7a4ba6632b3a663f6fd877c220d2e834b35e5cd892333951a16288a558cc75559e75510b9974d0c8f6
SSDEEP 3072:BUVU4o4ac/JVE6LW0OTX8w3JEPIWpGoQcDO7ub8030+unNwVsNhYtU1AW9H:BUVUw1W8W9rJifpGnSbxC++N/F
TLSH
T14204131D9E4680743C5714FA30A33BE2A66E8DC94E25FA2E35ED203DF754086974CA9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000105

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000105
Size 65KB
SHA256 cd347596a47263afe619ad7ee58737bdd5069a9261405fc4c67a78dfa733f711
MD5 ee1ebe10db135d3b548ac590d9004745
SHA1 355af879919aebd7bcc766cb396226a691ed73d7
SHA512 a26d99dbb65cfb65da3e5ab26f0f3c5253050e4ac5d642e64ac2e9af4dd0ed50848e6109714849ef9f526f76461e442a9ffe3aafb25932abec86b1c00d14598c
SSDEEP 1536:JaRk+fsstTyErqE57pmqYd3yPnZvm8ZO2nttjlEOHDzo9MOZtr9n1YY:Gs2TyErt1mxwnZvDAOjl9HDzoiObT
TLSH
T13C53027034E4576B2A9705209108D0B9DC2C57A32BF3C25F9F82FA6F3B7521FDA4612A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000106

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000106
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000107

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000107
Size 68KB
SHA256 0274a299b3a81687a5192c4ff424872941d24a0b986035abacbbcda16ca5210b
MD5 d67f112773e898f90e775e65ebeb6385
SHA1 86b3728d490c3c6a6a97809f6b2eb7c2eb19cdf3
SHA512 f6e93b614653bc993daf4e0391000efe6286f78a9cc7d15a5836501d3016f5801c7cde8e8f875f2f1d6981dedc0946dfc87b83133cbecc5af92de3b122999823
SSDEEP 1536:fInxmnkHNVx/Uur0YtX30S30zT9HQG4TGnzmC4:rktPRbn4zTezG6/
TLSH
T13963011299EB3F1CBD0EFA80BEAD35EA0325C995A652A3F5073453E72425B60C025D6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000108

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000108
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000109

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010a
Size 37KB
SHA256 1c4fd8728a966f294196cb9204b944c77529c11087b12227d4fac1a2b0468c18
MD5 6a8b388750a92f656a0112a239f76ae6
SHA1 65a359b83130ddbf810a0c406177ac5d10c1cac7
SHA512 193a6aede0e579ae7754b1bc1f3ae5c9051d3f30ff8734fbf18426fe2184addb085fc15efbc52bdbef86e21348bccfeadb2fb70856de817bd503b7b2d90e5628
SSDEEP 768:J6yQY99+vw/J7H8MpD8uy7ISyurzJY3SIXY/TQxBIBTrEm+W:ULYukNIuy7ISyoY3SII/TQxB8AxW
TLSH
T1C003F11FB377D306BE67A9FE94181DE89585B3362AA0D7D183494932E0971C078A2D3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000147

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000147
Size 20KB
SHA256 b0620bfc6bc5bd4d5149c70da103a30923bdd5928ece99bd5610f9d6388a1853
MD5 d96fb3542248dbd268ee7057ef1b26a4
SHA1 fb95d80659297cdf1eda8f014306901a98e02d57
SHA512 63b2bdb13cdb94bef0e821f10a0a4ac219b4e958f060f927b261f48cf3cc793534204b2a0705c74edd76daa684a3b5200742d57edc1db00a82f210838ff937b9
SSDEEP 384:CiewL3I+oNU0dqZMtMBjhlA924bVbqXVufyjJ/09Nr0dXutgVdcmEaA+WQ:CiPDBHBnWVfMPvcBaAq
TLSH
T15392E13962328315D4307A30AE6F1FC429E872B58E5D5742D32D6AC89381E8DFD638DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000148

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000148
Size 44KB
SHA256 725c2dcbe2271df8592305383e6fe6b7b58b1e1ef33b59ced13a26c8b71fe4f5
MD5 0a941a3d76dac4977b052779d679beca
SHA1 472f522434732f167939058086069ec2890b81c8
SHA512 cc10eefcf4f8ff2d23833734bb3c82a1259527918d786debaf40ef78202b185273d31d2c1febb05a974cf0315120ab27b6212d9a951e861536b07a32209eb2c1
SSDEEP 768:q0PyrdDEdXL1Yt5icSWGcxBYDCrbnQOx+DdsaLCsQBzW8j/CCm0vuPUSfkrhZ2J:q0PWEd71Ytlrc0bRxodsICsQB1vu+W
TLSH
T16B13F208FA1AA5D0FC414FFFCF8C927FD61DF51278A2006F68A285D6E956E94B4598C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000149

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000149
Size 119KB
SHA256 d85c41387110003ca54aa0390047b90d532ac1cae2ff30b0f85a8f2c15e2ab15
MD5 b55074e8209778f31dc09c60b2c156fa
SHA1 3f711318a507c4b488a2f1d515e0c195927f9529
SHA512 e5003483068a18e409b5657efc4072cf9fb9a3a2a424eb619862aea5608c299f809fb9d72818500b9b41959b09b897856124e572d33793887bcdb28565b8ed66
SSDEEP 3072:czS5DpQgTqu6F/eu/aUu2b0iODPVtUbW4:OSFpQgTYKn2bq9tg
TLSH
T174C313609ADEF5930ECABD80D12792DCA99F41E7829FE838B3741A9E7DCC8D81044895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00015d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00015d
Size 202KB
SHA256 6ae2e736bcd1c612314ea49facd22f08753c6047763e7b62ef7abef9aa9d7ba9
MD5 065a26b3f9570081f54201dad1bdc0e2
SHA1 e311decefee96fc9afc2e96ccdedbb7b6bf5a6ab
SHA512 a5710b30641d22db9fc2174d1f4151c76d50274df064207f5817fb80f4d5fc3411621b54d5775da3973b607c228a7ad58b6a02b79a6fd56ac0ae7bb56aa0e706
SSDEEP 6144:oxNMcpOY7qY2Hglyi6x5LSBDdmz0DpQL/5:oxNMcpNWY2HEyF4/rw
TLSH
T186142375488F32D2E0A633C622DD06240D79C95F7333DD35C6F8BA5A6CD50296E42E2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 03533b5c66b765d37de792ad2654a2340a649f1666ec311b2708140ea9941547
MD5 ea969182b78723bf1deb60ef31de5589
SHA1 8658b2e10b1c5bb8bdec1c592ce40b10b61ac801
SHA512 9b3feb58171b03bbfa450007a8f3a3de33bf33945ebcbdeeb5c3f847b2a263291c4f3542cdfaa1c2f3f2762135c239d9fd33ac4dae02474510ad383905e9febd
SSDEEP 96:mH6lKj706iu9GX0UTeOXCbU95+z2/GMtRP5VW7:MmKjr00UTkQ+yvRrq
TLSH
T1BCC1399292B6C870EBF047B50CD7789D7679C58413068E2B1DE98CFC989EBE843C8205
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 7e138287734ba56b39e9e0d5f722896cebdc445e792910e68b69267e2d725e1f
MD5 0715ff1a858ebef642dcee31c4aa8dd1
SHA1 e4959dc0396250fbf2d02b071ce640ff3e790265
SHA512 286a0f5bc581c0ed73d10d5f608c374a0b0491ea05aa1822a36ccf2440fa50846d422178c43c326e66748e2e9b7d245802c5bb11c5cba303537a85011dd39f66
SSDEEP 192:f6cqlrpXXt6YHtQ/TUBObP+h+hybHsdSyAGc21w6m:ycqfHt6YHtATUBObc+hoHsdSyrc5
TLSH
T194528F8799B2C432FBF406744CD236593B3681958B07EE570ED86CBCD88E7A803CA719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe589b9f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589b9f.TMP
Size 3KB
SHA256 9f87820d83fc12549f6ff36c93cd437f52e1e86554c3d81d02139e7cf31f520d
MD5 a0f2b8b86de2446c588a27bf7afc2276
SHA1 34119d8acdb5d5712c75a8f83d45f8bcf852b885
SHA512 a7eb31b4af63ed00fc68bf46d50829cae1e12ff8cc36b16fd88bae366e2d294ddffb4e80b235bc3a721c8e099d00da082ea8ce747d508f8c18548bacd0383d09
TLSH
T1D9813895807A88B8EBF117B815EB611D72B8D5C813030E671EE94CFD4ACCBAD839DB01
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 78544b6c1488f8ba49a95b961d0e643b8aca08ace155ed90db858109665379fe
MD5 10253b3ce204e3b2d3beb70ffdd6b9ae
SHA1 0d46851f38520359449722020554ff810a6676a2
SHA512 965596de3bf317d045edf3b94b4175d3a9cbe25e6c7817be3c4617712206ec60bd8f914814493b07d7a8c6f7f899ff6de29306198115e406f283a756d222346e
SSDEEP 384:DFMZsIJekg/eSNYILhmxaax1huGXOxFGkiHRTxz4TrPlXw0EmOUHkajB24L757Cn:WHUoqQ9i3Sd
TLSH
T1B242CBF783E9822DDD1151F0AA186F2FCE1D0955836C3C5A85E4AF0B93F2871E191B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 052d2a5758a0e71121f276ac79c5c8a424053ead83ddce879ae0a046e6fe14f5
MD5 a53c49c5dcd721036b49fbed8e637775
SHA1 82c8c7b84dbe5f0e4869abecd2e5ab123005053b
SHA512 c55e6a0883fee20991f0dd5a10f68e00ebd6d6077db823a481d7d5d1c4733d3397cc2349d83dfe9866dc9c28d4a1c3e1513de675da775dad099a424292dc8cee
SSDEEP 192:DFMZsIJekg/eSNYIvaax1huGXOxFj6VcGi+c/GRTxN2mba4TrPlXw0EmOUHbna77:DFMZsIJekg/eSNYIvaax1huGXOxFGVc1
TLSH
T108328CF7C3E8826EDD1151F0AA182F2BCE1D0996436C3C5A85E4AF0B93F5471E191B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 7af6cc38727277ebd4b9e464b210b89b8518bba07ca8d2ae374a517507eb2a3c
MD5 491d1e3bd59a7ffa4d399cf53ea0d69e
SHA1 6d2b15ccb898e8b853eb73cdfb8f747c9ae3a7ec
SHA512 47a14e86dbd69c9f3ff7b6ba99cd52c511b8b7bcb0abce0a192f55f85054699972b25bb8bc6d730c284e1445508cddd37f883271a9822373e6aaab14c945337c
TLSH
T1C2D02393230170F5755D1D91D0E9EC4EC7671464D442EDD535E0549859364AC050B480
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 b743c957fef0f2cec00e9a961a2d4308ce27826af1c6ce9caba94a86ffff0d04
MD5 30a9024b8a24ff9a9d1fd3187faf081a
SHA1 88cba2177e79099123cea668e455dd0e00ed441e
SHA512 9371b3d33adbf81b963e6c0c999a276cd1805d2c093eddbf58ced92bc9871e414a62f2c03e47f2e3acb4a4f5049b30db795153c7e0bd348a9727eb0b06c8616a
SSDEEP 384:sxZcn/CEOH/frsIFtT/6tM/bjE/oZmif0v:sO/eH/fzFp3/bqUmiU
TLSH
T1E782F71666344D7BDCD7C215FA06BB57D6F85063E6805E88EAFC8A0C04E77ED220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 24KB
SHA256 1a46f68ba4bd1499d9d0d4f200880213018551ebe541937382dce338f062d43c
MD5 1ddfb6e9eb46f13efd43f13c0a245097
SHA1 eaf6eeb856c4669bf0a3107fb033aa8dec3178d4
SHA512 02e73a626ce0472fb06b84ada20c2cfd5ad32310352a97f25756c1e66be2076ad82cc53ea7b5825e50ec68aa8e690899ea9b074666cbbd63ed3bbe217c32f737
SSDEEP 384:sxZvniCBm1H/frsIrytTwSpk/bGAk/e3PrYdiftAtmWO:sHiym1H/fzryiz/b0C8diKt3O
TLSH
T15EB2E556662089B7DCD7D524F925BF16D7B45462CE814E8CAEFCCE0C00EA7BD260682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 bdd0f3a64236e769e80b1e7cbb78fa4bc7b78447ca54c7b7055a57e5f59428f9
MD5 845cc7fa3ce4950eaf573f8f680f16f3
SHA1 7d963d77f63a6485fab80cc2c86661d833baaa19
SHA512 494d6439efc9084b87495700c47374eb434cfa77e6efc3b579f43767926bc087f3b708a9dbd3bc251827ed5a465707659c3d2a5388a946590dad46335e8c5ac4
SSDEEP 384:sxZvnMCEOH/frsIrytTRtM/b4M/oZniftAh:sHMeH/fzryG/b7UniKh
TLSH
T12492F85666248977DCD7C614FA257F57D7F81463DA804E88AEFCCA0C04EA7FD221282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 a82bcc44352d9f5540c689cb3a2bbbba956d411d01e22c917f50c6ae8de2b252
MD5 26e4410f957eecb7e9857713558347aa
SHA1 e11441181dea6a5429f995a4eb1e18a179fcba17
SHA512 dc7cf1ed05b7183e6e965b0d2ebadbc7afd16e013ec5e6e2cdb9fb42e122fc38719ceca463ee81f77aa013448b5ad58ea2f4c76bf9deedb54859a1f464e0f129
SSDEEP 768:kD4so86s2+q7pLuL/HzWRmH9QYR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3nU3SLl0:kD4so86s2+CE/HzWRmH9QYRu1jaKnU3Z
TLSH
T1DF031D3B684CCB7F4F844E9CEC2ABE8A6DE8018F95988D9447FA444C03C67EB55161DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 591ee6d777e8fdc2b23c14ad017a2e2090cbff84d94aef4aac02befffeb6dcb1
MD5 6c716aea65bb1a09bad9ae0327d562d3
SHA1 9458cd2fd378444e9154b4d4ee163aadd05eaedd
SHA512 fd0e662726a9d447983b75540f49fa9e980f81fea6f6429d985184cf930f517861775973e680acd2ec31ed28758452812fde0fde2c92ab3464236c715282183c
SSDEEP 768:kA4so86s2+q7pLuL/HzWRmH9QYR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3nU3SLl1:kA4so86s2+CE/HzWRmH9QYRu1jaKnU3o
TLSH
T143031D3B684CCB7E4F804E9CEC2ABE8A6DE8018F95988D9447FA444C03C67EB55165DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3dc58f64-1ff2-4e93-a39c-0d0b2a8f2df5\index-dir\the-real-index
Size 72B
SHA256 7ac0c44aec9aa60dc25e976fe9be815b4a4d0585c0151ba342894e5b62b547ee
MD5 3b292232c96269989fb702c5f6466716
SHA1 869d87153fccdc5431833007bc773022ee35e1fa
SHA512 d037527fe686ef0390c1ffb9912c39e86483d889a0d134a9b707f2b525a69a22f1090e384aa39485d30b006ba1bad5d4045942f23ae2eb584bd96b131cbe4e5b
TLSH
T16AA00226127C5181CC411AB065531B526318DE561916C70B85A40455CC937D88D05048
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\42bc61a2-5cd1-4bcd-8a9f-064e87b4a21b\623cd082b6202da0_0
Size 63KB
SHA256 11ab074e228c24a3c56a26b173a1db9d0ee3313926e492c00ee2d47ca161f4d7
MD5 7d6953e55559245c451e1bb71a622e15
SHA1 567fe71878f449eed84ccad5bdd2e3c6e14b7357
SHA512 b1157cdd1a4006f9bf924d9cced81301a5098ff9d02531728ed987773d9e7c1d8b1838c3d623733f32c38c3d837f7a989334c546dc71e6e8a3f44a96064b13ff
SSDEEP 1536:F2JZ6iLa6ku9WgWGYs/b7VcLbGT8gO4z2dWDgs77HPwqpzkZ/T:FUZ6pOvlYsWLbGwgOilu/T
TLSH
T1AE5319A6B0A26035C7AD21D654AB3B01F12B17563544C9ECF06C69913F28E8B6377BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\42bc61a2-5cd1-4bcd-8a9f-064e87b4a21b\index-dir\the-real-index
Size 72B
SHA256 f4c38933745d3530c1c7c703b303de7bc46fc39ea3aad16b8ab951b719fa8f14
MD5 87b64949c619991f9b8bd6006b8b9643
SHA1 80fa86b68826e99301a499fd66a4750bf96253ba
SHA512 f87227ff2812b654404e6e7211c73ee80a172e4d39b7f50ae06a82f2b1900f48b2802fb056a6f73237ee4a03173373aa513afcebc9ee7b341ad655ed80a9e960
TLSH
T164A0021003902007D03211B16F6396C3130088101314561750D94594CD5CA53454120C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\42bc61a2-5cd1-4bcd-8a9f-064e87b4a21b\index-dir\the-real-index
Size 72B
SHA256 a2503889c1302372d144413f38fa33021c65c433d003bbbdb715deb20b282c30
MD5 5d19509e7b94899aca39b78107b9abe3
SHA1 ec5cf1e8c3f2435396126213fe625f827a4ab55f
SHA512 7a880ecd2070549725362b700bea5c188aec47519958d52eaf464d8503af2cb79a65fae276e3b7ee8c4054fd805696f495a250d1feac326c4114e278591b9ef5
TLSH
T111A0027E0B804012C1532EB0B9A7C341A330D9310606930795940254CC5C5C54D4580E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\42bc61a2-5cd1-4bcd-8a9f-064e87b4a21b\index-dir\the-real-index
Size 72B
SHA256 444ce7aceca076b477aa9155dbb90b7afaed8f85633b20008351587fb4c3c76b
MD5 60586b9b2a9b9b4c9c0cb65a93c1308d
SHA1 3194f19ea15aa584bbcc87a81f22323525ff9282
SHA512 bf3954835df7223354a0ed932e1b46939e9e6a76387138598913f2d80b19cbe5a0fb7b38cb0103608de0ac77c17425078a0f15a28d3438794b4535e2fdc19821
TLSH
T195A002980FC45421C0021EB22ED6C7913354C9210A46670755900444EC60AC94D8200C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c72dcd28-c31f-464a-a34b-308d2aa4ffdc\index-dir\temp-index
Size 72B
SHA256 dcb223e78afc547bfff9d362a74343a855f7bbde9e16dd1f301165105121bcfe
MD5 394580ae46d71cd7866083b294bfc4a9
SHA1 a4bafe01ba60fe4d17ee947e9807eba5645dcc73
SHA512 c9c1427481f3c33d4eee506e3c2c5cb180862d65582bd48787c685f48c16d9629ae4cf750ecb66f9f206f9abbcbd5ae8327fdf7df01e25d14df5137a3edbe1c2
TLSH
T190A002934347E90EC98D03707745416233228B615103464548A901CDD9B06685F41C3A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c72dcd28-c31f-464a-a34b-308d2aa4ffdc\index-dir\the-real-index
Size 72B
SHA256 5362e2149c1afa4131fb7ca330ed2e888fbd65b2bbe87a5b7996973ba69d6640
MD5 5fddb2c07f9408da7e3f3f68de06eb2a
SHA1 3c5c58304ff07bf45ebcd1f86bc945ac3d78186d
SHA512 03b9c9b9f3ededc931e39718c2e99cfeb22111835cad56b1ee33ed0a64de5295a839949e9deb2d08f209fdce71fa82968ee7844b293bf4c7a078e1d9a6e5d820
TLSH
T1D1A00251414CE231C40953731D6641C77370C8645202571978AC07A4CD6159946C223B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58913f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c72dcd28-c31f-464a-a34b-308d2aa4ffdc\index-dir\the-real-index~RFe58913f.TMP
Size 48B
SHA256 fb256b6a92cdad104f3d9cf5ed38830e6d47774ea634afcd10351f0aeaa8b6a7
MD5 d7e2ef5f9e477ad963e7c40395d8b379
SHA1 a76771105dad9f900ab66af9b57c1bc53ea88b85
SHA512 a919b579d36adea221e29936543069da2c62dc88a5591ebf6408c06284183b861fa99c5cf965d8bb7c15042c2a389850d163f9357d51ebebf9bda94c91896d0f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d9dd2bd6-4a8f-42dc-ae4a-f28358bb8d24\index-dir\the-real-index
Size 2KB
SHA256 1599b84b3cecaedc10e4e33fd6282a57685991b7ce0f124356aae9e641e2db5c
MD5 5b6fa98ca289965c471fafdd0c4fe61d
SHA1 ac23575930d95429a3b7e856bce14efd6c89ab51
SHA512 5e26d46b2054d88f3a2e47a5e2673cd09fb8f1cc958968d942153fd554877d1c21f428c86f07e5bbae9c8d91eacad31cdc499b8308a87c9ed354fa0da36b593f
TLSH
T18A51B65E5D461F66DD7820F708F6040433B899DE5FF40B07DDAC9974B98322A2E68629
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d9dd2bd6-4a8f-42dc-ae4a-f28358bb8d24\index-dir\the-real-index
Size 2KB
SHA256 b40153cf3c6de0e250fee4d4237954b7f1e0a583cdeb13f181b8d6d34b6d0d0e
MD5 7e2c8da178ac43883170c518c1609f19
SHA1 69ea60b44a7dd3109879f84b79b3fd1ffa2b8599
SHA512 bc0ae20a4e4a1765fe6c7758dc7c02f3692b81569e396586a8878b015f0389e47d543f62afc2708f6778917b961e00c51e28512e891c4093d67fa3745a3f7a50
TLSH
T1AD41C59D5C454E23DD7D06B248FA102933B448FD1AA80B0B6CFC5639BD8B7652CD7214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe581bc0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d9dd2bd6-4a8f-42dc-ae4a-f28358bb8d24\index-dir\the-real-index~RFe581bc0.TMP
Size 2KB
SHA256 bd79350ee99ed1e6e58f9146fabcd41882a38db9ef0d2cbcf5c6931b60e887f7
MD5 e12128bb6df62dac0bf09b953aa94d28
SHA1 39ef4bd9c3cbf1c95d17412286eca4d0790c0112
SHA512 04d71901cefe1678e84bfbdbd2493a5a205912b39734189e9537b9c190994ef6f4469c084e070bf749943f244228c2cb2abb942fa047d1b1164f5b2d6013012a
TLSH
T14B41CC9A5C824E23CD7184B249C92469333DA8A50D44AF0B78FCCA33FCD77A93D52354
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 479B
SHA256 cd7220443b1591f4824284ddc5f9c798a93f6ba256b0c0583a553e1f94fb9b64
MD5 efc001bf6b910525fa7560673b8035b1
SHA1 456809f8e2d627891629f4fb3c154175b553b74d
SHA512 6d0445f42f0a0f254370205470baa0a74d5a2b28aec889d5b90efccf3dc39810725c54e943b4eeaa51727f6408e4c98ad1ce74004f0d46bd151b5a9722e7d22c
TLSH
T118F027B33FE71915FDABCBC5607140600106BC588865EC1F2427729B50B270D640ACA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 474B
SHA256 7af4d5e6777bec0ac6c1f14216eeb88366fd7b081ec24b8289bc2ebe1fde83a6
MD5 2e06120b8a19282a5884eefeb5c4d9b0
SHA1 3c9a97f3ea2237572f27adb77dbb771cefbd217c
SHA512 d99f7f68af91c45f4a87bd5ef56c79dce519c8ab8325a3bda5e40b706d2624a3eec526fb7994f6978338d4513b08b558ec0b6c4e1a1c6342f6e866a5701f9b55
TLSH
T148F020B33FE71A25FCAACBC5207140A00116B8588868EC2F2427B29B10B270C744ACB2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 ca5f89f6db37b34b1e028c506218ea2b5ccf8cbb2941be3870f9228676e4f7a2
MD5 e9200e6224210b60fb0962108b3f5577
SHA1 854f1cdc5ca147ab99826fb0ab641489e0f4668c
SHA512 145b91a7825c0944eb55cfd068f3413e09b364ef41a44c4ff028facf31dd93e2eea615844b9851ad34babecfd6bf50380e6f8be0aae4c3b1b2f39e843cc34807
TLSH
T1D8F020B73FE71A26FDAACBD5247140600146B858C868EC2F252BB29B10B2718644ACB2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 05bacf598a6155c6789c018a782bee95e6545ebb3bf7ce2f2997e4bb7cc5f61f
MD5 5973158b2f38d2b0a163460c4dc83bfd
SHA1 fe8da57bf6c3bac5dad2cf8623888a78a59b9f42
SHA512 9f691b4740c6525d1d7c9a2d46fc22ab54ea70ed9cef25a55d5bfe413fa0c96b0663a00d9d4c0d92a08c159572f20da05d0cdad0d346bedbc08df9b798c4b601
TLSH
T125A002B986994492C1880A74D85183843B10CD50171B621645ED42F4F850A80C152A57
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58747f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58747f.TMP
Size 48B
SHA256 9b41f23f51d093eff00122ff60279dc29202fafd5251a417c58121db980f0377
MD5 b6bd3d1d7fb497ca6d1a3c4ab0b3fcb8
SHA1 9968a8bf13368eb08261f83e4cc28fc800dd7f92
SHA512 cf442114d442951a870877ab183b575f0fe3605ee21768d84e8e4df258f2c6441a69935bf1182203f58418cb4d0162112f60d928220b4d503c0b35a4b7c24d58
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 052002aa039eda44cd7b81eb0688f6831cc2344a89c48b83365c943156a53a58
MD5 b44f179c62799ae32ccf8771ca62ba19
SHA1 8822ac0d3037448c6e08ddaec11813d32cca9303
SHA512 c2597237c471420817e8588516c1ba8619b65dba12913c2ce0908e01e0aa9d0198b7d8f89dec61315b067936b0e71746280c32c06f130004dcdd1ca132366ea6
SSDEEP 96:KkGQKTyeupuKK8DF6KOkKeFGKWoJp+K6wKK6UKXqAugKHqC6S0KzSA+IK/qa2jSH:ubB91NPhfYXHkvl7X3S9r4dFxBP9
TLSH
T139B24651397A02907A7E299A8596B87E52C23063711CE46B7BF900B54F6BE30CDFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\d592fbe8-4a95-4c5a-8991-4195aebd4c2f\index-dir\the-real-index
Size 120B
SHA256 c56654769abcff9743ec77d646c9d5ddfd9c986048d0fd0a3cd534372b394573
MD5 231b2a1ab78326c05dad72ddc9ce8f62
SHA1 eb18c250fd473b2c8e57fc349b06f034a489121f
SHA512 c4e5667be03ee5f17dd2b7d6345824368a78aacf59f91fb82cb02fb5c291b15ef149b3268e50262bfab5e4dfd362783de92eac2b7d357329d93be27d42552000
TLSH
T157B01229C0644604C41241B01872052B39181A11550A03535CC012A0A0A70B50D11175
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59014e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\d592fbe8-4a95-4c5a-8991-4195aebd4c2f\index-dir\the-real-index~RFe59014e.TMP
Size 48B
SHA256 feace61dea06b9e18e685fbdf2b5ddb952388fe6885e42b5418efad178b9b8b1
MD5 4ed6fa614eaf353340ad68aa10df375f
SHA1 802ac0b9289acdb199e018f4fa6a4e45d71263fd
SHA512 1fa9b816c2ef357127ce49de5a432e97aa0b0b2c2fe27bd6eb34b82d83cb437fd91e9958ec287f960cfc8b70f631ea19da36ef92b91d70b332ccd9309ccf6814
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 155B
SHA256 98893a0e326d6f3781bbf679a709de67fdff65645aebeb88596af21458a446b1
MD5 dd64efa686846ecb908c665c5e7d260d
SHA1 c42247b38856dcb944aaa6eb706e06fdb76a24b1
SHA512 1ce438235dcd8e17358ece0d4d3789359289223ae69c281bf9316b58e79060c0d0e59572fa9e110d61566e60f4fb057ab465d6fcda60e34b232805e86928c80f
TLSH
T139C08CE32970815A4B306AC6A038790CD0178CAC4CD0CCF4880CB44132387338001AA8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 74B
SHA256 8d41be113b5f7bb62effb33dfde256eaf48686094e8257b7320a8863d8c2a87c
MD5 5f932db1c20e969ba0a634be87ee01e1
SHA1 69526c610898af6c5fba1b7773ef484285577b47
SHA512 707797aa46915bd3d9330b51d4345928493e1f466e9207729db6ac271ffc33d26eda499a4ba5fe15e7cfa87668cb669f2f9f4932b6cc5b8190d1e6d00b819ed5
TLSH
T16BA002F70941809E8F34A9E92039BA1DE44B828C8CC0EDF1C448C042323CB3300038D0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
Size 149B
SHA256 950b4ebee0c24d83d06e08ccaaf5eadc567eada0b3ffb4195dec553106c6ebf1
MD5 888b8ce7c57444ef569f1e2fcbbfdfdd
SHA1 6dca01fee7714ed7673203b721d8b78d2f547a5e
SHA512 d71053ece2f1c7959fd97eb62bbc0c057dcb8823b51a7d7776c61672bd427b8362900d8b78c40cf587eee45a70d2f3ab2fe0e2445252d9a912f44f17304e56d5
TLSH
T1CFC08CE31560805E4A30ABC9603C790CD017809C8CE0CCE4880860413238B374002AA8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58e2aa.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe58e2aa.TMP
Size 158B
SHA256 349ff36d7ca9553591f53d8a2b924223a519957ee51ae6dcf09a676fd29d87fc
MD5 f12d7ff05c3027a149a0845020505f01
SHA1 55448307325542b34c03892c9b1c9687fc3162dc
SHA512 3bde03c6fe6b8434858acc621b00830a878e6478016b41b5443a9727e235ac839643c5659d391cefd1228917b59a71253008df108e620737b4809e448c674170
TLSH
T12FC08CE30631A04A8730F4E46028B60CEA966D0E9DC2DCE08800F04371B8B33804A5A8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 3a621b3ccf5b3c870d7da3db45ca1daf250cb37ef938b93c3fbff78b5890e0df
MD5 8a259a7e9b8809dba1d1c62b072c031e
SHA1 99f3de9bea7d8f8342e31c333c92ed10b3c04a02
SHA512 3401bf4b6d39f33143c48655f161ebfbd6e47650a0d756c0a4079808d3fe552090ddcdd2e83c0c89493546171e5d8bf309c25480688fc5d734c419c4725ffc5e
SSDEEP 384:nVuiFJjccCs+Bt0S3B8NE8TUNTUlIRJTQPSY5W0GjP2VFfLYWOb+hQ+XqOrBNUZL:nFJccQhXwg6NGrsYWOCKu1BNUf4r1O
TLSH
T10ED25B36A894CEBBFDEA8FD9A31A7743EEE00163958C5AE4D9C45E0D00971DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 172848ee5a6a8f8a0270f222434a0501c616278a4639e00f3036b7ee995aeb61
MD5 2250cd0d76b3698919d108e42695650f
SHA1 21d24b9f87737a04408dc3b7f7670f73bc2e8874
SHA512 ad86b0e3fc6ebb107d8cff8273303b4612695aa465dcb8477463dbabcbca516c08c56d004ba6582dbb02998819c5eb7a9d305f7a9a25c32d79f35ada8dc5c669
SSDEEP 384:nyAiFxjccCs+Bt0S3ug8NL78TUNTUlIRVTQPSY5srGjP2V0fn9YWOb+hQ+XqOrBY:+FBccQOgQ7wg6oGr9YWOCKu1B7Uf4r1O
TLSH
T17AE291F198D789B7E9AE4B87933D6E429ABCC053B5884994FBC44D0DCC861BFD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a3dbcc877df0c9d8f25edba2dd1c704d18521674e4c9124e27e28a1cbb81437d
MD5 18ace000d9ec2e509d44b9d7a0c0466b
SHA1 0af95b3aefe182baf7636d6c21c78f77b65c70f1
SHA512 294c7c672aa8d48b5901b47933ad25ed4c47057fa39fb6b1e79147df9c03c11873ca3dc0895b4556c21db1ea03fbd8d7d504ac5fc9ea0a32f67e4da4c2fe6b96
SSDEEP 384:nyAiFLjccCs+Bt0S3ut8NL78TUNTUlIRVTQPSY5rrGjP2V0fnXYWOb+hQ+XqOrBr:+FnccQOtQ7wg69GrXYWOCKu1BuUf4r1O
TLSH
T191E291F198D789B7E9AE4B87933D6E429ABCC053B5884994FBC44D0DCC861BFD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 841c6cadf4745681b347068a1cb9ce31a527f8a2574c8b045c047a2ee1bcba6f
MD5 103b05d5e5fceb97f2d6ff761a0cb678
SHA1 bf6b3862297988a0b1a4dd1d190f2ce9c4a8108d
SHA512 34b4d0892edf6987798152d92b9eb0f9b1a346129ce1360b5d4615e03236a5ed2041451f47df59f0f837e013d1144d62bca8542048cef9f5bf69141ac828847b
SSDEEP 384:nVuiFavqMl8NE8TUNTUlIRJTQPSY5v2GjP2VFfLYWOb+hQ+XqOrBRUmjrN1k+5vJ:nFaykXwg6kGrsYWOCKu1BRUw5
TLSH
T1F0C23B36ECA8DEABEDEA4FC9A71A7643EEF00163D58C4AD4D9D41D0D009719D270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 179977880aae624ac320b080d056897b04507739342415eb364a2f28fe723775
MD5 84ad22338f2a1bc576ef2777ed91b61c
SHA1 049b4463d7e15bf640dfec64183c64ff67300cdd
SHA512 7b28d390606b56aff53641ea816bc9e01601c1dea44dfb08e7dc273749bff68a041d56520da77198580fc4b476e35d806ee646a10bce4f3ecc0988bfccc72cb1
SSDEEP 384:nKuiFavqMg38Ns8TUNTUlIxBgPSY5otXOVFfLYWOb+hqZRYV/Vw1mRuCe0cerN1v:QFayv3rwgGMXEYWOC0ZRYk1m4/09v
TLSH
T16CC26C36EC58DDABEDEA4FD9E70A7A03EEE00167D59C4AD8D9D40D0E009709D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 fc9375afb3a499550bf0f2cdd6e30275f3628e3dbbca2b0a523e9fb28a40667b
MD5 a34dbae5872145714e6aae3984670b0a
SHA1 6770841c32ec46373d2df80dede3d44fa08158c7
SHA512 6eecc4b3837a3414c9817c8092e3612a5c199e089b40bab79c248ea1eeea7476ef7536853012cda38268d7a43daa686b85395a2ddb2381803277f0217ee7a03a
SSDEEP 768:tFayv3nwgGhGXYWOCKu1BUURYk1m4/09v:Gyv3EkKCnmkE4/C
TLSH
T18AC24B36EC58DDABEEEA8FD9A70A7603EEE00167D59C4AD4D9D41D0D009709E270BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 cc4bbcf80aa913b045fcfa82a64c67723b89d9b9df68df5d8dd280c485c9bd0c
MD5 f55c664c2a185c816d605e222daa26c3
SHA1 db288e95118f6db878282267bc8ea9a49981769c
SHA512 e893b77882bd392557ee71973f9647962d7db5c48511dc3c6a7e16809c7d6e82de0ab5035bdb3ddf8349a91340d52de32b1cd0c00855fe0eae0e87100377fb8c
SSDEEP 384:nVuiFavqMM8NE8TUNTUlIRYTQPSY5vfGjP2VFfLYWOb+hQ+XqOrBRUmjrN1k+5vJ:nFayxXwgHtGrsYWOCKu1BRUw5
TLSH
T1DDC23A32ECA8DEA7EDEA8FD9A71A7643EEF00163D58C4AD4D9D41D0D009719D170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a2e3dc9d856e90410d1ceac9a87af5a32ca8acae7445891e6c8fd87403a2cdea
MD5 4b7d421b66c7fbff5e7e69bb9ff7af7c
SHA1 899d2bcd529567a745b5d0ebea75f9dd58d319fe
SHA512 c018b0fc58024dbf196f331530a24853beaaa0ec1681b8ef072b7aee6bb63485fd9e464f7551520259721848e5d8c700d58915ac50ec3a0d0785923ceac0afcb
SSDEEP 384:nyAiFJjccCs+Bt0S3uY8NE8TUNTUlIRJTQPSY5WbGjP2VFfLYWOb+hQ+XqOrB7UN:+FJccQOYXwg6CGrsYWOCKu1B7Uf4r1O
TLSH
T17BD24B36A8A4CEABFDE68FD9A71A7743EEE00163958C5EE4D9C45E0D00971DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8414d190c568d8a6bf0593f1ff5167c285e5b6b9f62c1729a6ecac9537bfe451
MD5 838df8bd8de179d598ca69c049f8996d
SHA1 adbb10a0afe54f1d553804229251e13178efe4fc
SHA512 1be367462937f89c03883925bfa252d4df2fc0a804058fbdda5e6c75dac666f286e7143ebcb2072608e69ffdc8095b62795a3a4111b91568537815737d47f5c9
SSDEEP 384:nyuiFJjccCs+Bt0S3B8NE8TUNTUlIRJTQPSY5WKGjP2VFfLYWOb+hQ+XqOrBNUZL:oFJccQhXwg6zGrsYWOCKu1BNUf4r1O
TLSH
T1CED25B36A894CEABFDEA8FD9A31A7743EEE00163958C5EE4D9D45E0D00971DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 065aa493baf48817f6f16bc4c42a35a483ed9ef725668c4aa442bff43631d54a
MD5 340e79dbe933cceccb06c606fb9a9e59
SHA1 43e28db76f48206491db095e28dd279c473ec6fb
SHA512 8109ac3ff14815a08bbdcc3677ef5c6e0fe0cfed356d4ebc87d7966595d9baa4082ec78a680ba78ce9c07458a0045747840acc74b452b952f42db42ea0c48f3d
TLSH
T190E00966930041AFC978033800D71BB13FF2806123BB060A6A2219686C33B642E24BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5f702d6473f5bca32ccdeb4eed8b9181ef64dd8daca2154f7074f91dff26a42c
MD5 4afe782dd230c7cc64ba17618c109e0e
SHA1 6ad585ad8ce2b3b63d8747c1cdee677df3773473
SHA512 dbe36d005a99f35bc972c99d4bc62f13b932f10b121f5ed7b0da9b3eb353d7d2d040cab5615b2269546e2a07767515fe057caa0405293602838a6840ad82138d
TLSH
T1C1E00966930052AFC979033400D72BB13BF284A123BB061A6A2219687D33B642F64BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59096c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59096c.TMP
Size 392B
SHA256 0a137f14226d65423546c2b2048d4417a2de50aaaf85126a48d918174ee9be43
MD5 cc003e36becbdef825f6bf9cd51f8b23
SHA1 1358bd1f1d06758b4f3a1e3574bd072894cf5073
SHA512 b07f4dca2890d840de8c073f146b8062e2dc4fbae04187ee34a724b10a131e0637e376c562b58120b89d57154d7746f4c287fbc0065ac94e8f2cc661787d7dd7
TLSH
T19FE00251930000ADC538033000471B711FD1801111F50705662219482C237402F24BC0
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 1d485657d00c777425dd935afad77620c8bc8b147912c07d91231451603a9113
MD5 e09060efd8d2875da7a8ce7a11c28a01
SHA1 444f3d1fe55ad9189fdc6be3bd6dfda21f2a99bb
SHA512 27338303ea2eecffc2a9ab68871583d0a9c1024394a548bca452de4483be9d129b88e85153c194f3380116271648193de6ac95c0e3982b69614ba9fd48154cfd
TLSH
T1815151E05C3D1AD1E0BD0A7EB49B38FC80DCC626F4A4347D2864E9984A7A60D248043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 9d273a8d21c2431856aae2b272137fe07c1f57c13bc51e02088b2c2af515d387
MD5 2c7ebd73bc896407ed997fe16dc52340
SHA1 538e4fd97741e368738fa09e3bafd5d38001f04a
SHA512 8fb84e7773eba4542622f7d5f020d196747a7362323dc8e8348304b8eea59581eec7099608f9310c2ccfe322abceaa1e072230c4e45d36d61c68a014f7d31bdb
TLSH
T17D5160E04C7D1AD1D0BD0A7EB49B38FD80ECC62AF4A4347D2864ED980A7E60D248083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 b1ec49c62d6adbd0f7de55fa7ffd471f508c1d02421c260fd293bc1ac7671f76
MD5 b529ea835df4140e06bca61941c55cb6
SHA1 caaa7b6540da54f1a872f3c5335b86fb75366cf2
SHA512 6918b5270b775b3e14885be433565b996dc296e79b95efbb78beaf306455ebb7b1ef1345ef2a09273b36519b0b9aa501a71926c75f6b592915442ed61519bf98
TLSH
T1335163D18C7D5AD1D4BD0A7EB09B78FC84DCC626F4A4347D2868E9980A7EA1D604143F
MD5 SHA1 SHA512 TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 d313e5433d31d14377d10fcda42a30c94a9b6812f09026aeab5b916ee342d3a7
MD5 00e68d00473e2039173ce0ae8ab232e6
SHA1 573dfdb92f9c9f9eff6159ad0dce1513096520b1
SHA512 82fc4119d33a34990a4e0b0f5952fa7b117456e0a3f1b9fb025fba59b912c6b570f30742b14d7d47ae6d3b4860b99921dc006ed66b950eb4fd7d071a99e940ad
SSDEEP 96:v9PJfVStMvydviEswrTiEmsKJuI+VS6SowvC7KJqutLqKJru+99KJnIux:FP1VszdNjTK4I+V/vKsSOK5LKBI8
TLSH
T14A3242915BE51946F3F3DDF2A9B26764AF36F8016A01CA0E405142090D23F4AEE7DB7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

salinewin1.5.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\salinewin1.5.zip:Zone.Identifier
Size 290B
SHA256 fdfb2aee0f8f8955b8e0248f995039cb7a384657970e9eab814fcb7dbe1f2a98
MD5 65c672024f6657746a542628a7f75099
SHA1 9807f86dc01b3efac1d235a5caaee37036b300e2
SHA512 24239b878399c65964e59b8d8bdb081d61b2bf82dbbacd33fadbabdd2b83c72b53ed8941287fd72f717eaf4fc6b263a077ad8188c0794b72691424ddf8284bb1
TLSH
T135D05B8F69500ED19F1A16CC65FD604EE403A19189D44E64F8C3643B6B500FBE7FEE19
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_1268309112\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_1268309112\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_2110866210\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_628689005\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download