hxxps://github[.]com/Avaluate/MultipleRobloxInstances

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 04:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/Avaluate/MultipleRobloxInstances
Sample260730-elvgtabd57

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
37	raw.githubusercontent.com
40	raw.githubusercontent.com
42	raw.githubusercontent.com
165	api.gofile.io
166	api.gofile.io
168	api.gofile.io
36	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4648	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298577459679406"	msedge.exe

Modifies registry class 58 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616193"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{63FDA194-035A-4F81-816F-904E7365ED3F}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe100000004fe594f939e3dc01a4fb89e544e3dc0131282b5cd81fdd0114000000	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5184	msedge.exe
5184	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5956	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5956	msedge.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 3908 wrote to memory of 2140	3908	msedge.exe	86
PID 3908 wrote to memory of 4136	3908	msedge.exe	87
PID 3908 wrote to memory of 4648	3908	msedge.exe	88
PID 3908 wrote to memory of 4136	3908	msedge.exe	87
PID 3908 wrote to memory of 4136	3908	msedge.exe	87
PID 3908 wrote to memory of 4816	3908	msedge.exe	89
PID 3908 wrote to memory of 4816	3908	msedge.exe	89
PID 3908 wrote to memory of 4364	3908	msedge.exe	90
PID 3908 wrote to memory of 4364	3908	msedge.exe	90
PID 3908 wrote to memory of 4364	3908	msedge.exe	90
PID 3908 wrote to memory of 2948	3908	msedge.exe	91
PID 3908 wrote to memory of 2948	3908	msedge.exe	91
PID 3908 wrote to memory of 2948	3908	msedge.exe	91
PID 3908 wrote to memory of 1340	3908	msedge.exe	92
PID 3908 wrote to memory of 1340	3908	msedge.exe	92
PID 3908 wrote to memory of 1340	3908	msedge.exe	92
PID 3908 wrote to memory of 1988	3908	msedge.exe	93
PID 3908 wrote to memory of 1988	3908	msedge.exe	93
PID 3908 wrote to memory of 1988	3908	msedge.exe	93
PID 3908 wrote to memory of 4516	3908	msedge.exe	99
PID 3908 wrote to memory of 4516	3908	msedge.exe	99
PID 3908 wrote to memory of 2536	3908	msedge.exe	98
PID 3908 wrote to memory of 2536	3908	msedge.exe	98
PID 3908 wrote to memory of 936	3908	msedge.exe	101
PID 3908 wrote to memory of 4644	3908	msedge.exe	112
PID 3908 wrote to memory of 4644	3908	msedge.exe	112
PID 3908 wrote to memory of 4792	3908	msedge.exe	111
PID 3908 wrote to memory of 4644	3908	msedge.exe	112
PID 3908 wrote to memory of 4792	3908	msedge.exe	111
PID 3908 wrote to memory of 4144	3908	msedge.exe	113
PID 3908 wrote to memory of 2304	3908	msedge.exe	114
PID 3908 wrote to memory of 404	3908	msedge.exe	115
PID 3908 wrote to memory of 4264	3908	msedge.exe	116
PID 3908 wrote to memory of 1416	3908	msedge.exe	117
PID 3908 wrote to memory of 1416	3908	msedge.exe	117
PID 3908 wrote to memory of 5476	3908	msedge.exe	119
PID 3908 wrote to memory of 5476	3908	msedge.exe	119
PID 3908 wrote to memory of 5476	3908	msedge.exe	119
PID 3908 wrote to memory of 6116	3908	msedge.exe	120
PID 3908 wrote to memory of 6116	3908	msedge.exe	120
PID 3908 wrote to memory of 6116	3908	msedge.exe	120
PID 3908 wrote to memory of 3332	3908	msedge.exe	121
PID 3908 wrote to memory of 3332	3908	msedge.exe	121
PID 3908 wrote to memory of 3332	3908	msedge.exe	121
PID 3908 wrote to memory of 4632	3908	msedge.exe	122
PID 3908 wrote to memory of 4632	3908	msedge.exe	122
PID 3908 wrote to memory of 4632	3908	msedge.exe	122
PID 3908 wrote to memory of 5788	3908	msedge.exe	123
PID 3908 wrote to memory of 5788	3908	msedge.exe	123
PID 3908 wrote to memory of 5956	3908	msedge.exe	124
PID 3908 wrote to memory of 5272	3908	msedge.exe	126
PID 3908 wrote to memory of 5272	3908	msedge.exe	126
PID 3908 wrote to memory of 5272	3908	msedge.exe	126
PID 3908 wrote to memory of 5184	3908	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Avaluate/MultipleRobloxInstances
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2e8,0x7ff88f74c188,0x7ff88f74c194,0x7ff88f74c1a0
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,16004307988921614529,17189133536918879862,262144 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,1163526918265070623,15069934164752889574,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=3048 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,6216737114382434710,10285334954202874099,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,10830272299221441505,6569833240046518434,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,14775041426402123475,11759509249000837426,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,1809543148443374622,2722475598726020905,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,16363228886205546263,4837459654478159720,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,6857028919646952525,6067501145052129987,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4912,i,2506461452215213432,1960595831287897251,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,5396143682965345485,6010835799115012287,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,5396143682965345485,6010835799115012287,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,9926391213950380701,14954971167884667359,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4528,i,17708140442621901265,8575280923841773815,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,8403205059098333161,2478361747569161689,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,13295074400412656215,15281501310393735494,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,6811495237685199978,7401472844100773175,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6708,i,1485850917480280777,7314231302316416775,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6988,i,16075144284781017444,14424410705318257347,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6600,i,15781474568243819481,12758486535909561423,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5928,i,3589601190172840077,18084412952235114803,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6972,i,13871419440888571304,17083268741412722424,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7152,i,9678669077291483272,17957148208799836337,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,6231049743160032990,17021430414084059862,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,9755779435325496895,13112697699085888927,524288 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4016,i,17269406276638753101,3034010500261370240,2097152 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5720,i,13769285746860743870,5534488214703206800,262144 --field-trial-handle=2312,i,13818601707431848840,14508884123727741869,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5184

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 42KB
SHA256 3ef639cb811d22764660fc39517971f4109ee97aa0a442228c70dfbf3df9529c
MD5 c6d1d82e03f1afbb5597ce9f4bdc7b81
SHA1 999b71de05e9ce8da9ca9fc2b894058cfdfe57b4
SHA512 11d46e5fffe07e20e290a75a2797a442c5cdc52273c423670dbeb0c50184729773c639471ea27192bb685b070eea734e72035828c9806767bd1cf0ef61eb2d5a
SSDEEP 768:PZP8ym3DbsmYp5DuvGKQPwKLvEzVm0jAYY9W4DZelgQjK9cV92F44U54rc:PZPybsmk5DuQPzLyVm0jXlgoKI92YSc
TLSH
T1F213E0A5AAD591421BB04162E55A3C52B2ECE73140E8C8F7B76CECEB20E5BC676E10C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 39KB
SHA256 4ee0e4d6dd551e2d790dc6c46ed070452d18fa49966f5e41d3a9812e8e4546ad
MD5 ea59a13f4d6a7b77761402802bf00e2c
SHA1 dc360da58b9dd91fedb96f449ebd8d3d9f9cc08d
SHA512 230297296cd866f672a992abdd5c4302b7cb9af928f0d7dcfd5adc8ec6fc8beea6bbc98e531eeefda32ffd43e2a3b54a1df44455f86597f548f0e41b45742ae9
SSDEEP 768:ycfPAZ5cmU3BL2Dy0hMWPCmRfoY+jatp9iUHLD5jhmkqaivqt4fTJpLu:ycfoZ5cmEQhMJjAFAD6KtM
TLSH
T18703F1068C6ECACA2D876F4C98CCFD574D1A6DC2D4B117A0E6170B8E0197B5FD253366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 17KB
SHA256 b6874019cc939c7e727e56bded1ded78213002b48136849a128d4ea90613c465
MD5 1b84863e9e8e249867b26553a39827a5
SHA1 40b0fd0a94362b1d013ff42dcf825439d962ecca
SHA512 39bbc043a3e5356e3f36bbbe62035f424b9f889620bacdac2abb6e6c50c689b1474f652fc50b526de680271fd958591aeda2ffe05578e4b8c7919621d7d48a1d
SSDEEP 384:BGAW3o9l7StLb1W2p4UuFzKgy4IqiZtizz9GWaE+FD:BGpc2pG8Fqk4gWaEc
TLSH
T10782E0351411653AA3918E437A540F84ECF6FE9E4B363EA530E6B7E2F80F3B06455064
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 25KB
SHA256 bb19bd6a57f9aeba8015cd81334d7a61c38ead88c0d6bedc85676d1bcedfba82
MD5 40259506a90570ca9bc3c40e68649cba
SHA1 a37fa17d5219e66dbd4a0b5b5f10a20fcdaf8459
SHA512 a8e8faf18cef26e79f62f774919af110fb244e5f9b333b2d3ed6c65073e42310a3360717e88a227fd844ea257f0b51ad59c16e3b3438cab1e98ae9905f9e130d
SSDEEP 768:NSIqCeeNuonNJVZOGCXmJM5z9T/fdGccPcNY8wcwEcjF:NfqHwxnNvZOLWJ6z9JDcUi8wcwEGF
TLSH
T161C2E179332D14369E2CC111928535AA1FCC361EDA73BEDD4C1C4077FBC6267A696427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 20KB
SHA256 6c4e20fe54f9393f4f4bbee2728a92c589a7e03a9a35efd339e655bd57fe0f38
MD5 cef4362e9d0f99fd7d5b3a4004d5be0d
SHA1 3eeb039ea5f19100cb4d31a66209224323ddcb8c
SHA512 5711369069937ca8f3d80466ccc15f3400873194b1f7b6a1c5ad3399af0899449a151481110a5b47f06f8f664f1a4ba8d52baf4a9e575f3a268b42d7f9205370
SSDEEP 384:PsPUn5zuORx4kuF/+HTzTM4KNF+CGiW0PyFFQ7c30rdJXdMPLCkH:kPs5COgF/+zzTM4K/+CswUO7c30rdoPp
TLSH
T1AF92E1AF99C35940C2F4B9C0D99E22D4FB5D6044C624F56CAA81D4E6ADC2C6BBF47F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000aa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
Size 67KB
SHA256 5e9ddd849c267cf191b2db00f575728d4b086f3b4fe31417a455bf0f4816514b
MD5 088ec17d4fa0e1202159915b03be22a7
SHA1 382daed964422de3fd5b9868d05253fd3ed4ffad
SHA512 c09cec454c2ed9330ae55066e690a1a017b3e401875a01df398872a7077ef7dd76b81cb9a5bd8d65e49b6170013f977a348e8b15467a9c96e1dda3dd949a030d
SSDEEP 1536:pAtMV9QuLlHIH7W6u5giUEJ/hnyydpMPoIShQg2WnFIZ3:pAmV9zZr6u5dJ/oydpMPonB2WSZ3
TLSH
T1666302B5D4F9178620352C8EA4F6907428EBA7F47950E9F050C4DF488DD8A7BAC08BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 405KB
SHA256 1b60a6c04cc80fa726e3c5026255272c3b75303cc1666700305b3f9acf8b2226
MD5 e6b338d0fcf0d823a1874c7606dc62dc
SHA1 501f5d87f43ac13f1545286e3fde99eb15c5c5a7
SHA512 5cb49ce345babefaa0b4070245244a8cf2611000c2fd124532f43c764022177192f62a14090d3b5945544449788612326e215446cbe5f1830c4309720cedeec9
SSDEEP 12288:Ph3qrs26+46/k68I6l0X7+uHw8AVTQPUg2tQVy:PhqrL6+vkzI6yIVkY
TLSH
T16894237C930EA8852F3F559A617D2C8A1884F8F5CFD95E81BDE3E7E150A0D090B5B328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 27KB
SHA256 4055c08923c81d63735c1691baa778c332bf680b8c4eb057d7b87e2c00c5578d
MD5 aa6a30350189be311d6f87b7d145d85b
SHA1 79d0105a90db8fe73876d31dc4f54bb9a194002a
SHA512 3563cdd2399d4ffe7f76a2b252800e2b767f7fc776fe1faf1bd385cc41ff9305c7a5367a2d28d6bcb46b9202461c23b86ad6f1f3cec2cf51ffbd181000651037
SSDEEP 768:Y+8X/NT0ZezFy6uLGsyvi7ssXAS39YGiE1TJnhC:Y/ZexL0o5X2k1Tds
TLSH
T1ACD2F104AD3D7AA06468E3D332713166FDA696A10B7702D2C615E625B3983F42BCBCE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 78KB
SHA256 372140d055fe4434b65daf2fa2e6a903918f7ebd5c79b058e8272878b397b35f
MD5 6c95f9c283fb402cb287379d5efd90cb
SHA1 e3f129bb595d45e732f14bd031607984cbac31f2
SHA512 15613cea5a463ca70483a0bb1c9a1c7c6c09f2a35c3a96d34ed14f35457eda904b3643f84bf9547b5877a0a852f292c7e91a5079737cbb223f6a91019de13dfc
SSDEEP 1536:Cyop/ADwXZR9NSqrdcgTyt9QaLKEo9mOBghhbj+p84vpbQOJdF:4p/DZRTSgdcgTy3QaLKEo9dK/W86p/F
TLSH
T16E7302F77B364E112AFDFB653448C269D3C0BA859B39194E62C4D1F240AFD36ACA1874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 16KB
SHA256 5dd1c64a38698ff8aeff573794977443121235af418dd9d2c79a5314189da2aa
MD5 0831783dce7c9f7ae3d19fd7ccad5d46
SHA1 c7f7075a6292462d90154ac8caf8478be15c0f97
SHA512 59f84adfb930ab067495343b59be6767569ffc0279f05465c0a622f6e59212175ca1195e64b7c29a88d1a40bd0c56fd735c7ceec28ed9c897fdeaa11250a8820
SSDEEP 384:velXJoyRu2nLAIAboKufdRAq1+91p2ky36j3NYmG:mKyRf8xbbu1RzMzFy36hYj
TLSH
T14172D0D6272DAA9772F5F44D20AF2A9B12805733DB98843350771A366BC64FCC9607E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 60KB
SHA256 09942f492f93e5748a18748a9d5703c1d9fb2371e88bc2a01fa7779650dc40dc
MD5 bdb48354eacf1843569fdf0898e71667
SHA1 c0090b0822e5bf07180d4366700316f8de682397
SHA512 49eef2ef2dbce4b0af131555846b2f3e5180e25f1b4fd2f8cfea9d103811e6b954d1209b70ce85fcbf88eabb48399e6240a1db02544d056ae55a22b10a5f0bd4
SSDEEP 1536:l6QKCA9YwCpxAMmNB56jI+BCDMv7FoRRQOYLG/:l6QcYjaFN+8uCIDFw2K/
TLSH
T104530213EE0C472D26E597594723CF026AFD0456AF0AF40D6F8BDEF0A2686C5A35E834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 b8657267c5ebfd9f9e054dfe82986c4f24221f7b7368fe7f1479bfa90906e1c9
MD5 d95dda1328dd81cff601208d6386f8e6
SHA1 b7a295c3a0d15077ecf550a159ed28285e0a5abb
SHA512 a601d6dcc269734fe1c907ef43bf33312177e16b62931b22241d9a90bff20435a9dc9158e886cd253f9e6ceb02753d537563c9bcb267a8993528cf6d8a0833f8
SSDEEP 96:M13Ka/d3D8x472GeIFMvynRNpnBgPDnPK+:a7/d3D2GV7nfpnqDC+
TLSH
T19BC19174C1A152E1D740313ED0E26E413A374DEF4AA7CFEA11EB9BFDE625BA1482D008
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 3bf6ef54fb6c2abf5008bee1711dbd98590ce915bacf90b8414b8a13e168790c
MD5 e91b0857db6f98e7639d9649b7de30bc
SHA1 b719b4fa4c1221450f90dfd092771572ffcceb7e
SHA512 086f8e32ee35cf3afc6c8b548c2d721f1202377a05ea11b5e585891527ccb8bbd44d95c435f61e387317b062efa6f934edfe2f37e209ee4418191d5e2195fafc
SSDEEP 384:9bQbetPf+PBzWjj7icsDUh3tXGjnx5pXaBmGZE:pQbIPf+PBCjjmcsY5G5pKBmSE
TLSH
T1EE52EB648C945EE0CB026034C9EF3F0439764ADEDAE3DFB6207A56FC952A7C5B85E406
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58ac58.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ac58.TMP
Size 3KB
SHA256 8a2cedd444b7cee22c3ecf551a920d6c8d93095d8055aef1be5a06c39c3de4f2
MD5 1ad620d7a89e3ca81c1722169ea1d3c2
SHA1 54426747bb251c0fd385f3f6c20e07419a85530e
SHA512 9655ff29317c18d8b92d3ffff7632c57aa8334cf283b7343160f5d74065600165fa28b1627c830cb28dff259ccfa822c6349f63bfdbea9235ce88b8877831eda
TLSH
T15E613A3402A113A1E3900572D0E36E0539738DD94EA7CF2E527FA7FDE635BA28C6E048
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 36c435455254f19e5fa5b77d9ce5b9fe764c01ab5af5191711961f226f54598a
MD5 5a0eb32d29acc7cabd6f77433c33c9d6
SHA1 5f4513d1f0eee874c410311a2a36f6953ffd5f5a
SHA512 8d77a686c2edea2a5a8b3c35eb1ff8948c1c794df62669b48e503a0512d03e937ac46bf15e8d92f7df3a5b10de60ee74267810e1a5a7a72a7027c6eb49cd5ba2
SSDEEP 96:DBBOmhdiSLPvxzBmD0mnBmtmjmDmMw4jSqmO+wBP+yX+dp5RttAjJGRVx:DOmhdjLPvx1mD0mBmtmjmDmMw4jSqmzd
TLSH
T118C1ADF783E6422DCA1256F0AA14AE1BCE1C0552836C3D6985E4AF0BE3F3871E141B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 f8d0aa201df603127ae8e7c6b426ec74546698da837f4014bdbd4c04bd3da580
MD5 340562fa198f7561fc3c63002ad0ba96
SHA1 a832a0a2d20ad78a1ba674d3a12fffdb5cff2c2e
SHA512 d4fa9f2bfdd52b362195eb756ca9e5b37673bf02f5ba8f573e6951a9a959c35f87dd48d3f4ff8446fc1dac2bb58b5cde34ff985cceb966054f9a5d699c48f339
SSDEEP 96:DBBOmhdiAzBmD0wBmnBmtmjmDmgAw41Vej/tjSP+yXBqmOZ:DOmhdN1mD0kmBmtmjmDmgAw41Vej/tjj
TLSH
T112919DF783F5456DDE1256F0AA04AE1BCE2C0512836C796985E0AE17E3F3871E141B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e7cc3ccfc7c54a515d2c04ec837fd038b279acd6ed110967e9c81aa201cc270b
MD5 37226f1eb7108cbc8c3b04bddc92dad3
SHA1 238dbd847086abb5a88f0df2dd64f146ef98cd1d
SHA512 563209293a5a5c9208884035b0192e4d9342f1aa75a2f85a313a735d765da6a70e5497436fe338e3ca222f0baa3508879299c80c09c0ef87f31b6268c33c60a1
SSDEEP 192:sxZtRRqyM/jK1Ml8MkZD/f5ss3zOWIdp9MxyHW6+WNY/Io/YwwV5GIgrJ:sxZTQM1/fqs3z42yHbWP/T9
TLSH
T1B252E8166B349977CCDBD209FA45BB53D6F50422E6905E44AAFCDA0C04E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 6f7a2fa87297298ca5ad8d94335446ae123d247f4e19f398c48b7940419e68ac
MD5 83a1cd93d1fd8766b0d4d1e1090d391c
SHA1 9af96fe3cf2538078dd968cf151635a4348f048f
SHA512 ba063b054ea2c5a684390d4ae86b6a3a2693a96adfa1775d209a02cc3316d454b1242d1e3d4ec2b6a8b9bbd428d4bab899627d4848b674312f0470da5f1bfd90
SSDEEP 192:sxZtRRqyM/jK1Ml8UQg9ZD/f5ssEuMWh8bDO7dpvhOIlpHW6+WNwGbZAUAGES+dA:sxZTQqW1/fqsEunS2fHbVAnl/j8
TLSH
T1ED72F95666345D7BCCEBD219F945BB53E6F80022DA945E44AAFCDA0C04F2BED231381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 af1ff5d6ad5eaf2070f35fc6e821925cba2a822a21d7f2457614195688e25c45
MD5 93628dca49582511c31d7cb7d64863ca
SHA1 9937f9e430b1162e588df3958956576d41f7f533
SHA512 57d94924a13808209e0fd3557492ae349f2986d2aa25020e85585c35cb1187169edf67e8b91f10f975e5ff6abc67769dad44e02ea32db6e38b9169398a038a02
SSDEEP 192:sxZtRRqyM/jK1Ml8M9ZD/f5ssEuxWIdp9MuHW6+WNYm9XYwwp5GIg50J:sxZTQ11/fqsEuR9HbDXV2
TLSH
T19152D7566B349A77CCDBD209BA45BB53D6F50422D2905E44AAFCDA0C05E6BED230381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3432c54a985410d1d25e2d23f2b6f588225c75ac3d48e0b99ade17b2b025e1f8
MD5 7f3fe48b12110482b9d2414ba89362a9
SHA1 28b3e8c87984deeb6641007a58a3bbb5aa2ab681
SHA512 c1e349b7c1eaa4d9450ddad2f64deaa79ccd8cf84f7ce42eb49fef981d6800daab0216d134632e64d4cac3f284d0aec5c5211d3032b82ea4611ba904f89aaab8
SSDEEP 768:3k4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dVrohTcWaW:3k4jeXmWvmKLEu1jacPLZQduis
TLSH
T1C6D20A3B244CCB7E4F844E5CED26AE972ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 2KB
SHA256 bb551d3716bf14c60a7f3c90cd6baea30077efafd11828e0e37900e41f36ceb2
MD5 5d0217b65e598df4aa83704bdc3d36de
SHA1 7060f89fed2a000e2063b0cc426bc44636bbc4db
SHA512 2608bf51be1e675c4cf246b775bdcffac86aacec9d3b348f29c5db7501313b20e61f766921f608be33a23478fe4acf6757dd7107d04717b83c750dfcdcc224a5
TLSH
T12A51DA4E4D467B67CD9C10B328F71886333134FF55848B17A59CA5747CC32252D6AA19
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 1KB
SHA256 ddf5a7f1f25b0443ea0aa70674c544263b8bd4725e875014da27bdfadb7aec9d
MD5 65e60fc908ee81d0cab6247956943193
SHA1 cbbee9d5180c200f749188be993f44eae5e813d2
SHA512 17ef1f89178494bdec8b615c6b343c0c66f1af8030e3a822bc7cd65688d78f46cae2767dcd1d205ae66315472cb485a76891d4ea0a22ebd9dd7c9353f165422e
TLSH
T1AB31634E8E819D9FF85445B615B7B8BC737089CC4711E3235C7C21726E1631A0A9B1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592495.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index~RFe592495.TMP
Size 1KB
SHA256 0ff362de3dc964da09d042c76dd334ea4c9aab2789bac7be4871cbcca70a1f21
MD5 408552bf016c28367c183272a7a8d48b
SHA1 0693e3682cd4418f9822103ea055320bf5b50c0d
SHA512 0fe782ffa14822521aa6238ab7c77143d33e411ddbef09ece750ccbc33b8421bdb86513c35a53754f03c1e1067aece6fdd32d9aa9f5b09ffd61c326e454ea6e6
TLSH
T14431864B4A808E1AF8C4507719A3B4BC7376C8408322B393987C2239AD31BAE1E4F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 de8f999cb89c7d578d8dca6233800a2881bb0025585dc526cc52b8a700790ebe
MD5 d414e02afde5f367faf58c4ad266e605
SHA1 a73f6e01c4e558cc2406efe8cea7b7c7c1c29eac
SHA512 5e3a609b0dcab3a16e34a4e40444a3502cb6f542e46b981f5424f06fbf065b478686563b356067a5d03727eed7757cfd79c490a4626e851eff09c67aeeeff29e
TLSH
T13BE068F62CD72E20ACBF47E228B204A44146B829C951AC8E2016B2E750A02282016C20
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 f7f8eea1001b4ca31be075b6cd80e40de45c993b16dee3d014c073b0c05dd824
MD5 373ae393c868293b29d193d975c3da3a
SHA1 0e09dfe1b1f11b9a7fc10022d9ffbbb4c859e943
SHA512 0be423029d2d6e3da5ecdd2ade4e13312a20cf11a12d9e970fdae08b1922ae79db34fbbb6b9089f819606e8a1321c7ec0dfcfc881eea90742dc0f927fb3682f5
TLSH
T1B3E068F63CE72E20AC7F47E228B204A84046B429C950BC8E2016A2E750A02282016C20
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 2b360daf6d9c28bb9443c946159c06d8d1a1de18dd68e84b96f67f379476bc37
MD5 5bc2b46681011bcc1666f92b737806b4
SHA1 f65f1566b7bd79a64cda69199faa64565e5537cc
SHA512 65a20b18e2d276ffa8ff6054c201eb8241b4dc18cd0528741f1b40e069fb48c66ab9977f28808ffe5ad480ae76a67fe922ce88268cc653cf025c9ae9bac28dae
TLSH
T102A00211CF5590C6C00012709AA212846A9988FC4705221542BC016D9956554C5E3804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e42c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e42c.TMP
Size 48B
SHA256 d4318e82412a09766a1ac54e687edc6853399a85bd1cbc422a394667e3943a12
MD5 a1bd9536f87bd7f04c3c994c7b644f29
SHA1 af6e0fd6f778193f84df483a42eb6e31ec849941
SHA512 1080cabe1c643d6a5904a6b8e4f7d612ef2c05ed7d6e66b4fdea7e814273ee05c89773be71cdd52e803834899f7084735c7e441533a9871be056f185e2d3e94b
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 37d45be9c5e0b7dc6f1834fd02edbb1511afd06b4224c92b0667ada341a0772d
MD5 f637bbbf616d54b590e253ded63e799e
SHA1 51e719cdcbeeed6b60a808519659b1055c47ddf2
SHA512 1c4d30de697be6bde69c274797258946ce87c90fb8d5c0aa19f6167c2d8125479743e25eaaa3fa5cb16658897d096e64911a93e37fafb3c8df7bb2a82c9013f9
SSDEEP 48:KAJIdKawQvy1bI1KYcgIHIxKs48LytfIlKM0oi:KAJWKaw62bGKYcHH6Ks4qOfGKM0p
TLSH
T1D1B13001717A0A412DBE650C97A4966B5692F163341CA83B7FEE04764F2BE22CCFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f43e91dd-fb5b-4ba5-a6c5-8d50ca90feeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f43e91dd-fb5b-4ba5-a6c5-8d50ca90feeb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e6d22ed3cf3799709029c265cb43753ef05ffbff663162ac036aea82d9d1a6aa
MD5 d35324e0a10cf4c2bffac927cbfaaaa3
SHA1 afa3ed3bf2d42f7d10c6360e547d8114dfc0f138
SHA512 87c676dd7ff8d4d39d6194f4d7ef069979f4a41d939bf7e8b3e9b9322f11c0e1a9b7489debc408c0ab3c1b0a13c293c025a7ca5efe536973b4f208e7e47e123a
SSDEEP 192:uw8LsNJOQwY6ZEiNmQmiU1VkK4H/+jVlO1TYSbFuSJrf5cFTGqDDiRk:NasNJONSrYVf+DO5YShxJrSFnDJ
TLSH
T18142183A6868AC375DE6A645F44736138FF84167DEC93F88D6DC7B0D00DA6AC134AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4b2bb14124f82f7770a1907bf0dc01e13ddcc11ba95fa52037cd4fca61f1c09d
MD5 13d239987ca41656d3fb962ec713c402
SHA1 4e0aa90abd2c455f56cc9086a278d7ccac36636a
SHA512 122a06532f782c6a093ccba22fe635ef47f3c1e29c32fad6e86217bd78140fe30f2ac8eb56b9ede13681c2689871dc1263e7d6a83aff5026602051f71e271b9c
SSDEEP 384:TYiFh8sNr8TUNTUlIlRTwSl1+2f+DO5YShxJrUFnDq:/F2uwgr+mWONThynO
TLSH
T1FEA2A3F648D78836D9AE5743B77E2D138EBCC057B9846A84B3C86A0CCC961BFD346815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9efc610fa01e6d08c86dc500c5b09ed59e45ad0b2fc913965c18ad9a82b00566
MD5 bdc8d115d6480ccb74aa8b59a6403f94
SHA1 46559fb39ac500e78a95291843260f01b9a2deb4
SHA512 82624739e1a7978f00a5a891d3aa34bcd56cc3d840f68a8eb0743c20e64cee289dd58efc8889b6e081d3c678beda152f12f782f4fd77c7567272ce9db704667e
SSDEEP 384:TYiFh8sNY8TUNTUlIlRTwSlS+2f+DO5YShxJreFnDq:/F2zwgQ+mWONThQnO
TLSH
T19BA2A4F648D78836D9AE5743B77E2D138EBCC057B9846A84B3C86A0CCC961BFD346815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a941ff5faac7f645258484d9df7fde9f5bcfb561210c2ee7ec635a6f5d6258c5
MD5 84142b34e65f6d23d46b08dbb064957e
SHA1 013856c4218244c334f8b8e5b6f282ed9d519831
SHA512 f316677c7c22d0972e430d9e77c177b30846a01eee6a25006f27b268d9a5f96a467433821e79cb34f28c387cbee74396c8d85b4c0ace2c80d2b56fb5190a60d4
SSDEEP 192:EONt6hZ0QmiUydtpc/+jVlO1TY55wOZ1nU6:EONt6ospu+DO5YA2hU6
TLSH
T1E002F9356C686CB78EE2AE45F48737235FE4112BED956F84D6E82B1D00C779C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 39f03003cda913477c1fb865e79bde931fc5023ba57a75e179081cb83a7df876
MD5 6f001a4824c96330a2bcf532007ca944
SHA1 5c5ed67ecd5c1ec1e210c7c2e9e74820912fca4e
SHA512 d32f5eaa51ca46d420ace7c2403ec5791c514541b37fdd29d31222f468356c96b2526d32b8b9f5d04f8cc69f7d3108d5b0957f84e90432f8c495e8dcc03e9237
SSDEEP 192:uW8LsNJNTnwY6ZEiNmQmiU1Nk+8BH/+jVlO1TYSbFuSJrf5cFTGqDDiRv:LasNJNTwSrs+2f+DO5YShxJrSFnDq
TLSH
T1C852183A68689C375DE6A645F44736138FF84167DEC83F88D6DC7B0D00DA6AC234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 5072615c4e0e605c55b017c839bc86447bfde327975e4aa2bda06802044d460f
MD5 f30626a39f0a6d312a17afeba1cfee37
SHA1 3ffca1ab3c70654742cc4cc2bdddb7ba4eba88fe
SHA512 d548251d2e80a5c371ce9576a8fa4a9ff48ccc44ce481db366d753c7faa4328b74a3c8d96432cfe028c3bc2da133eb7d419a6aa92e5553737ac9c585d91e0739
SSDEEP 192:uW8LsNJNQwY6ZEiNmQmiU1LkK4H/+jVlO1TYSbFuSJrf5cFTGqDDiRv:LasNJNNSruVf+DO5YShxJrSFnDq
TLSH
T14D42283A68689C375DE6A645F44736138EF88167DEC83F88D6DC7F0D00DA6AC134AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f418f061cc919bd1bbbb9fe8f0643cdf435afb20a9d617b76262abc2738eca50
MD5 78d63a1d99ce398fea11b89dc9e6d5ef
SHA1 7e88253ca65e9f54c6a0921a9b1afe3a59763858
SHA512 e7b87357289907576c6afc21f31af063400c72ec320552e44a88457aeab3e9a618405143f679e40c27a949f91988044446ed468d7e3fce0653244af9ee794e93
SSDEEP 192:HON06hZyQmiUyitnc/+jVlO1TYSbFuSJrI5cOqGqDU6:HON06aVnu+DO5YShxJrT9nU6
TLSH
T19C121A366868AC774DE2A645F48736238EE45127EE85BFC5D5DC3F1C00DB6AC234AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 410a6ba157de18369d100da2420ad8289e4d84bb96d1bd7721bd5a068f3a7bab
MD5 bebe1ad778acca2713448435a86f211c
SHA1 6ea474bf5d562efa65f7c887feb8e018b084d0d6
SHA512 9518ebcb7181efd4cde1d0a3d10a592efb5e600d8d5348d10b3ced976a3367a5842a1182f9767ca6002ca932688e27579c9d271274f609ec949e6e0bfdb21e7c
TLSH
T14DE00103D30501FBC468077421836A202AE7943212F202594E1115683D233203F20F85
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a44b7bc505ab47e9a7abc305d4464abe7cb10aa6d393c5efc8878202a69958d4
MD5 3a6a062af8a32d96c1e974adc21c4d35
SHA1 e457ca542300899e457514c97bb832e023093961
SHA512 593a2ec1f54620964d64bb8a99e48b4ad66e393b6ecbf6db3c0bfb3a0fbe96c9faad2547c04d2d1140b00ae5118e37cdf6d8a70a0ac6bfd6f387b9bb5cdbe7cb
TLSH
T189E00103D70501FBC47C077821C36A217AF7943122F2025A4E1115683D233203F30FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 871fbcd47f6ddc9dd87b8761a757618c259e672b02367b8250603fd0e42aa10e
MD5 51baab70c8b878fa842551dd4263f265
SHA1 f0bac3c5aa0def92a9fed464af7232637ae6ff78
SHA512 f8da669a8d46277c418b0b5a193aa586963c7a9e18f4874818334ab26f575a52929ac45f87d5a828d90cf9d787413a6dd27379976f5b0dc3c666be1c668a5fa2
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cc8f53ba7a1efb1112b71e25049be44a7559d914b6a22293ae2d89197c32c53c
MD5 b8367ed5aa07b90394059eb1ef4302c5
SHA1 35cac2810aadcb25b4be6f79ea3e1a4d218d045e
SHA512 64c87e0c054d169b4801cad4f0c8a6976c74140cdc13ec9cf6522e8d0d24c73f369b9d4f1af84065fc0270eb2631774886135594ccd96a2af7464e617e6c6420
TLSH
T12EE00203D30501EBC468077421C36E243AF7943212F2034D4E1111683D233203F20B85
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58eba3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58eba3.TMP
Size 392B
SHA256 1996870c51d813f1e6da6e5b4e5a7808b437c64815ddfe2cf87845cb5389f13e
MD5 33149a018458c47fcf20021078fac613
SHA1 da41cdfc093f7ae2c47a597c4aec037adab90058
SHA512 9f66cf3e5d7a7834c3fdf65f88e61bf09748522bf028c3f4e4a575efac0ab2d5b579e373ca9b20b47ac760a09de84a52d9ccd4d3c62389b9fe8fbb768e7eb0a8
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7c47b84cc81a5badfc6db8d5942af1d2cb4967a1accd411434d05a5fe5fa2652
MD5 096991ba324b2d7f9629f7febce89de1
SHA1 3851a3c60b45feef1bf02993e7abcb088a069359
SHA512 1d8782f7b80c7f67bcb0a9227eafad36e9f661b0809ccc6b811c89b9800e71c4b8cec18ce395005442aa1ea40b4b8a97eb4c32996bdd95613535a413e1eda49d
TLSH
T1FB412958A6FE1148B3776E5AAFF3A86D587BB8733F06945D00110E4F4623B44C962B37
MD5 SHA1 SHA512 TLSH

Submit Download

MultipleRobloxInstances-V2.2.7z.crdownload

Path C:\Users\Admin\Downloads\MultipleRobloxInstances-V2.2.7z.crdownload
Size 607KB
SHA256 3a8b9046245b5a09adba04042972a06e85c39f1a4d209dd51a6ec6f9838d4aee
MD5 c5a2b2b25fa87a02d7b7fe5c6ccc05e6
SHA1 b530aacd74032a3e0d813f92585d61a755d7146e
SHA512 3c6b9230b51cc208f52e021778f93d7b95f2f233faaa24e1a182a76e752ad4b37130aac2b4987a0243b14b9befca6a87a58297efbca7daae832eeaae8acf687a
SSDEEP 12288:/zkOHEONtvEOLWdZp3reynpktYPioeIAZZGbaWEoNmWpc2WX:/zkCEOL8mW3aypvPDe1nGncWe2Q
TLSH
T139D42336C287CF07E3EB57D3AD02729613C9C8BBB627499A8A7927C7047C4689DB14D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download