hxxps://github[.]com/roluau/DLLDecompile/blob/main/dlldecompile[.]luau

Analysis

user interaction
yes
max time kernel
58s
max time network
60s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 00:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/roluau/DLLDecompile/blob/main/dlldecompile.luau
Sample260718-aemfeady2z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3348	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288068772779498"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{843C8CF0-9DF9-49BE-ADFE-07ECF1901A06}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{8E108BF2-17E7-4CDC-8E4E-A78BE9C9454E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 4680 wrote to memory of 4352	4680	msedge.exe	86
PID 4680 wrote to memory of 3348	4680	msedge.exe	87
PID 4680 wrote to memory of 3716	4680	msedge.exe	88
PID 4680 wrote to memory of 3716	4680	msedge.exe	88
PID 4680 wrote to memory of 3716	4680	msedge.exe	88
PID 4680 wrote to memory of 4744	4680	msedge.exe	89
PID 4680 wrote to memory of 4744	4680	msedge.exe	89
PID 4680 wrote to memory of 1268	4680	msedge.exe	91
PID 4680 wrote to memory of 1268	4680	msedge.exe	91
PID 4680 wrote to memory of 1268	4680	msedge.exe	91
PID 4680 wrote to memory of 4088	4680	msedge.exe	92
PID 4680 wrote to memory of 4088	4680	msedge.exe	92
PID 4680 wrote to memory of 4088	4680	msedge.exe	92
PID 4680 wrote to memory of 4512	4680	msedge.exe	93
PID 4680 wrote to memory of 3060	4680	msedge.exe	94
PID 4680 wrote to memory of 4512	4680	msedge.exe	93
PID 4680 wrote to memory of 4512	4680	msedge.exe	93
PID 4680 wrote to memory of 3060	4680	msedge.exe	94
PID 4680 wrote to memory of 3060	4680	msedge.exe	94
PID 4680 wrote to memory of 4660	4680	msedge.exe	98
PID 4680 wrote to memory of 4660	4680	msedge.exe	98
PID 4680 wrote to memory of 4660	4680	msedge.exe	98
PID 4680 wrote to memory of 760	4680	msedge.exe	99
PID 4680 wrote to memory of 760	4680	msedge.exe	99
PID 4680 wrote to memory of 2720	4680	msedge.exe	100
PID 4680 wrote to memory of 2720	4680	msedge.exe	100
PID 4680 wrote to memory of 2664	4680	msedge.exe	101
PID 4680 wrote to memory of 2664	4680	msedge.exe	101
PID 4680 wrote to memory of 2000	4680	msedge.exe	102
PID 4680 wrote to memory of 2000	4680	msedge.exe	102
PID 4680 wrote to memory of 2000	4680	msedge.exe	102
PID 4680 wrote to memory of 2892	4680	msedge.exe	103
PID 4680 wrote to memory of 2892	4680	msedge.exe	103
PID 4680 wrote to memory of 2892	4680	msedge.exe	103
PID 4680 wrote to memory of 1748	4680	msedge.exe	106
PID 4680 wrote to memory of 5580	4680	msedge.exe	121
PID 4680 wrote to memory of 2328	4680	msedge.exe	122
PID 4680 wrote to memory of 5144	4680	msedge.exe	123
PID 4680 wrote to memory of 5792	4680	msedge.exe	126
PID 4680 wrote to memory of 5788	4680	msedge.exe	125
PID 4680 wrote to memory of 5788	4680	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/roluau/DLLDecompile/blob/main/dlldecompile.luau
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x294,0x7ffd9d7fc188,0x7ffd9d7fc194,0x7ffd9d7fc1a0
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,6635307983723477961,10145260635070258956,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,15919906419603932824,11852470811239959435,262144 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,5828530616400634345,14754665813181816970,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,1743792629772236444,14073867063157178489,2097152 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,7066277138391288331,4295772787909516450,2097152 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,17658545774211315465,16021900299848419781,2097152 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,17402229158284140920,3756867949119970187,2097152 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:2
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3528,i,6550923183445910520,8518477814491597562,2097152 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,8701408915552813495,6600066951056404604,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,14003198733774418377,5812461885968541568,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,4199177685595294224,10735612351792019957,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6240,i,14322300097887800450,3508541815509401487,2097152 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6500,i,5312286018835316357,15101819924452435503,2097152 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7436,i,17084932434712605453,4748629496629150883,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=7452 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7436,i,17084932434712605453,4748629496629150883,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=7452 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,3590679180040386382,3821954062472745494,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7076,i,77253560217889082,4237716681762640839,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7088,i,285224668214898953,15749284793912430867,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=7372 /prefetch:8
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2880,i,6906825306653957923,10844355574016763585,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,4905872549174149745,3863750501163278377,524288 --field-trial-handle=2292,i,13087673495735633742,277383791666498004,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5792

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 758df8d3fcc8153add0884f31eebee2a2577adda6817b51a21944c2f22794229
MD5 dfe64ea383e58df01fbdd8c6865b3a83
SHA1 64d0ff086bd183d34c0b6b57979d47d1fe496dd7
SHA512 524a90cba89216a298c0432d24ac36c2e9c4be3586290c83a8e424408da052cee2b563929aeda73dc89ea7e7dbb596e97fee811e69b8a48e16ebaa5a39d7063e
TLSH
T1BFD0A73076696C96D538147194314701BEA58556219A96066144840D5C796C2B68A5A2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 67KB
SHA256 960e7baf8bbba1197cd9aef093148b65cb2a6402dab34683c78e27b9650afe34
MD5 3c35fab00df625d1ee5da7d87cf9d042
SHA1 ff2c71ae25a5a6c74d49b7048bfa89e2b4cffaf0
SHA512 cd68c44d2df728d2c63e81bb1a6faf4dd181f62b7147faa3b2fff3a499d2a5e0c779c885f959606f0dc8e7eca99e20028d10bd316232c289d77d21d5bcfefa84
SSDEEP 768:HZcM10gssesnsAqsrQpz2tbfQDbCdTkhcwXk3mvIydcKTOl6uIBwxhY1i8vZANVl:5p0gnDn1JspOtocwXZIydcpeYhgZoD
TLSH
T1F4631241E20472F3E65C995D3B7B40314291ADB9F8D8DDE878F00AF906EA9DD19C4289
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 402KB
SHA256 69b79e465023575e6e6f093be9ba6f85c363ce90a280acd3c7b2c7d6f204f965
MD5 98c6491208eeb296df8b58318f15eab7
SHA1 93994960c8dbcf9e8d450594e6906ea4e6291f87
SHA512 8e1b8698d6bda7974475a6e04de6df8b99f982cf7818b24f6992d4269031b86b06289130f55e9850652dcb439aecfb7f7a3dcc3a3524994f83d52a3feeac232a
SSDEEP 6144:8wZ9mCDGBf/QBXfmnr936pXTH1A4nnOIithRTP1UEHdxsNTV0GU7iE:BHmCDUf/QBPahKZp/nXi7fvd+OGUT
TLSH
T12D942349776709F0486975AB0BDC93EBFCA1934246F43D9C32E647C949603CE206FB6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 49c007c3a9d3f95dac1e5ff41559d8e3a1f5612cf2ed6a9866173372baa629a3
MD5 9a8069286ef3dc3844bdc92bd9e3643a
SHA1 ba4f7eed036c33a8ae4fd32aafbc6596a0de24c6
SHA512 76504b5cee2118178068436ffe0e9b5677dca1eb546fa499cf48e2913597409b1a365be5ee059120a17078fcee5f0aaa48a25299b95464edcb3f4c71769231fd
SSDEEP 192:GwqiYVHQt/SU1x++peB/EUg2k38pvGxDOgIboNvlj8CWMLJ+lSFp:dqiYxMx++kqUIYUS4L7
TLSH
T1933210D181A0064ACF62627EF0F17AC438F831BE4D536E464B4255BCD57F3DA8892F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe590788.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590788.TMP
Size 3KB
SHA256 8ae4abf669e125b3223e0aa3bd1275b86129a29591227ed715759f3d82a15620
MD5 5b891292b31852c619274e3ca49827b7
SHA1 6eed298c48f5dc96a28f508225050e3c3fd8c588
SHA512 720ca414ff7573efc05dceb16de76670f2ccbb9cc1a4ef8659986aa72a7b35b611090a06595ab77759ae38eecfef423ec0f61a0c574eac17c23ed62753280a17
TLSH
T15061D7C506820541E7711173C6F01AC936B1B0E1CE378EC5D286987E9ABB732CD2BB4C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 626903f1d2770598b3bf456d877b1629baf38f7e08935088f2049dd7ea954a99
MD5 c236c4e01156dc07482fdebe59c8d2fa
SHA1 8274fce25f4ebf11d5ab9cdd2b91cf9e782a401a
SHA512 a536e9736baef09d7324b6638145865acaf85cb44917c30973fddafe2da6d0c8ba11f676fbeefc3d28f4423bae3eab139408127ec39e1b06e1387b231d2a1283
SSDEEP 192:DKxL9imFqIF+DNkQcZjMqmtmBmrHjGuXn9c75TrTkSUjthAXPfH9HsmdQTmzmH:DKxL9imFjA5kQcZjMqmtmBmrHjGuXn9L
TLSH
T161F16CF383E5866DEA1256F0AA04AE1BCF580521435C386A85E4BF57E3F3971E101B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 545f9b6219400dabf92f58ef8459ef7506c8d81f833c0f79ec1668d376554fd5
MD5 07da009ca1420b0823f2183a59fd0ced
SHA1 599609912a57535fd6f821fdcc7eef8fec54413e
SHA512 33b1fa83c25d3d83a72b0488021f32d09fab4285465b657e574376b2afe2d5b80117a1de59565f954981d7f368273db47cdea0d65b7408f278cb632d8a676877
SSDEEP 192:sxZLQUn0RiyM/jK1Ml8Mkf/fmsch53CH/bZX7dpmEeBHW6+WNDKBuqMDDZ2/YwJx:sxZfn0IMf/fmsch53CFn+Hb3ts/Xr9
TLSH
T14D62F9126A34597BDCEBD219F9127B93D6F81162D6904E44EAFC9A0C04F2EDD2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a9a7b8e764a44fe2d13fbd33449634229d5837cdf601b578ba36e71e1f2bd041
MD5 974bb8529d5202fee29ef498634af7d5
SHA1 d9ca131d884ca6b0d17ce4946039e0d52af15c8d
SHA512 e917aa697edcc58fc6dad6de7d679aec2bc4b9b2e755b730fe6da34d08c71ea0f49c3601261f00b30a45e4957ac63240aa9d876e623704bc5eb13bcd9f647f9c
SSDEEP 192:sxZLQUnXRiyM/jK1Ml8Mkf/fmslh53Ci/bZXddp9yEeLHW6+WNDKBuqMDDZ2/YwA:sxZfnXIMf/fmslh53C8hiHb3ts/jry
TLSH
T1BD72F9126A34597BDCEBC219F901BBA3D6F41162D6904E44EAFCDA0C05F6BDD2203C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 d08017abb755b17a9a77cb1cfd71bacaf92a32a03740eba77813ca593214e607
MD5 881bba801c93f291b5c42c96eb37fb7a
SHA1 aa7b6e8d40c15a09c8d7cc30f70f9220c8e15c32
SHA512 6a9228c3de2f299a3fc0adb0bb221c3b6642bdb731926ab1bd78471430cd75faaa13a599cb115e737aeedf3437d3f577f6a011fb86abe795e6d9b8d22797303d
SSDEEP 384:sxZfnXfMf/fmslh5iCkr5dNcZPHb3tJXzrw:sHXkf/f/hECkr5diNHbvzk
TLSH
T15D72D8126634597BDCEBD215F901BB93E6F91162D6904E44EAFCDE0C04F6BDD221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 a71fac3c8ee2911692633f7f9f9f279e7eebe642c0feb82a339af8ece5e943e7
MD5 03884795edcdab7704140919c6debe20
SHA1 e5a11b3e1d69112684d8af0dc10ffb72e10a8ca5
SHA512 f6ed5ecbe996ecbd13206244ee63481a7afffc015f8a6baf9b666fd3c1043320a83dc675b60ef2196bed060c51f14a8acc293ee2137aa9c1e38c84442c77bc69
SSDEEP 384:sxZfnXfMf/fmslh5iCEr5dNcZ6HbrVpZQrB:sHXkf/f/hECEr5diwHb1Ql
TLSH
T1C082E8126634197BDDE7D219F912BB93D6F91022D6904E44EBFC9E0C05F6BED221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bdbc01f8f2c0e73bbd5116fe32e3f7c72794e010dad0f96bccd88097298c7003
MD5 71a66d1d377e00ad1562ea3d55d614a6
SHA1 f73975c862ed9653e8c81bca46b9e2b8870bdced
SHA512 2ffac191fcfe15be39378aa90cac67d9c8ee3cbedeeb9f87a0f819eb243f776cb0a4e7e0930949ebc549be0d856e086c5a37b64fbe81dfc4dcb5fe0862aa5943
SSDEEP 768:B+4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dKrohncaam:B+4jeXmWvmKLEu1jacPLZQdhu4
TLSH
T10CD20A3B284CCF7E4F844E5CEC2AAE976ED801CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 1KB
SHA256 d605c2330ec1c18e281125c5f74df1f43964c2762d055b4e05bc3639c8f24cee
MD5 9167791397faa822886cb1e33d3ae66e
SHA1 ecea4eea414515d3e30ea854061d0650c95f6afc
SHA512 e14421821c5e3dfaa12ce6cd6c55798a7e20db7ad1d7530094974a63fba11a5ab55293cfc4d5df0631caa983aa6e4872d44cfcb76768b45f6602f60ece5f30e7
TLSH
T1CA31934E8E84DD9FE46844B314B7B8F833308ACC5724E7239C2C62313E2675A1A5B1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 2KB
SHA256 1b63e8198b6f75c360fa1c2875bb307e8e01b602db21419cd3b6de9c8af89856
MD5 362e45ac96526fb97816c39ca87713de
SHA1 51aa79e6d35d939ddbba46d713ad5d125b21b867
SHA512 cb25b423f1e611d6b851cae5a820e8629282c2c3215d35b16e44b53df8096503e27ca028f27958755efa28813834ef7fce335819756f648dcdeb4ef622dab144
TLSH
T1AB51A74F4DCA18AECD3C007369F7199437396CEE26498E0B656C91346CDB3282E15158
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584532.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index~RFe584532.TMP
Size 1KB
SHA256 751a84003ef66854ea11e5d6c1bbaa8e3a9bd39efdca625fb4e747cbcc8bdf9d
MD5 6ba6df58771c93d29775b9d833fcdaba
SHA1 33d560e3680ad7bb37e3893e4d8edbeb07563063
SHA512 d6d29009d65c7d2d9a2c5f28786afc708da0f4c3ee60247b92f19c75c319f9f7300219c721eff5cc678509b157a1929df0c833fe4c23f05ec2feedf495fda71b
TLSH
T1F631464B4A80891BF4C450771DA7B4BC7335C8408321B793997C6239AD35B9E1E5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 c2a694be88b323b6b8550c5f58a7db7e3a9d3965969a5a8fe7d96404e2302b99
MD5 1685b1c0877547d84914f1ebe29ca868
SHA1 b40e5a4910d4c988b7161e3d573d0b4a0fcf3031
SHA512 f56aa23bea2523972e78f57de3547024a9e3adbb875c622faf2ea7918b4fd19d3ca1c6b77629813d52c80605f845cb41982d518c70c7da1e5f585978cd130a68
TLSH
T174A0025422943501C14297F625D70571726149A10645533651EC104CC8D4746494240C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 6c9374ed5482f14097dc0865fb7a006b4fbceebe3b71a0794fa2d6e6bf2f53ff
MD5 200f70b7b3442995afc5aa38a872de23
SHA1 5069546e4ac4a2dfb94819093c19c437ec10092c
SHA512 5f3fa8fdb486f2ec6e89c4841d06f3c1f96f7f0c630857800c6270c2157d977652e3c83817efe6120b7cf1aeca6ee937d37081b6f1933925ffd83367785eed87
TLSH
T11EA00211ABD48006C11311B1555303421715CDD12145131740E20149DD614418D8200C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 fc59311f365af4be77cd8f3460e621577d90a009cc6e4c26dab1b4fe1e12ced4
MD5 990d80a8b67b776342dd8944a2701981
SHA1 d04c94584964d736968bae6e0ed69051259de2d6
SHA512 577d0bc4783934dc975bddcd1ddadf7bd094ed1108fa27b809b11bf84ae9c4f40b2693a2360c5708ad20355e02773064cbdf14172e26a1cd159dc8eb8429ac4c
TLSH
T1EEE068F63DE73D20AC7F57E228B244A44006B4288550EC8E2016A2E751B03682016C30
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 2f01200340ee4f3c21542b9c7501ec74b4db6124774f91b2b5fc2e3a9c2c9125
MD5 ddb1fa2bb43c1b746f86665bdd11360a
SHA1 86f7ff96bcada27f160001e44c48a76076a8bc31
SHA512 64f76fb9905bc31356eee32d67a6ff0aa526f85bffdf781b81d2867951ec6cff84c6ecf67bb2c657487003c5d74dfb6fcd940a49e241a78ab33b549dedfd1a80
TLSH
T116A0025989A5E056D0811778B0F1059476D0CCDC060D63B2C9AD4858885C35151F760C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5899ab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5899ab.TMP
Size 48B
SHA256 cf5514efbb20a126d653820780636912a9a04565673ac7cbc76f629d4af70c63
MD5 d821fa0de13e979c88208ef058328723
SHA1 1f9f1f6c3ab995ffe7ca57757fb858865b318d17
SHA512 6b11a1903183ae0d7646c02d875ae66aa309d72b5aea9e5bc656a08a05cabdd46006b3abdcfa4caa150b4d533a45be9c140dc4d77b772edad005320bfd50a65a
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ec6ef116acabdb67e95be278152a639ee77fed56ddb0b1d2d2208b5cd834bd98
MD5 f96d65b2aa24ef6c379b35100a57efa1
SHA1 ddf873c23179357501bed070602e338c2f56e1fb
SHA512 9f506a8eb8da60bb645bd3cbabc9db0047f5b26457dc3529b25ca2d65aad2634076cd8cfd087734c7c8145beb76dc115d6fca7247cc021c67e2e60fd2a08c8c2
SSDEEP 96:KIdKKmIyaWEKvqg0QKBuSNSDWC0gc0cAF/mK0Kexmc0Kt:wR/o7NSDWC0gcJAFOKuxmcZt
TLSH
T159A1630172FB02027D7D36289164876796927563300CA82B7BFC11724FABE225DFDADD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 83963cb7e78da39a0c9bfa7bf43d6d546f9589b151626219f2a8d9cafc83c01c
MD5 061740ad2762275649249162099690a9
SHA1 3c4843fc76d2923405c76cbded00e6e1ce138724
SHA512 da6da4bdd1535def7919b888f028de980ce3270a566ba3fa89b526c6d5f3d674f252ce196d9bdd6d4ed823a9d567972e6ae0b8e38e3cfc5f2cf0ffe43762c8a8
SSDEEP 384:fsN8UET1KzsbRTOAi2f+c8sJ8Xl+2KF9sAG:fh+2im72ll8Cx
TLSH
T125422A35A865AC375CE2E645F44B32238EE85167DBC97F90E7FD5B0C01DA6AC2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f7d8c8ba4f51f5f24f202a7d789ab6c4bc4c7ba70020a3d813485fe7c9de34e9
MD5 9624b8952e5ec5ffb183cceed4260748
SHA1 7b097631d23be4866225e43ba91653a16e75f7b4
SHA512 a1793dc7c96a89970f37f4c96169befb0f4a4f99b97ba9a06d15f956033e09230900bb509888e3e82103e4f2fa96b65495378aced0bc6abf5d4d085a603b435d
SSDEEP 384:MtNn/s3n9SfsNDUzT1KzsbRTXHi2f+c8sJ8Xl+2KFF2OASwsuSXUHKqKkBXOObj9:Mj+9UEzcim72ll8FeS0KqtX29MF
TLSH
T1DBC26C71D8A55DE74481E5C9B546E5166EF8023B868D1A4CE3F8BB3D30DF9FC5322824
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6585fe09b5dcbc44be3d88c2d66cec6c00086c72d6fce6856f3471e3a69228ec
MD5 bd08b16c0070b3016050e77a32c070d8
SHA1 a70127c93a3a578972c7034fa7fe8f3240cc122c
SHA512 924c7cbce5caac4bf9c4e802157f0a42d1ca1cfe5855809c454947fae7a0f9ced76e8e956c4dd9e7ce8050b4bc9b259f6e4e03225e728e07bc21b56b9db7a5b2
SSDEEP 192:EONC6hZ0QmiUyq8pc/+jVKjzorDoJmt5wOZnUU6:EONC6oapu+c8sJmc2UU6
TLSH
T12102D835A8686C778EF2AE45F48727235FD8112BEA956F84D6F81B1D00D779C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9052f0b763191b7e6307511fb0c1e43f0fe8349d2c10d28e228d9cc0d752e076
MD5 b75cdf4e2006ebbba8bd92ae8035efd2
SHA1 1614290acb24b53a69de0d64894769f3c4c02698
SHA512 62908d3084a3edf7a8a8e36ca9067a0b0137f293e3b2e5cca5ef0ee2ec72d5fec8719855be5745ef89e43bfff9daaed688b8a6ca2396997419e57c7d75c2a960
SSDEEP 384:ntNn/s3n9SfsN8UzT1KzsbRTOli2f+c8sJ8Xl+2KF9sOObjI9G6w7TUw:nj+9Uhzvim72ll8C29MF
TLSH
T123928E326C69AC375CD3D655F44B36278FF8516B97C62F84E2ECAF0C01DAAAC1316825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 854c8e5a11d3003b024dd84079533d519c213c843c055de61293d40e9b72d483
MD5 5b2eff202ddfc7cff33d593107e985ef
SHA1 4db0f08233da3ee16fe2f00611cdf1acefcd74f9
SHA512 1fd4517d1a9232393b1e452155a85acd4cd07c33a3c9cc827176b9a486fcd8b2f2f96ef645db6e6e2e7968860448075b509186fe0d5988069812a46f8590aa5f
SSDEEP 384:UtNn/s3n9SfsN8UzT1KzsbRTOli2f+c8sJ8Xl+2KF9sOObjI9G6w7TUw:Uj+9Uhzvim72ll8C29MF
TLSH
T1F1928E326C25AC375CE3D655F44B36278FE8516B97C62F84E2EC9F0C01DAAAC1316825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 eb6677bfc6ee274efcda5f0eddf2d1d9fe079bd2db162b4eee8f9bd12d838f09
MD5 0b1716ab4d150589c8f76a24b9b12718
SHA1 aa656f7077f1949964ec5b947323b661c44e6648
SHA512 d46fe3e08f9f45c1b56250cf2319298c8a014702524545267346cb6bfd34ffd48c8c4d65a9085b156a1bc4661ab39d7a66e6abd32b608d8aa751549068157717
SSDEEP 192:zONgh6hZWQmiUyy78bc/+jVKjzorDoJ8Xl+265cOqWqZsU6:zONgh623gbu+c8sJ8Xl+2V99sU6
TLSH
T11012FB366868AC675DE2A551F48732138EE85127EEC5BF94D7FC1B1C00DB6AC234B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 da9c5aceb33059908c9e4a0a2c7903664fcfd354f8c38a97e3094e171a283336
MD5 e42269bd90cf2993bee6e99bd1ca9c1b
SHA1 b31542cda846021c10c50a3f67f63f1c0cef00a2
SHA512 b9773c6de3d4d3e270c72452d4e5bfdc86bb9e823d542ced7a9858d0591708bff44cc9d788490290a39d7cb46f4209dcf6f67ddc2bc0fd3bb5bd35b2c36cb6ae
TLSH
T106E001465101023FD03C437054831F342EF1801167F352485B39016C8D773003B32BC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58f18f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58f18f.TMP
Size 392B
SHA256 3b94b640c66f855acb859191c9cb56ce2ed419239d75b7ff2756fa10bca9b5ac
MD5 4c844531f327ff8c4ccc72d7c7ff14a9
SHA1 8ee0e985543f227bcc9e59e8b15b33b9046051ab
SHA512 a43d675b3b5aa51f0b6e3354e15cd3eb75ecc9ac09a6bed851ef82788139c5705a7d245685a11f506bbad251899f11370883a2fefc807092999b972675fe9b2a
TLSH
T15FE002465101023EC03C437054831E302AE1801167F25208572901584D673003732FC1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 71576dbfdd1517e601a54b2d050acbc97a5dde0acb9fe2a83cde89f1ae3d59b4
MD5 79a31a3035848f1d0c7c732a4bbb4739
SHA1 d03fe41be6fbd958359e63ff8e37b36d9a62b88e
SHA512 f49b9e06b816b967c41c3d5f91d4b346c62be1ea9a63c7d60add20e8f20d4cf6f404c092599b3e97a75064f64343e2f42d9a1c97854b13d63372bc4bb8be0f12
SSDEEP 3:MsEllllkEthXllkl2zEkliIlll:/M/xT02zniI/l
TLSH
T1E54404057FD00405C50010354111C7D013F1F51007117747347104335DCD5410C04000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97e6632f-003b-45d1-8a88-a5b8cb4259d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\97e6632f-003b-45d1-8a88-a5b8cb4259d5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5c5e1e6bead5c40a5bd07ff881c59a1a3d3b2133f56bbd961f5398a5c6200e98
MD5 5b7cf04bcf94cc5604ff5b7bc26d21dd
SHA1 745ad27d1ee6dc8ced72e68d3a03cccfb1e0026e
SHA512 8f3d45e092d90efbae0321b6b7260130681205b9cc7a4f6a97b059a51c707e7e6fafccea12058fa44e9178316f387f4fbf6ced93f196735bfb0d814676ae87bf
TLSH
T14C412C58BAE91118B3B77E16AFF6696D447B79772E0BD49E10110D4F0A22B40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads