hxxp://roblox[.]com/login

Analysis

user interaction
yes
max time kernel
742s
max time network
745s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 02:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://roblox.com/login
Sample260710-cwtbdsds81

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281239703695184"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{9602E33B-BD62-4D1D-8A78-A16B3EB29162}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{D065F8B0-EE5C-4883-945A-2CE8B963FF81}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 3284 wrote to memory of 5012	3284	msedge.exe	87
PID 3284 wrote to memory of 1604	3284	msedge.exe	89
PID 3284 wrote to memory of 3648	3284	msedge.exe	90
PID 3284 wrote to memory of 2396	3284	msedge.exe	91
PID 3284 wrote to memory of 1604	3284	msedge.exe	89
PID 3284 wrote to memory of 1604	3284	msedge.exe	89
PID 3284 wrote to memory of 2396	3284	msedge.exe	91
PID 3284 wrote to memory of 2116	3284	msedge.exe	92
PID 3284 wrote to memory of 2992	3284	msedge.exe	93
PID 3284 wrote to memory of 2116	3284	msedge.exe	92
PID 3284 wrote to memory of 2116	3284	msedge.exe	92
PID 3284 wrote to memory of 2992	3284	msedge.exe	93
PID 3284 wrote to memory of 2992	3284	msedge.exe	93
PID 3284 wrote to memory of 3740	3284	msedge.exe	94
PID 3284 wrote to memory of 3740	3284	msedge.exe	94
PID 3284 wrote to memory of 3740	3284	msedge.exe	94
PID 3284 wrote to memory of 5112	3284	msedge.exe	95
PID 3284 wrote to memory of 5112	3284	msedge.exe	95
PID 3284 wrote to memory of 5112	3284	msedge.exe	95
PID 3284 wrote to memory of 856	3284	msedge.exe	98
PID 3284 wrote to memory of 856	3284	msedge.exe	98
PID 3284 wrote to memory of 856	3284	msedge.exe	98
PID 3284 wrote to memory of 4692	3284	msedge.exe	100
PID 3284 wrote to memory of 4692	3284	msedge.exe	100
PID 3284 wrote to memory of 964	3284	msedge.exe	101
PID 3284 wrote to memory of 964	3284	msedge.exe	101
PID 3284 wrote to memory of 1328	3284	msedge.exe	103
PID 3284 wrote to memory of 3816	3284	msedge.exe	113
PID 3284 wrote to memory of 4524	3284	msedge.exe	114
PID 3284 wrote to memory of 3356	3284	msedge.exe	115
PID 3284 wrote to memory of 4528	3284	msedge.exe	118
PID 3284 wrote to memory of 1056	3284	msedge.exe	117
PID 3284 wrote to memory of 4528	3284	msedge.exe	118
PID 3284 wrote to memory of 4288	3284	msedge.exe	119
PID 3284 wrote to memory of 4288	3284	msedge.exe	119
PID 3284 wrote to memory of 4876	3284	msedge.exe	120
PID 3284 wrote to memory of 4844	3284	msedge.exe	121
PID 3284 wrote to memory of 4908	3284	msedge.exe	122
PID 3284 wrote to memory of 4844	3284	msedge.exe	121
PID 3284 wrote to memory of 4908	3284	msedge.exe	122
PID 3284 wrote to memory of 1740	3284	msedge.exe	123
PID 3284 wrote to memory of 1740	3284	msedge.exe	123
PID 3284 wrote to memory of 3124	3284	msedge.exe	124
PID 3284 wrote to memory of 3124	3284	msedge.exe	124
PID 3284 wrote to memory of 4904	3284	msedge.exe	125
PID 3284 wrote to memory of 4904	3284	msedge.exe	125
PID 3284 wrote to memory of 4832	3284	msedge.exe	130
PID 3284 wrote to memory of 4832	3284	msedge.exe	130
PID 3284 wrote to memory of 4832	3284	msedge.exe	130
PID 3284 wrote to memory of 3704	3284	msedge.exe	131
PID 3284 wrote to memory of 3704	3284	msedge.exe	131
PID 3284 wrote to memory of 3704	3284	msedge.exe	131
PID 3284 wrote to memory of 4056	3284	msedge.exe	132
PID 3284 wrote to memory of 4056	3284	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://roblox.com/login
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9c878c188,0x7ff9c878c194,0x7ff9c878c1a0
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,10230691808963235607,7672804020425625050,262144 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:2
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,3177145413747520696,1369490581141946602,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,2624937080412241603,6663366813433759665,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5715578809126785617,17383261340314853581,2097152 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,3381456828789661493,650100207625884916,2097152 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,15526529181995994149,9423396564223270084,2097152 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,863417806151164723,4030678694401643352,2097152 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:2
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5052,i,4855821387313502292,3173193093094468593,2097152 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,11081831564846454336,1981865740627842192,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,16599065713715230425,9503032935208445927,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,2211257489090207143,3158658328803691725,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,2211257489090207143,3158658328803691725,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,7645298770988869185,5824928903885137547,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6860,i,282704792691843549,14941245467607911691,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,14082339708298136996,5039035465217138513,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,5343369821553971982,4168626276693106456,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,98108004789157323,4736082316564285681,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,4908063556731911962,5096672781534328061,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5844,i,16604165816240999266,6439362592801875725,262144 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1508,i,11808074073540944854,13278121049019272802,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=1512 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3976,i,14938634463345796898,6397411751525559237,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,14872596572175487355,13647542443883660401,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1512,i,14503394989799057972,11105365635955556007,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,16575870410225114179,3769984869927166991,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7056,i,10653044681782055601,8243653211587199546,2097152 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6660,i,12420259717060978992,2838230251189124499,2097152 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7188,i,10738848967212429129,13580181803375630487,524288 --field-trial-handle=2800,i,13788999489632834519,9455904885017374859,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:8
  2⤵
  PID:4056

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ae10af80c983ecdad438965cb208911f945e43bc36fe488247e2cd8bad97b450
MD5 f5ccd04bc3cab603843f2aa41a035cdb
SHA1 a4745772a8bc8f2c6e201e674b2ae558abaeb5f0
SHA512 e655264449a4bb6b25d28102be4b80887fc34a446f6baa3f02657035b3c41c200becbfdfe3947962121baf11f7b7315d8b709736af52453e82162331001d4608
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7A:fwUQC5VwBIiElEd2K57P7A
TLSH
T121B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 00076f0fac3060c5d9f036da11c6512aa2c2047d5430716a9e728f0cfcbddc0e
MD5 e27d353c82ebbac7f6babc2992edb6d9
SHA1 975ba5b15ada504c260d9501522d7e5ab1ea1df8
SHA512 e33a79935400db8db97849ea8b413eccbb090ec191023a58e0acb948a452e3544f6af2d1ac3ac4f961ede847ce83a724d6006f9504b62f12c705e6f93a853f3e
TLSH
T166E020DC15F4C35EA12CE48781F8D70C61D0762AA3C4ED5A570484D471019406BD59F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 86799263f2c8b83335a8b1a5e17276969f84fe3eaf782c3ebba048c1bfccc82c
MD5 d0eb011d47fd4a3e8c8d767292b246e5
SHA1 76c82ea45f76d999132eb2d9690b871a1faf996f
SHA512 5bc7d15bda9e70685fa52693b965a8bec30be7264b495fd15f0122f943c74d430ed30982ea91d38973ae709bedec7fdcc8892769b2599f463a8a5a4c247e8bad
TLSH
T11BE0DFDD53E1C3A4028EA446885D5B755899F226EBCCDAFA2A0679D8AE80003CBD18F4
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 9348d432e06f74d951db7f8e1614fd5c17a944bcfe3da81a90e03707060d50aa
MD5 0c322daaa89f4064e13b86d401d8f364
SHA1 3767156ca999aa0aa2ddba1717fd2a641f2ce31a
SHA512 7d9a9595bcf9d305ed1f98e30e00e9fecd5ad5b1b76ebb2c6a30cf2cfb4abc6fd1a7d96dbcf51fcf947e2af0a3a831987f34be39a13c1e7dcb5d7b0361db1455
TLSH
T12AC08059BD4C845FC28018BE5726F000176055519417D6570650FDD032407A01F2D264
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 19KB
SHA256 6d03a7a546fa6d3994170bf1885b8b8c2469039622f489f88146d5602fc632f2
MD5 1abbe484db67d4da8bdceff96af9652b
SHA1 64dbb70bb4dac1ccbaf39dffb8b97be667f4b445
SHA512 204cb57afe31de46e4301b87133ed3ee040592f066594a16150678fdf06656efa0d282aeebc0ae41acaaed3eca9eb459b37ef2231f05069932e6cd5da34eddce
SSDEEP 384:QNPOX3kylqPtsFAzyVMn63fcz79q2h1RLIrMFZk:QZ+kyIPNzaMnQfc397hPUQPk
TLSH
T1AD92D01039AF8107C0447933F88AC4FC77091AACAC6DCE4C9758695066FA0E693B6D5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 20KB
SHA256 34c72bfb4e56cc280c532cd801e017930ff65e82fa8b7223c979a19e1c54076a
MD5 20c4458eb60bd5de32b265087a83cab0
SHA1 a32f5a978661188a2cbd1addaebf6d2b87204e35
SHA512 0608349f417fdf56dce20125b415c9fb33de63f09d1864fb3ebf722bd242efc45a757e37fb3fd440c24eac5f3a20e1bf14948b81dc344ca9f12e11337961856e
SSDEEP 384:cDnogP50l0KE1Cnd5NrF4GzdVwFnzIhj+T1ewBG8tkhXquA:cjbPalVE1q/prvwBTPU8tkhXFA
TLSH
T111A2E2A2F5123D2BCED1153D327CF341558F20FDF06FA6E669283CDC4A0DD5254AA62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 27KB
SHA256 cff10e9d9b2864cc1b1321d1db204728eded77f962b3f26a3a7a5f55496dcda8
MD5 b8a326c40449141da2ea4c561ac9ac6d
SHA1 e22b5a2b1f0e2a8685171f06ab1343fd0b239f78
SHA512 bdc689c9ec19a27f1897faa2949964fe6ae820303835a872ef76cdc28af11fd906842faa7ab25503d78b28673aa87345797e9cc783c84137286a9da3da18210e
SSDEEP 384:4Yi5Gy8VIZzWUgAgT2RhdusJmzdb8Atdi5iEToWrz90aw45QZ8ufjMlPh670CzFV:7V7UgAYqddwNTiLzqaDmyi7vEyZ5
TLSH
T147C2E16F49CB3F64639F5723642CF1C8264B54BB2B40EE11036697529EC4AFCA8426DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 104KB
SHA256 c768ea297e8202065782f7bff6949b8930b93e161469253cf793235ca87b8c8e
MD5 cb9674427a1e08252f1592ad9a291f8b
SHA1 6d8c13dc21f568fb2f498c8de3ee428a67a4b9fa
SHA512 59ed90b389b9a0b1ce45a59b262df086c2ae958496e8f065165bf171f4eb850d7f5f518634860a7ae1e586054adee54fde331ab1fbed4cb22fdae151e2079390
SSDEEP 1536:Nozd7HYd9e8g7cMFG8riSvLGDAvi63aeLHu5yvsj2/cUxRbincRgfjYg:o7HYdi7vGe3GkVDTLUEgfJ
TLSH
T1ACA3120878E4C325E3EDD34365A05C311C27100FDDB794B16AD80DF5BE69AF56099B79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 42KB
SHA256 1d18dd11765cdb9cbd479d864722cd9d20f6b7af9ce4e7b1d74257ad7feb5d93
MD5 6465dfe702a867837e39e9674250f3f0
SHA1 5be521740b9ec8db7e0f02bc104214b89a25f9d7
SHA512 cbcee8ba24ea424002998d5cae29e1aaba4807ccaa130b7dd94ea396d1d9c8662e6f92300aeaf9752655f62b209e36011e66603be5e8bada35e65ac66b9f9a1f
SSDEEP 768:6g9GX8/E054C/urA46+X3fng8o7k/ol1jRqzMayMbrijSD/:6g0X8M054CWrA4vfngZkU4zJtrMS
TLSH
T15A13011D123D9E2C880DF75EBD916DC97A3B093132C9FB24AAC51050BA6DA674F232DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 63KB
SHA256 5ee498a528b774e23b2df0952d549386fb75fd43ee374ef2f87aead2073fc709
MD5 1415af906fac3c7828105272d8c0c026
SHA1 d0fc0d81cd8fe60b9660b4786293729754e0d6e2
SHA512 6d3072d15917e4cd47d89f2af93dc3e9fd9a85b572a2777227cb4d685a01033a69e8730b80dc56c5b7bfc12c662875c22af6ffe3600485530cc446e19be12db8
SSDEEP 1536:1/+FAzySADkA+iJsdAe+3CxVivauXb+4+Er+pKwv/sO+q33lyvdM:twSADkHir3XvayaDEr+pp/sOH31b
TLSH
T1705312B58CF50EFDA8C47890B7899EC651572B99C41CC84728FDCD4C94FAECAAA58303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
Size 44KB
SHA256 95d09efff000017f35cfbe19a6d4ce77d32bf5b438b87482d51aab100c692c46
MD5 ee3591ee4e1f4caf792165dc49d312e1
SHA1 df48b8f58720030f8663035502b0cdb6be08d59d
SHA512 9119d666316c1071e6bfdb643777d1147ca7d0478d078dd66c8528b2155e190dcd8b6ef4019305d6644eff9aca5979829daab0340fd0af7ea0cc24ad4d26f455
SSDEEP 768:p/QIf84qUSVUxqlh0FqtlKzd2kfE63onCeBMol9Q1EPCtP5VQOxmiYCHBIT/RUic:pYlich08tfkM64C8G1wCp5VQ5iJITxpO
TLSH
T13E23F1149C3F982B0EF1D37677B172A9E450B954A0D1CE16F9CD1E8FCEA06F8A729025
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 490KB
SHA256 d8d42d76a3b92fe0a123a0dea0f149be77cf10cf8c4b7854d87dc9502bd65554
MD5 5f05bc6223b75052b594b38016762a77
SHA1 9402fb580707b2a188e3709e3d3016cf46afb141
SHA512 cccaab7d0a3af45079b19cc17911026b598208f34e3169e4e55efc8aee179e91e188488efa21c5d4deab40b8a2ceab37da4013f7076237cc1174300771b9c623
SSDEEP 12288:NHERXJQVlxmdRFRBRxkZs3HJu8eWQ896qqW5:Fdfxmj3fx3JuIQ8ws5
TLSH
T118B4129DBF4B8C03E60976DC6E955FE623A74E2404148F3CAE114749209EF79C43AB7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 95KB
SHA256 4d22abf0d3264a60d2aa492275e0bf8c52ac9c813b8ad8bd0cbd58ef9e4966e7
MD5 c6fd6ad9964e40f440e4812f514b65a4
SHA1 038782e46aa16e6884faa2ad7abc5fb1b908fde0
SHA512 626fcb9e12a2fac7db08863d470864a217a85507db007834e3c00b59308eac1528afb883ec3b89ffd1d9801e0deddccc544623a596e38a1a2e96bf95e6a32cf4
SSDEEP 1536:lqOJ3JFsH5PL7lhCR0mEFqdAmcplJZTc3TSHWUcXLAXLdXq/r/z71OHL8i4v:lqeFsH5PLpLmEFq6XplJZcEbb6/r/z7t
TLSH
T18AA302C9AD4408EA9C5E6B33A890D7C5C605A3B31306F0F69C37C5A6F6457EE34B6234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 33KB
SHA256 870db0b6069623fb5fdf72d7bdffef3eaad73e5168912ebf181b1e1958930e8d
MD5 8ed3e2cb1a7000935ab62ba79a0e272e
SHA1 e44ec169aea8b2c1b8dd87fdf91b55bc123c7d98
SHA512 1b0486613522ae9baef0d8f67fd1b0092b58ac887a2d1d08515d6d1436cfc04eb5b50fbc3dcd69d0b77781c20084a2d5d86d122ebd85f7f9dada5b3944ce8763
SSDEEP 768:eEcvJYELty7wD0LjVEIA9J1dXw2i+bCpe27TUv+s7oq7MCh5BUD5W:e3bc7wD0L50
TLSH
T1FCE28194BAF2B0A1439361E4042B514AB33D6A2CC48E80FCF199D5F67DF7809567AF39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 25KB
SHA256 0962bbc00dce8f75cebb05013c34518f53e8a7c7d1957956d3e73c64b0db1d13
MD5 d23fdafb0f10b69d2fb61c52dd33da0f
SHA1 6ce79361b4109774c9707d407389b8d0c18d3595
SHA512 7553d8c01e90bb6b1cd84a15317301c9e8b220da75bf4c8c8922589fd28fb306985fd342ce2acd5398e12cff884a85f08c5c8ab9e90acc164f353e357159f139
SSDEEP 768:jvYHZDAp6ZQRsTs4LZ+857cQeDbWnv6fr:bYJAhRsgWx57cgnSfr
TLSH
T194C2E027EC5784795D9254D508BCA3D0516C34230C23C74CECA99993BF992B8B28B1BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 95KB
SHA256 4bef55e1dce556c0a137af59001957ed13bbfc0cb8643e3b4ab3db9e16add603
MD5 1fc88e4dfe85f609d9db47ce12b211e0
SHA1 1d8875c3a765e0267d4f82db4eefa20f594bbfec
SHA512 365269429ef9abcfaba2d1134c6d2b0db2fd7e40f698c721bd5fbedd717a7276b82f7bca61cfb5b9a3f4984ba22c8e8bf0c282b0fff463e2b09c4b86f5f3db7d
SSDEEP 1536:xIXYwcO/LXOls76jSZhYTDBJdvT5oGg7YZq5iI0NzeMw8z2rsPAKWJO79feqCVBJ:GyOTOlPuZhYfvBpg7YZqr0Nzh2r9OpeH
TLSH
T1B2A312937090D2D452E8CCADDB24D1EEA2AA6B58FFD8D2201C6EC415C7914E703AF35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 20KB
SHA256 fa0d30429ca3e0dd8fb2bd3c77be37e6b3157a3484f952fcb809b0a3cb9f3d47
MD5 dfb96e7ecc17ff6a3a80269bd6164c8b
SHA1 bb4d76db26e5357cda1ca8682db6677a9b0a4e8c
SHA512 0722592f17c0ddec2833391cac8ab6a91113e5b058916fcd41817d20f6ccefcd59b53284a8334e04dc37767b6e57c217629d1f166c0996fe3b1422599f8f30b9
SSDEEP 384:CKy/lEpGb3gEzbr/4JCSDSSmMOijXNJqVh4r57aH8DSerpeUd:rGEpM3/b4SbCNJMhQWHe1eY
TLSH
T19F92E0CD85BDD11926B97BB4E9AD25BBE3251DEDAB00C2C5CC88284D1F2467349E0F85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
Size 22KB
SHA256 fdea2fbc085ceb1cd36722ad58ce2f001ed681bb541747c872b75c664bad8724
MD5 a5fd794898dbdbbc592c83cc2c5a306e
SHA1 d457683043471e160aceaa5ca2ae1d4b9ca6aa00
SHA512 45c077aecc8e69759980cfcd0a2833afd0ec04f989e8ac9b0f64fe76c795823fdbf4573459fef5aabf64c8cba134ce3259450f6265641d44cdb6f34c763d62be
SSDEEP 384:DT/+uZvtCzXhxC2rr2KMEDRIB/hKTw3ZMcC8b4WlGVTD6QyfuXCKRcLi+CDO8S4n:DT/tRtghxdrdDROhKKu8swATD5XCMcX+
TLSH
T12EB2E16523D92CD7C0F41FA56A85DD5700731E729AD3883B0A69289BE74838D01BB3D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 18KB
SHA256 75621391d2c151b997b7f6ba864b0410426775d2a24acbf3782649812eecefe5
MD5 7997eee850b229cc4efa803179acbabf
SHA1 024c596a003a8f2db433bc35d7df84ad692cb78c
SHA512 7aabbc67a9c820b6bcdf4ec74ef318a619681b19c97d1863cd2efc9f8158fbbc7c5936c6c3cd7d180a62a737de20bc87b346d8f7c0f64e8696132d48da13dad7
SSDEEP 384:dz+FfMp7QZkk4StIILGaVv3e6i+h8ogVBUnStfAUaZTr3OaGfV3y4Mbwfhb87A:x+fM9QJXt31u67hDOiSdPaRreaGf09iF
TLSH
T19A82D072873B0913E4588F89061AF1A563D58FDA1B2342F943EE3661BE0D58376791CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 79KB
SHA256 cf243db7e13406e5466f1fa1fcace411a3fa9dae7ca339e486f16193eba35510
MD5 0b126099644d54eae4b6c10452a3fef5
SHA1 8ee2f24f2b68ac724ca2200d4c7b031a02e71045
SHA512 1c298b8f33bcfebf68ab3d0c70373f1f410ab1310960153006f1206d1abe3e7929e42c5d9502f1e480626a2b48143bc47d49f16a3efc157655c15839ce0c751f
SSDEEP 1536:ggsCj2a0bKfPaRxiMNvCXexe7zU7rAJ0jkDjpHxCI0PyerCyyEd/:iKqOqvfI7zMEJ0jUDkVH
TLSH
T1DD83026BDB30C94AFB9F59324C5CF9BF20498940B1118CC595B680A78E9FACE1489D7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 62KB
SHA256 3ebdd493acfe0b89a9c60a9f6e0976bc59d104457b7d166ac2015bd3e3aab8c5
MD5 efdbfd4f05d6b55733a61cb491d763fb
SHA1 ee4dc5dcf038bf0393be0c6ea0261576299d10b5
SHA512 08b976f5f37614a04a7f89d3c088d92c25b6acedb58ecb258d0e651db6b007c272869a8872e00fedf7b004a800a295a00e79e5b113ce1697552bcf231d0e43ca
SSDEEP 1536:zeeR6vE57/QopoI6XgL4HnDWyxuqj65xIvoIm39TQRTE/vPG0VZcN:zeeRzRpoIUlDLOYQIUkRajm
TLSH
T1275302C70A0F318433F211CBD940BE0FFB0B2ECBA056A67467557435A9B6AC5E49AD30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
Size 55KB
SHA256 0c7df2b97d5df54d8c69c1100f6cddd166e7580f342782b909d92550b8382f40
MD5 9230d6596e129519f52f0bf98243790e
SHA1 c80f73adfccd91b46916d3dfcec774975c1a98b3
SHA512 557c6fda02eb3fde14897fa7bdce1868f76196853f7056a5409f349efbfccc72b043914221a6695af1aa4005dd5db40bce930072989453478304c33ce2979099
SSDEEP 768:TwxDOxhPL+gsRNNouNh6FJdRcSFtOW6yoI2ZvldNEuxnsKlnjAcu3Hra4UXYg2jJ:TwsU2XJdBt0cOlzRlJ1uJOY/TGR9A
TLSH
T17D4312B5D4A193B9FFF734FF8ADC86D1CF655214DD388081922E10E9422E8F60845A7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
Size 196KB
SHA256 89f65e983de2aea6a8ec114320d76a5471b5cecfb4f4b63d1c06b0d032098ebf
MD5 a85fb7acd5947bf5360d8df2056d55a4
SHA1 26fe357aca207d90b6796a6ea98098d50d3378ef
SHA512 0f783c4491216c593f59118f443f8cb84b6b8e68edca7b7ca3f7628c8b39ad9ca1485b1df1a6bbf6dbea88a74b38d2a57a2ca93a61ca8baf9154d020fe34a05e
SSDEEP 6144:FdkgEhi/h9P72kZiOAi70ERvCi+2kH42fXw:gXMh9j9ZlAi70x/m2I
TLSH
T1351423E4DB43C657370B0F9AB04E10ADF60CC99B279B479C8393A368772697DD5A018E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84521981f7efeae6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\84521981f7efeae6_0
Size 432KB
SHA256 51b19f8d18f5605c82857a4febc8af03a1442d82c89989f29a48aaed172c22ce
MD5 cd3186a3e659a4b5b9174064a57d3cb1
SHA1 dca6e36e1d3bb762ac347a3adc473637649f2678
SHA512 f3df62f9c45f2a2c085bbbe97fa9148eae52d8b9ec62f0da56869ef31d9eb7a018e3e0e6362c6f7cb989b18729799e400fb59b0c7e0c11e9df29a8431f275fa0
SSDEEP 6144:aU/iTO/KUyDmVpUltSxWwZI7BgwPeWvlOExdZIurjv4P2:aU/w77vvvldqurjv4
TLSH
T1989419065BA2BDB7CB1653F66292C6277336818C3F83C20617A1B7366C363E75D89817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6a2662cf13e6263_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c6a2662cf13e6263_0
Size 255B
SHA256 0561c6f88ba3db6dfead5a65de4daf3c52258dbcff24fe2c5abf969f48e3ceaa
MD5 96e3e31795f2c11db2aa4091282dab27
SHA1 669fc5096323c196f1a90158b482ba193577aa3a
SHA512 9e2ecd4ad6422111e8676119a14bdfc24ff914afa3bc9f6458e315c0aae1cd92d9ae2621995cc58a65644f3f5e7805e6aebeba2ad71e341214eb9f20ec85c26a
TLSH
T1FDD097B303114628EE1A03F1E77A3619D66510A00827EE83C1047F774E213FB9180732
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 0250111e3ec72c99a9c8b0b15f275aea00766ce3a17494d71c2f9042043b4d2a
MD5 027f9d4b2143be07092d410eb98485c5
SHA1 da5b0775ad8340de45622811a7c51c26c541d4a5
SHA512 9629407dedfd9a1921e74e1728cca46fe20cd82ebbbfaf22430c89a610614eb6480ec5d76a07fba9d2b59499674dddd8d388f1a399f5e9aa393a5b7fcbbd7adc
SSDEEP 96:Q0UfrIKztctSryc5Pe+TfGkOupMXU9WptrnSyAb53ZV9B3StrQfqFOjEbbk2g0aP:QfTkSB3pWHIZffEbo2M+0b
TLSH
T17AE1D8FE66A1405BEB55C17A04A2DD85BAE855E4FA0F8BCE3C905A392603BF4C135F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 1b854a4c1f88c136c424d4e3c2031e18ea12421d33d3a4428472bfff2c1b416f
MD5 132f4c85d1396fc07c0b163e04e591fa
SHA1 5e674e6f58ca8caae8a3ec41fa71d8cec3063cf7
SHA512 014c1fcd895e2869406f573ac54342d8a2d853f35df506e2524da67eeeb4386ff65fe275d7584df9fbf77f4eb6a38d9f93286ed3725b455fa17717b169cffc42
SSDEEP 96:+Sh5PY5v5m4r1GwOjtdQHJEbb3ijqEnHYHR:+ShuXpEbji+EH8
TLSH
T12BC15CFFAAF1504BEB55C07A04A2DA0479E855E9F40E8BCF3D6018282743BF0C259F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 3f08b921bfb96ec9ae113bb8eaf4a0358e63bdcaf20833b322a6b51d715b64ca
MD5 7ba573abe6ac1b1d431cf5b8c3ca4e6c
SHA1 21081a4bdc88ecd4c647e48a5994a85017f8ad41
SHA512 d63f971a0ccfa2fe4c3d4360730ec81b82eee5040d4eebab6c9271d23e6c65cede9d9b3c7d476c393fbe772e0844e2c1ea1ee1c7e5513dfbfba3fe520a8ae850
SSDEEP 96:pXtSin5PjhkmCrrbXAt55Iaety6JUMYxEbbxog04TA2rXgNQ:p9SCMmCbX85MUPEbtoWTA2r3
TLSH
T1FBF1A3FE76A1145BEB55807A04A6C98035E895E7F36F8BCF3D126829E203BA481D5F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 d2d272be99ca69498f4a4488e7d0d2c86bd5564e1aba8be85822472b4378c853
MD5 61d777847062f7b52f4bf0667f2087b4
SHA1 4e8afaa193df6ceb1db1cf223c398460abd654b9
SHA512 060bf2c53e01bac0fa832f5f5dd8bdfe9962e00863e6de6443f071219f8fd98ffb0107ca9c86cacba639c2c4497454bfd1d1358645b44842b9fccdc0b1b9a340
SSDEEP 96:OftSif5PJmgsm4murbXAfg5IaotMLDGEEbbx7gPTyBrYI+NR:OFSKugsm4mEXKgLD9Ebt70TyBrYIE
TLSH
T121F1FDFE76A1105BEB55C07A04A5C98035E959D7F32F8BCF7C06587AD203BB482A5F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 0d59d0b64cc06d75cd0f2c9f8e0e4df113c454ba20b3f216bf91892dbf7d40d4
MD5 7092f65a0e188483dbba992f3aaf3ae1
SHA1 46d68382eb5c17012900067aa7a4e7c5f3d63196
SHA512 f9a8dc4dccff0174600f8fadb9f7da4b7eeb556e70bf4edab9dc6e16d8d7663b004c4920cafdc496faa2897eb5ac56375728f087f7ae110f7dc97af4e3d114d5
SSDEEP 96:+dftSisW5PvjmXLPm4M0brbXAfg5Iaat9ncBG2EbbxfgATyUrONU:AFSgtiXLPm4M0rXKgEcBPEbtf/TyUrx
TLSH
T107F1FCFE75A1109BEB55C07A04A2C98035E855D7F32F9BCF3C46593AE20BBB48192F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 7634ce4d02fff93171649fa14b7721d5defec426c5da2a237358e5367a55534d
MD5 d9b3cdc5cd84b21880593e2340373cd5
SHA1 aeaa4cd5889c6a3d3f9b240073d7c0633ffba7b3
SHA512 e3270970536eb0871be5ebe8d1a10ca137779b37c2c7a412c4dea467cad3b5ee2d62a104147231ccb947824c97b3a697d43426e46929cfdf545877d75f4cbce9
SSDEEP 96:jftSif5PJntdm4uurbXAMx5IajtDLDGEEbbxmgPTyIrYI+Nk:jFSKfjm4uEX1xVD9Ebtm0TyIrYIF
TLSH
T175F1DAFE36A1505BEB45C07A04A1C98035E959D7F32F8BCF7D0358A9E203BB48295F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 5f2ed7f59f3a01bc4091f6c226b07bfa8ac1605d6360b533aa9749a9837c5338
MD5 6352ec76b7e17aa1938aada2a19d1211
SHA1 f9534351f1a99e5ba1acb519f362daf2af78601c
SHA512 cde2571a332969ef18ea76b12e7179909accdcb4ccbd51015fafda38d15508bb935bfa32a5ae0b93b339c792653d564f9ff6f0f96b0aa7b232ca72148cce7976
SSDEEP 96:720lfrIKz7MtSryc5Pe+0FGkOupMXU95p+rnSyAi53ZV9B3Str6JUPFO+xEbbk3w:72m10SBApWlNdUvEbo3L+0oj
TLSH
T1D1F1C7FE56A1544BEB55C07A04B2DD80B6E855E4FA4E8BCF3D906A382603BF4C135F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 7ea8306057c65d3846380d234b2d28dc44d19744d113f0c4aa07f96a4bd8bafe
MD5 e56c373f6a4a0eec462f190404bc2995
SHA1 e514128fe5de29b73210d9cf317d768f63d6c774
SHA512 504a86a756b4bc4c6bfc996471731a606d3137da2050a93a1620a3060654058337b70253e17e267335bdd83ff2eeac3c05d747e4d948dd554da113bc93a7da9b
SSDEEP 96:EftSif5PJmgsm4murbXAfg5IaotLLDGEEbbxmgPTyBrYI+NR:EFSKugsm4mEXKg6D9Ebtm0TyBrYIE
TLSH
T144F1FCFE36A1105BEB55C07A05A1C98035E959D7F32F8BCF7C0658BAE603BB482A5F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 773e3c526ea18f7c7f2cafbef2c808df81cbd6d1af18f278d32d919b179ca629
MD5 020b22c0e0839f8f10dfd1fe1b28fece
SHA1 7938525241c2bbb5aacd9fe73a42414be6f8ab3a
SHA512 cd299011eb9be1b2b5e4b0f6477ca2b3145be31acb61868e271a28735186c8950ace2d5363112da33e7281058de90e7f60613c0bc01bd1887e8e34b5058edd1c
SSDEEP 96:cSh5PY5v5m4r1GwOjtdQHJEbb3ijBEnHYu:cShuXpEbji9EH3
TLSH
T138C14CFF6AF1504BEB55C07A04A2DA0479E859E8F50E8BCF7D5058282743BF0C259F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 d84cc2afa61d325297c7911dcd2392bb58c5c956e3566200b9888775ba75b237
MD5 91dfac942c12c8b245ae6cf22ce5ed10
SHA1 f27777b1502241f66c1a860f3d3e610f23187592
SHA512 03e6f404ba5294d8e8f62bbd2798f60c967522387762f3e40791b4413e039fb4eef0011602f1d9f0fe1eef71bb72c56b4357e9142e19f65de0c3ef88ba11933d
SSDEEP 96:DftSisW5PvjNXLPm4MebrbXAfg5Iaat9ncBG2EbbxfgATyUrONW:DFSgthXLPm4MerXKgEcBPEbtf/TyUrL
TLSH
T112F1FCFE35A1109BEB55C07A04A2C98035E855D7F32F9BCF3C56583AE20BBB48192F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58f8a3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f8a3.TMP
Size 3KB
SHA256 2d57df036d02e1715cfbf2f26276cd4e5d733c45b3e76d3e7229528019d637f0
MD5 ced5364d8c17d39592aecb50ac953d85
SHA1 d9dd6ee74fe8f785daef7ffd7304fd64de0a5b70
SHA512 8f95ed52869e9546157d0cb5fd3bbbbe5b0f06cd123a00e31eac057fc95a06fba30aceb19bb5758f21fee45673bb6ea9c87706e2757b19b37b8f19a5e40d659a
TLSH
T1F6714CFD2A52419FF354C2BB40F2C10479F199E8F41FCECABDA04C302616BA5C269B98
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000003.log
Size 30KB
SHA256 845c709c4961b7213df06e2fc6afe427a73cb67881167c9ad8aaf754051fc03d
MD5 19ff8d699240f392cacf1b7d45091d66
SHA1 2a2186d5d7c3436d70bf27f7484d27f6810e9189
SHA512 e3b7ebcc9ed36a35a1a37fec201ee5768220d256e7557f0796efb53bba39d4785f458ea29de654c817f3f9c67fb28c46a1e194b671694200c066cb90180e8860
SSDEEP 768:N+eHVztn1LFftlh7LoTjSdJ9pnkJXXFpOtO5xxgRhjVrKtw1px8JBvlqm9DxBT4H:0IBQqtOtisYHYKkX7/2U+XzhaT119Er
TLSH
T1DEE2CC477F549C0AE139157BE1910B9B877B29483CA3962FE3C076BC6D309BE0966363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 69b44741ea7ef570fff52176f0f47e6f7b2b61a3c16d85fce22a0934b603bcf0
MD5 272cb15d1debb0147fd17ee20ee55b40
SHA1 44c33c2ff8d3ce1f1c715389f6afc6bc9f8fc81d
SHA512 18d75a74d2703615f17b51572fd686c7dc9b51388d48a68fada3886da25d9b4392133021229a5d1a130105691162ec151ac722e10619dc1adcceca716245354f
TLSH
T173E0226C82C9C22F610850A7592C7B0DAA93762E97CCAE814F01E820B082049E6AD1A1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 b4d2d59f0cb68cc4cac6326cbb32daeb2e823778469404406c5d67bdc80fea9d
MD5 dbc0a67ef60c5b15ce79f1e3f6ee2203
SHA1 078c0a58570b2e31c83ed53fc80297b94a46f3b1
SHA512 adcd4bb0b0b2fafbc424210450bf2c07a1ec1dddfff70706a25eedcb886f8e50a878c6812ae8d51ddf9a7ce45055d93233b311a84fac5b02a1d0763386867dee
SSDEEP 96:DwOHIfzBHjGjrYHxuxBwBUfx2Gj6VXmQTfhAeP/K:DLHIf1HjGjrYHxunkUp2Gj6VXmQTfhA7
TLSH
T168A18BF343F1C96D9A1656F0AA19AE1BCE590520431C7876C9E0BE2793F35A1F201B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 a462885f29098ad526454f95e0bf64c2482b5f42b469e3d5a4018675d0cfad85
MD5 512d56f6498d8f7c53fb7a06ecd7e829
SHA1 b8156b962c4379b517465c973c85fb538a9c817a
SHA512 c852f90cbd2af278b9a6ef8ec3f7a300f052daf9362bb03794a95171d52ae534470e525a1d1abe6a0a7cd887df5828f6a7257c5883534ad7c5fe95c6a12c7adb
SSDEEP 96:D/OWIAI+7+sWzirqPj6CfxA9xBXjHjuQTGMbHxhfzHwBaj4/0/Gy:DWWIAI+isWWrqPj6CpA9nXjHjuQTGMb7
TLSH
T177B19CF753B1C66DDA1656F0AA09AE1BCF5C0520071C7876C9E0BE2793B31B1E201B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 60be8b5d1853a3c0d4a935eec08b4bfd025e05655794395cb18d947814ec19d1
MD5 aa10cb982f971906dbf514d3d7aba751
SHA1 cf2f820790624fa5f5ef1037ea6d7aae7d1d5930
SHA512 7a1da2b452fecaea2ee1b35f4bb7a8ac3ad060771c3a283fc8d2edc562f3906b387d5ddb9f2c1320a7938c24b03e7cf26b49903978fda54e112913f34c1cd636
SSDEEP 96:D/OI+7+s+iIRzirqj6CfxwBj4/QjW/ZPMzhHjuGH6Hxf9HxBEQTy:DWI+is+iIRWrqj6Cpkj44jW/ZPMzhHjh
TLSH
T1CEB19BF753B1C66DDA1656F0AA08AD1BCE5C0520431C38B689E0BE6793E35B1E201B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 18d5710b068db8945e65ca7386862d2e0e3ee0317dd7b651671b7be126ffa85c
MD5 2b37a94a1340c862df01de57f8d7dda9
SHA1 19f1ec21f1744b01a01ce0712bfe87929a6a385d
SHA512 812912e5f5990271f4a1ed2bd91b91b47cf998ad14771e4bb02f60885e22b4344b8b4509416f5de5710e57966d16758cfdcddf59f13e87e7b33f3e7595c4c7b3
SSDEEP 96:DwOHIHI+7azirrPwBj6CfxA9xBXjVGHjaQTGMbHxhfzHy:DLHIHI+GWrrPkj6CpA9nXjVGHjaQTGMS
TLSH
T115B18BF383F5C66DDA1656F0AA19AE1BCE590520071C3876C9E0BE1793E35B1E201B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 d148eeab743baffc2650ea8c0a19d0506c2461ba3fab878f565befe814e546f3
MD5 20c995f96b8c85b9e16f22253152b557
SHA1 5862e3d920c0316725c881ccff0dddb572916bc4
SHA512 b7905f3a1e6f25ca0f2772922755d7552cec2973026826d6841970230c0a0cf824c2297c9aaeaeccea0e1fd346ccd99d50bf8d91e390aa5d62832950e246160a
SSDEEP 96:D/O5+5iIJuWzirqfxj4/QjwBj6xPHjfzaGhuMHnHx9HxB5QkGy:DWY5iIJuWWrqpj44jkj6xPHjfzaGhuMl
TLSH
T1B4B19BF753B1C66DDA1696F0AA05AE1BCF5C0520431C78B6C9E0BE6793B31B1E101B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ff9a231cb18614b1a22fd6753e7dc90dead9b1308b2fc0371e5661d099adc9a0
MD5 112991a579e1097ff7954efade41fdcb
SHA1 47590eb608228a011e1d6752084c4250aa36d31a
SHA512 1e35d74d643cc32d6e09f7b9ab38c688936a1c7f366c5b283bb32dd8451ead7c79f307907a92e4d724a00d9103d5c2bd494a42e73c0d586e10beca8db66172e0
SSDEEP 192:sxZUR8yM/jK1Ml8Mk8/fmsiLlIdpmnHW6+WNyAf/YCImrOtIgrJ:sxZUiM8/fmsiLW4HbZ/nK9
TLSH
T19052E8526A34997BCCCBD209F955BF93D6F9047392944E489EFC8A0C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1a31763f02f1f5502e85159667507451ea9c6ee122af410af4c371728f294a98
MD5 296919c4bac5c67d4debba8e0d20c6cf
SHA1 357964b5a565a8c59a2466866c4d7271192e5127
SHA512 29c4c47a8a592eafb3d9cc028ac3bd5fd42e8ac3bd7ca95f6a1ab77eb2e8d0a25fcc4e8fc06159f03b6966c6f698112d9ed8719137a64e262388fa5495cef8b0
SSDEEP 192:sxZUR8yMojK1Ml8UQpuk8/fms07lIdpUnHW6+WNyyQZYCb7eOtIg5KJ:sxZUxqpF8/fms07WuHbsZCKE
TLSH
T18952E8526A345977CCDBD209F955BF93D6F9147392504E48AAFC8A0C04E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 497e7ab39f85e09414595791219bbe4c299d13910e7a755548e6a17459b736de
MD5 a0c12b166361bb9718337b1c0b920da2
SHA1 ec555b62f862f03c026417b3b5e9b03bed350f17
SHA512 61bcec2ad6641efc4ea508ab7917e129068fc094d695060bf285985e39c6c97b673a6ba9751a733433334a3d62f3f85643f472f490116ae9915ffc343a231fdd
SSDEEP 384:sxZPwqpF8/fms0C66sjqMpRiYnazAW8pZS15posJWeT+iraHbXFmBE:s33pF8/fSC4nnc7WeT+iGHbVm6
TLSH
T1D7D20801A924C8779EC35D1DB43D7E73DAEC00626285CEDA5AECCA0C019D5FDAB0782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 c9da87ab0998333540c8d1e7caa53c479720ca5a10c964f1418dbd8396977975
MD5 a686a9e31b1b65907f000d00c96e1ea2
SHA1 f7edf46f3ccf0144de1883ced06163619709bf8e
SHA512 29f46ce692a4546cc6430098cc3179b5a016d44087e1344645037887a5c1321975baee567a6691e91f3fcab5775cdb5e23b1e603f8911a2d0c4dc052d7508cc2
SSDEEP 384:sxZ6wqa8/fms0C66sjqMpRiYnazAW8pZS15posJWeT+iTHHbcd9BE:sy3a8/fSC4nnc7WeT+irHbk96
TLSH
T1FFD20802A924C8779EC35D1DB47D7E73DAEC00626285CEDA5AECCA0C019D5FDAB07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 624582d34f0dfc0d76f96a9349d99cd01afd4fab32aacbb4ac1716f60c427cca
MD5 3eb7806013953f945d9bde12ff7c40ec
SHA1 a42758de238ddd3c92f02f6b046119e23892d5ab
SHA512 7e8bcbc025716088ea1acfd878b7f91ab1cb560aaf42a48e86cd4e857923aeafd6909cb1b5f5eb9e0b4083a0b3d46d4087ca77538d4e98688dea14028fd8c107
SSDEEP 192:sxZPR8yMojK1Ml8UQpuk8/fms07CIdpUDHW6+WNyuDFYCH7eOtIg5KJ:sxZPxqpF8/fms07raHbXFmKE
TLSH
T1C052D7526A345977CCDBD20DB945BF93D6F91473A2904E44AAFC8A0C04EABED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 7bc67a1b8f9b26c5e9fc4c35d558b2ea2230014114b1883c3cd28c33ae449aa3
MD5 249cf2005250a2af736ab9e43c50bce8
SHA1 d74ce9dc4f8c2650c2c1d5a3bdde5ec3645f7131
SHA512 59510a0f0388dacf2cf95789864e21fc6b37fd2775638691e4f4276d1ad0e720d72aaae010afbb7552826bc4e8f87fc74e2d74a2bab2a676dc0dbdcf5d5fd5d5
SSDEEP 384:sxZpwqp38/fms0C66sjqMpRiYnazAW8pZS15posJWeT+ixqHb5nMBE:sR3p38/fSC4nnc7WeT+i8HbtM6
TLSH
T1D0D20806A924C8779FC35D19B43D7E73D9EC00626284CEDA5AECCA0C019D5FDAB0786B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 c391826ea2a169bb290ee2b3832d15f5258b736438fe71ce7cf61c61777a4d44
MD5 373bf4ff8fa617f6518980d6baac5768
SHA1 71045a68a2c86956aa9cf4ddee272ab2cab1fefd
SHA512 a1ece30bfbe8f04a2d8f465227e6851f2a760747f16d4b5694b991bcbfa3900e581dfc1edf20c2ad83c4321edc42e31c1377907006733e2b0c20f8bfebd3c3a0
SSDEEP 384:sxZpwqa8/fms0C66sjqMpRiYnazAW8pZS15posJWeT+iLVHbsTcBE:sR3a8/fSC4nnc7WeT+iJHbOc6
TLSH
T129D20806A924C8779EC35D1DB43D7E73D9EC00626284CEDA5AECCA0C019D5FDAB4786B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2cc5e71286758195806aff6a19c79de0858939876d70e3f78cc0c59930ed0812
MD5 3b0159091b3710ed8ff5511a5a01edf0
SHA1 0383412d8dd6d7d5b69201d9c28eb483602ade11
SHA512 82e01ddf2bea7afa8030c1eadd21def0d4e574d51ef998accccdec14d5954cee90105b70710da11adc8abcfb9db732c9fa62262e267b072c5e625265dd41b5a6
SSDEEP 192:sxZUR8yMojK1Ml8Mk8/fms0LlIdpmnHW6+WNysSXYCk4rOtIg5oJ:sxZUxM8/fms0LW4HbwXXKG
TLSH
T15D52E9526A34597BCCCBD209FA55BF93D6F9147392904D48AEFC8A0C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a899b26f7518f11edd46a25f321291f234c768d54809a073adf70b9f4391943d
MD5 dbcb8f68afb2e032e379a4109ddddaf8
SHA1 7d8bed2ad32cf3233f5c030fa913f694b751d30e
SHA512 9201160e95113630f57bf5668ea12e3ca8f1fc2bf65bb1219b3f2cef3109b9f8905de3729dbce0c9f57011c8b3ed1eb454e8d305de00534c324bc91b5edf3559
SSDEEP 768:L48bqn+WvSC368F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKV4roy:L48bqn+WvSC36u1jaCZLbWVDy
TLSH
T140E2FA3B280CCB7E4F845E5DEC26AF962DD8018B6B988D4447FA894C03C76EB511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
Size 1KB
SHA256 e847f0df58e3c0fb6210cf21c6ec52498692e23c7d651f9a10a476281243bd45
MD5 f4c38384dc2b23d4d30f890a96948575
SHA1 00f2922ec5abd95a6d1b71ef8e03b3d450310201
SHA512 130ba871f6e9826dc6baae8d044f35d0fdeaacc20ee6d5938692ce45e7c9e15eb0f8aec3efb6b56fb110b091c70257e6a11a227b6177a21a403c8dfa47840c88
TLSH
T14741A58E8D9495AFEC9409B204B6A4A83374CDCC2B41D2835C7C72377C9373A1A4B1AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d24a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5d24a2.TMP
Size 1KB
SHA256 afc8dd5a7a5d4cdc9328cbcc765d2e56ffeda460ae3f53a39a9bdecce5bc32b5
MD5 4acade2b8b9c6893ab0405c5e235ab6c
SHA1 254ed6976d50bd19fd1811db9906ff5b14a8345d
SHA512 a2f8bd991a183b5e960d3a7621cb91559ffba37512a3e9e478c59f72be240cc70d6a529f97007a8726d5a527db746fa0f69e4a6386d2f6f52fc0b0ed64915e20
TLSH
T1C241848A4E41861FECD000B206D3A4B83379D94053227A8794B8563AB8B57BD2E4F1D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 401e64b5683b9ca7c22bf5016c5a61aa8dddf85d9ea79ae622c55feaa9b12f4c
MD5 8fb59504267a35675a207b185d8cb1d6
SHA1 d73a0cd86702e6cffa4031f8cac1eba9a1580266
SHA512 cfcd985264bf769c064b4713ae2c87622df6a384eed73d089d438c4af11bd64fd7c65cbebe9327b5f4242bb685a59dfe5587a321fc376d8e2ae30c1a097f70e5
TLSH
T1A6E068FA29E72860BC7BA3F5247008E002597988C986BC9F00A9A1D710B33622856C60
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 672f328953628b99e00b81f79f2fd4d27fa9ff67e293c3847db0f15f384f8654
MD5 c45b29a306430b4ee3500221225bfe58
SHA1 e929395c79bbe156ebcbec8ddf4172200df7779a
SHA512 a9a696116a19cefbc56485ab4af3c1f7724b54f6c10bbc324db365bbd0deed2782ebc875295efd6a06df040152200ce6d4a3b5b2a8193ae854bc330e12cca31b
SSDEEP 96:KA/ArPNhtY5p+L/HYKn9/lYTHnOlP1W9KKe8CaMAKdqOXOKsEqg:ynBtXo9g
TLSH
T1BFB10F22727B1202287E7809A659876BDE9131E33425A46E77FD00620E77E129DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59718c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59718c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b83ae75ea6677b3b4f42a6621dbaac12ed03e21367f68332590a4c48e582f6ff
MD5 77698ebf8cddb20c7a893809b2a1deea
SHA1 6e6cc327f16b0ee0b446a14d2a5724848abcdcc3
SHA512 65683bebf29f433f8de280dfe4dfc25926e226d2bddd4fba0fc0f75d2e70677bb7421d3a3d6340f9b26fd2c657a1a8dd8a78d281a78a88dd1bac4f450fb3fd5f
SSDEEP 192:vONJ6Db6QmiUyQkHBa+joOmw+4sRgoCU6:vONJ6u6HBa+UOH+WfU6
TLSH
T10602D935687C5CB79EA26E45F48B37279F94207BD9566B94D6E81F0C00D764C230B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e827bb6e1f9192c9f918769f04ca33bcf07cafd6d87fec6435076bcf3f439e09
MD5 537f7494bc7800f334860da889996f9b
SHA1 a0de70314828280319e9ac12c43f70a8fb5fe76a
SHA512 b2a97b934be26a79cc0dfbd5a70003aff2eb47593bbe107dd7b46ca9a725e79909c8e8de4ce7b8a686219385f36a7d2b6042f7ddfd742af4ee186c8bd71e2957
SSDEEP 384:itNn/s3n9SfsNWLjCKzEa+UOH+MHGrDVcl1lIO7w/AwAs4:ij+9U1IaJOHZmrDVcLCO7w/AT
TLSH
T11F927D7669786C775DE26689F4073A1B9FF990778ACA2A50D6DC6F0C01CF65C030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 80955938f6fafca500c78904705651c1d823165416191d41c4572f34d2c3d8b7
MD5 69d787e86bb61ac9e6c3b0aa189f5d31
SHA1 887b7bccd7a3ddd077aa151dd406c920c786256a
SHA512 f7e2bbe6e89113f8b27ed55ef536af15e04efe53ec81e2690c04ce68a4708f77a560e14a151972f4d90c0a162d9e66700d7a2770cfcb3f21cb54911dc25015f9
SSDEEP 384:HiF1tNn/s3n9S4zsNW8TUNTUlIlijC8zEa+UOH+MH7rDVcl1lIO7w/AwAs4:CF1j+9LzwgoIaJOHZbrDVcLCO7w/AT
TLSH
T1D9C218F258E78876D99D5B87B73E2E078EBDD063B5856A50B3885E0CCC8A17FC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cbb3f04b34417a3484ce0dc1155395fafe6715e5a599ac756b6cd5b0611ca696
MD5 008609d77a129586a47b7b17d1b69588
SHA1 60fdd483e0105370576eefdc5cccb2aa98c7d845
SHA512 feade9707c40fab28c0892280c07fccf656e5d6e78997c1e4099cd0a94f3dcadaf4c23af3d285ec5080b25a3fcf65125f403266b884e6d86c0ce9331400d362c
SSDEEP 192:dON/6DbCQmiUyZkhBa+joOmw+4z5FvNzNrqiU6:dON/62hhBa+UOH+MHprU6
TLSH
T18A121936683C5C7B5DE26588F88736239EA55027DA8A6B91D6DC1F0C05EFA5C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4f8d12beff41a36e8a5819ab6f5a185d8e1ea9d372831415d3cb2aa6d67a1654
MD5 b92237495b6eeb3efcc3102a71010ceb
SHA1 0627b925c9b1b99138ee322a412279b999fba3db
SHA512 bc01b85d42cf2fa910177a950321d013f43c1a2e04e752f649e8ffb8810e151dba642dfe606d5d5be5e2f8a93d148be5f07225ece53fa24b448f44bdd09e24b0
SSDEEP 384:ttNn/s3n9SfsNWijCKzEa+UOH+MHGrDVcl1lIO7w/AwAs4:tj+9USIaJOHZmrDVcLCO7w/AT
TLSH
T11E927C7668786C775DE26689F4073A1B9FF990778ACA2A50D6DC6F0C01CF65C030BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8972d33060f8242036f8fe1cf323ed0e3d99051edc3e1addb4d1ed7e99d7b2f4
MD5 3a6fdba48afdc26f63115993c23b8e1c
SHA1 aeed3cf3dd7c27cdee3746760fd448ec3a119874
SHA512 9ad7e2ee0f167a703eb4fc3152e8f26965c5ef94b55c23069b112d11826aed00aa54ea8cce3b41dfa7c36c7692caccb177c1a47d868cc4da752d0e9e604855b0
TLSH
T1C2E001016600006FC038433400D71B303BF0900017B70306523206791CA23012B20AC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6bda0e8d09b17ddc4493ac9b2706e21520a7a950af1ca0f13a4d151075ec2f23
MD5 30392f4ba87d73d6673775b0a9cac485
SHA1 8244804a40322176939956b70587c4385f4fb4ab
SHA512 cc81f1b12a792a4e31daf29ea92222ac080bd3089cda6693cb7bf5dd98a0b98709dde7fa3c3bcdf7f57dcc6c4050208bbf3b1e9b98ac0fce385a1290fb214625
TLSH
T13DE002016700005BC024433400D71B303BF0D00007770306523106791CA23012B20581
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5ebd24.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5ebd24.TMP
Size 392B
SHA256 f271d3e6fc6ba743cb29a01be0a73f967471f7f7bd89eca25f26ca48cc72b914
MD5 adbf30140902140be048140f8e22df10
SHA1 c3fe19272587b9a397feeb8e2a2292fcd56ee301
SHA512 4f533663dfa219df2a0b8a517d17fad26105d821feb9921be579c9e91534049769a58d31259d6a8fd5be8aaca9712327411bd8b5a4be6ee26b73736a0c41044d
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cf5be10f0796e44fe20c3086ca93c27b0806fe4a668a5cb5afc305dd3eb75b3e
MD5 863fd243748ea014af521048ce5ce316
SHA1 e5c58c58db9b7071b070116874681fb782ce5b8a
SHA512 27a312ae4fdb0c076fab1fcf6aef9df294fe07bb2ae8ea3a4c731ce5b9173cde325130fd32f53715c96d0ac19d45744128419be841b47166ae67abd05390de04
TLSH
T1CC412A58B6FE1148B3B76F5AABF6A95D447F7C772E06D45E00110E4F0663A40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download