Analysis
- user interaction
yes - max time kernel
54s - max time network
56s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/08/2026, 19:32
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://robuxgift.com
Resource
win10v2004-20260513-en
10 signatures
150 seconds
General
- Target http://robuxgift.com
- Sample260816-x87prsfe35
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2804 msedge.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedge.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313823620384428" msedge.exe - Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{8E057B35-FC0E-472B-BD46-D9A071BAA126} msedge.exe Key created \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ msedge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe - Suspicious use of FindShellTrayWindow 35 IoCs
pid Process 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe 1700 msedge.exe - Suspicious use of WriteProcessMemory 33 IoCs
description pid Process procid_target PID 1700 wrote to memory of 2172 1700 msedge.exe 85 PID 1700 wrote to memory of 2804 1700 msedge.exe 86 PID 1700 wrote to memory of 4340 1700 msedge.exe 87 PID 1700 wrote to memory of 4224 1700 msedge.exe 88 PID 1700 wrote to memory of 4340 1700 msedge.exe 87 PID 1700 wrote to memory of 4224 1700 msedge.exe 88 PID 1700 wrote to memory of 4224 1700 msedge.exe 88 PID 1700 wrote to memory of 4888 1700 msedge.exe 89 PID 1700 wrote to memory of 4888 1700 msedge.exe 89 PID 1700 wrote to memory of 4888 1700 msedge.exe 89 PID 1700 wrote to memory of 2212 1700 msedge.exe 90 PID 1700 wrote to memory of 2212 1700 msedge.exe 90 PID 1700 wrote to memory of 2212 1700 msedge.exe 90 PID 1700 wrote to memory of 1136 1700 msedge.exe 91 PID 1700 wrote to memory of 1136 1700 msedge.exe 91 PID 1700 wrote to memory of 1136 1700 msedge.exe 91 PID 1700 wrote to memory of 3576 1700 msedge.exe 92 PID 1700 wrote to memory of 3576 1700 msedge.exe 92 PID 1700 wrote to memory of 3576 1700 msedge.exe 92 PID 1700 wrote to memory of 3672 1700 msedge.exe 97 PID 1700 wrote to memory of 3672 1700 msedge.exe 97 PID 1700 wrote to memory of 3672 1700 msedge.exe 97 PID 1700 wrote to memory of 4656 1700 msedge.exe 101 PID 1700 wrote to memory of 4152 1700 msedge.exe 102 PID 1700 wrote to memory of 4656 1700 msedge.exe 101 PID 1700 wrote to memory of 4152 1700 msedge.exe 102 PID 1700 wrote to memory of 4952 1700 msedge.exe 104 PID 1700 wrote to memory of 1888 1700 msedge.exe 117 PID 1700 wrote to memory of 980 1700 msedge.exe 118 PID 1700 wrote to memory of 2388 1700 msedge.exe 119 PID 1700 wrote to memory of 3660 1700 msedge.exe 124 PID 1700 wrote to memory of 3660 1700 msedge.exe 124 PID 1700 wrote to memory of 3660 1700 msedge.exe 124
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://robuxgift.com1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1700 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ff9f3a4c188,0x7ff9f3a4c194,0x7ff9f3a4c1a02⤵PID:2172
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,14725933963216592461,1344689133287479540,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:32⤵
- System Time Discovery
PID:2804
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,15530527224060945023,3868554070283238482,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:82⤵PID:4340
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,382057639940512273,2756292133329813805,262144 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:22⤵PID:4224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=2996,i,3465934263368617354,14503073033941211521,2097152 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:12⤵PID:4888
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,15644701726211150580,2139797053655106123,2097152 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:12⤵PID:2212
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,5516366032969547092,10832126081312005670,2097152 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:12⤵PID:1136
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,1035034214356679331,8218850074541666147,2097152 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:22⤵PID:3576
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3588,i,8183456077902503937,6605388502685771751,2097152 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:12⤵PID:3672
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,14405291679521634387,7863852909878494047,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:82⤵PID:4656
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,349117716872436271,7504729730701420976,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:82⤵PID:4152
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,4106192650729239733,11345756763776898493,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:82⤵PID:1664
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,4106192650729239733,11345756763776898493,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:82⤵PID:4952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,11485163371446239260,619033765075088378,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:82⤵PID:1888
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,12542668296152769744,1070805594053507723,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:82⤵PID:980
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,13117339004345040984,423633257744007649,524288 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:82⤵PID:2388
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6236,i,8462977796703641195,12884933190132047307,2097152 --field-trial-handle=2280,i,2702115089492288279,17476697157473141644,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:12⤵PID:3660
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:3856
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
- Size 105KB
- SHA256 c49caaa6105f1f4ebe38e0e53c0330fc215dbd571c3457bfbbda3c72b3c53493
- MD5 9cae2df7cfe3c96e9afaea3efff423b6
- SHA1 43c01b2c4edbe548db4a9710a524b8be97e38723
- SHA512 fd862c8bbb7ba48f684357c5500efad7c68cb414e5d0ca77dd46cb130573487033dd34929fcc6dff1fc4f6880da04d9c365e1a145d3ee329448452e4c14ab746
- SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7c:fwUQC5VwBIiElEd2K57P7c
- TLSH T11CB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
- MD5 4751cf705a737c4226029624bf43b9a8
- SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
- SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
- TLSH T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 bb198c81963e699455b64b9ce7875c63551bac1db146ac9e8b16246add4890ae
- MD5 e5b55006b588cbfd0a0c4801b2c1055a
- SHA1 ddde08e8f44660d59ca273351189083ac43d8809
- SHA512 453a760669986555d9c71b4c1e974d6f1c226d7ff4ac867acc428d6346dc81990eb139eda65972c93abd04637b774055ff3725b789c9ae8f2d1492ee6187b2dd
- TLSH T1DCD023707D35EBD6D11E10F45420494112374273315757B5B155584EDEB4081F2DFDF6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 5KB
- SHA256 d4ee11e3504856ee5f80bc99ed7564527a8675d63a29ea837b6a6a670307585d
- MD5 d39fa5e9ef33298df28e9705fd6b1ddf
- SHA1 3c7b3384977a190ec8b5699d91daf53ba011a63f
- SHA512 37ecded45c442cde8a104a6d484ed4dda06e99e20695ea4495af24cc23156c2f9b4acb6fc5d84b0654b2a9ed20b5607dc44465c18857f539b0affc3481629fb0
- SSDEEP 48:JYw1JzAp4gTfcwJHu8UtdU2yc6i14Wbj+Su+0QJ6815X0gGV8D6LpX/81d:6w1dm4uNM8gdUh/EbyMvPb0gGV8spX/A
- TLSH T1BBB10910A2A25B80EB4022BA84A01F453EF5D04B37C31F8AF2545CB06DCFADD1E7D887
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 87ccaa735d249964e17bf0ade43544371524c41d73739f78332e39b7abf62cda
- MD5 6fc23d97f51ae96e8ca0628848411bdf
- SHA1 cfb140815093e8f4b576ed132d88a2f6b44c7abe
- SHA512 ce6e70c09a4edb3fd07606761a64f92fac3a978d27adcd496bcb91c85beacc12f2d3e160ced126bfb43468d3195f604694e70d4a7991ff7e1137d29f12ed2788
- TLSH T13A515D24C3124D91EB915233C0D02764367AD6D43BD76F94F29868F91E0EF2E5E7E119
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f121.TMP
- Size 2KB
- SHA256 dd911936af0ab45e92ea229a5d55b11f0056a7273182f1f57cf85acadc4ec0cd
- MD5 a00322f7ef55662dc43b8d30aa4e75da
- SHA1 38e90608334ca95b8ad6ab1983d7a273ac812cf2
- SHA512 fb1225a25f7ce52e9ebe4d780304a9ce70b75b248c23d3a23b26eedb73c2304ad30293751dd122eeb907b197c9ad63ac80215b6d26abeee775f3bff79e4d4a6a
- TLSH T153515D24C3520D91EB911233C0D02754367AD6E83BC76F94F28858F91E0EF2E5E7E119
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 c797d3e1f54e1a7bb449090978248173b3c77243122f9731e24d920548714f62
- MD5 220dba3734530d0316890e8ac940f10e
- SHA1 f0478a70a735220d9bab0074656308f119ef0005
- SHA512 836b46128ff3f92cada82c45f606619fa28a232d1c1a2fb8b0af104a28b059a4b911201f245bbd7a0c507f414c58867505f94c1e1defa98abaa7b30345e446e7
- TLSH T15251AAF7C3E5866D9A11A5F0AA146F1BCF2C0516436C3C5A89D4AF1BA3B2871E111A8F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 12KB
- SHA256 66012bbdea887850b5bad7e6f90f7797602620f25201f0b5021809aad4e6a69f
- MD5 b8a2eb1fcd2b45735b84fb1830c4eab3
- SHA1 f065824403e5c3b4978764133d7d91a42c8e21af
- SHA512 f4102e21cbf8a74ba9dbc17b462254686f4193d285b81e65200a4a8fea9cbfe055ee030a45b40757f7be89809305d955f366299ca8f659d3e1d0f6609163f989
- SSDEEP 192:sxZQM6RhEyM/jK1Ml8Mkxf/fRvszFhQQd5IdpYQxHW6+WNnQAs6/Y9IPpQy12Ha9:sxZicM1/ftszFhkPHb//L9
- TLSH T1E752E7126A34A97BCCCBD309FA55BB53D6F9147292900E44A9FCDA1C04E6BED221781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 16KB
- SHA256 2fcc0b94cedc1e7250d0eb5e714ed18e3d5fabb19aac6d0f043021a7e8152f31
- MD5 ca996a6d7d1348a587473f7d01607a62
- SHA1 7cb603f67ca9145c3979513bbcf667051316f7e3
- SHA512 6af48bac5799ffea6aaed1fb90ee33211cfb6ed5d2634e6fefbcca967ef9664c7b8d89883d485ded912ee5920f3c4378208220c70a983912e917dcf2d78c0ed9
- SSDEEP 192:sxZQjL6RhEyM/jK1Ml8Uskxf/fRvsxEWpVEFylQwdwyybH9LddpmQgQWHW6+WNbi:sxZjcf1/ftsCWvEFK099EHbZi/m+
- TLSH T1A472F8026A34597BDCD7E21DFA15BB53E7F8247296905E44A9FCCA1C04E2BED2207C1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 30KB
- SHA256 86f47615c5fcf5c2895aecf786db06076b5a75458639ea72bdeec384af4ccd55
- MD5 6ce01a93fc4a8a87b72f14f6935fe9d2
- SHA1 82fadbcd854c19356436305b6809aebd0479536f
- SHA512 06d5bb66ab359b35a8aecdecc52a7300673ee3a1f1eac133f5e8a8da7bea2fa531c5e4901b37ca4834af6c29de36c4baec08b173a5e4df5bec99d6d1e866660e
- SSDEEP 768:CXcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNproRg6W:CXcv21wWvu+Z+u1jaeFLeRNCRG
- TLSH T1D7D20B2B280CCB7E4F845E9CED2A6F866ED801CB57988D5447FA884C03C77EB511B59B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2604dd1e-a3fb-4e93-969d-11e04bdef142\index-dir\the-real-index
- Size 816B
- SHA256 5e828802738abbbdf5db410f5aa8cf10f424692934288a2f839a459a4ece6b9a
- MD5 35ecef66beb82457866bc462a8108746
- SHA1 d2369aee26a173e3d8ffa0c9144cafc0789b87f3
- SHA512 d51d27ecb9258f1fbcbff118eb39754536f679f136058c2343bd6f1cedde1856f90a7583ed1294a85553e6919747da86d5ab6f5623a246f44bb81a3fea06de42
- TLSH T17001AC165EA14D5FF96102BB25B6B0F8B3304DCC9721E223A82C52662D7A38A75575CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2604dd1e-a3fb-4e93-969d-11e04bdef142\index-dir\the-real-index
- Size 2KB
- SHA256 7fac7942c3f7e95432302ab11c906496fd82c3fdfea63aa8c3a391f4166cb4e7
- MD5 4df1ba978bb04283cc02083e2467f92d
- SHA1 83938c3b62f082d289a2c3f4211f2d0254880465
- SHA512 a4f2ea54c03e51f5dcb6877f1747cf91ddc7cffc5adf164bd08bd51feb899ec2dc32d2d32178c3ea8d7b75173601483427292e7aa3ee8280b6a1e1e6d4ad60e6
- TLSH T1F241720A8CD00C5FDDA200B718BEA4A0B332A9DDA705E717A52CB0326C9635739565C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2604dd1e-a3fb-4e93-969d-11e04bdef142\index-dir\the-real-index~RFe59554a.TMP
- Size 816B
- SHA256 d27d2c3e5c4a5b2a2a6f8d667e473f8f5c5f958f7c438363abc38846e23d48db
- MD5 adc3d2183861f9cac6cd8613bbdbec78
- SHA1 31030b14e88d96e1e95192efad63c6243d680ba2
- SHA512 19e051fe97c69f2014ceaabf3e8e7d47d77fcdb23383742874111981cc88a127da44396addb05db82bb00ccc15e980e2d7be8bda6b3de4c9c88bb03304e43770
- TLSH T18C01E1668BD24D1FE44411BB2DA6B0F8F3304D008322F3A3A42D253A5C3ABCD09070C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff8443f0-b80b-4019-a383-a723492ccd4a\index-dir\the-real-index
- Size 72B
- SHA256 c9fdd9d2320a3d403f619afe5b6cf13a70721ddcf3e9b971847f1803f24474af
- MD5 f25235d05d682ed68d3fdfc201276905
- SHA1 c603279e7cfe451fcb194c5460c059d19a6c43ad
- SHA512 7018f23da03b4a892f2d6a61b0a0b5a45db48217398064c3ed7b515ffb2e448988785cf772f8486d66952a5f211148d4095ae72596ca947feb5465d0a1cf9ae1
- TLSH T13AA0021452857244C01662B399D706711A0089A001401329819C004CC8D079A4551C4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ff8443f0-b80b-4019-a383-a723492ccd4a\index-dir\the-real-index~RFe596509.TMP
- Size 72B
- SHA256 22806318fb3a132b6eff39bb63f7d1d793e5eeb3ce6b27750456d40c0b55555f
- MD5 beda88d3e5f465dac571bb20d6c58d86
- SHA1 6ef66f2415bc9c5573170af4ea34e070043e027f
- SHA512 3bc18d6b74c969a19d10e57c1ed6089edf92d14a66a3dea698f6893a9ebb4779a38bd1b87fc6176801da935070472d15289c13e66b287b090885d2491e78090f
- TLSH T14DA00220CFC0401EC07211B2195343551300CCA13210135740950084CD654504D9520C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
- Size 371B
- SHA256 3f494c67a14ffbf99601f18d08d6300a36922c9efd42f9a357ec548f8f4508a1
- MD5 a8f1e883065a0d917d2beb3599a68371
- SHA1 d129d9c1b70507712cc10807045d14f2dbf77d43
- SHA512 8d2d36603879ce779d6c2ab83e64a8a632eabfca37312a30f32a00ba4a538a4a22126ade45bde0740d6e1d111a7df6dd23e48fa5ef018f0db9ca8d7f23ab63e5
- TLSH T1A3E020B73DAF2814AE7F57EA6971C4A404457C99C409EC8E141FE1C720F1355359FC61
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 48B
- SHA256 b34906d30c4f64a599ad67e79792b386be7b3f0f9296dc85a0db444825f8cb96
- MD5 0c5fdba92e0af52d63261009faba8ba7
- SHA1 5374b8fd3af3997e2d7ecf29e5c479c7cf5a22c7
- SHA512 a235130bd62a2eba1bfa53b6bdf43123f72ac3870e641a08ddf4c7973454d8858526ca77a922826feb80ff907879af03288f3e5127567ee4f52931bf25cf5c5b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5964fa.TMP
- Size 48B
- SHA256 2685eec8fcdf3eda161da003967a6aa11e80ce22a6c9d453c2fa2a35f119c12f
- MD5 ac001404b63af8ef003022743c9304d9
- SHA1 e79481cbfe2569b8c7596f416a25002784a32b17
- SHA512 a76ce65dd6101f8e512774625f78acf42a12f69357b4bb15d992e54d3b9571de77899f8a03c144a68a47f46f1366e900a6b2ab99b1339355a7c694f2f27e505a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 5KB
- SHA256 9c54e3d88bc055a2385591943f30404be791ded77552cd596de255583f1109d0
- MD5 50e79cca116fcb53760e1b379bda517e
- SHA1 2f9aa629a3d2639d3a68b4cb382aec063e3e81ca
- SHA512 ec36b978e99ca3eadf7153ba9bc2d99ce097ee74aa20b9ca30cac8d4bc09952e61fdb926907cca9849c4e04f36d6764b9696693bfd42ccb686b71636b2c1a597
- SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD6aEKPaGO1WKO06C4AKFeB:mTfLRl76
- TLSH T107C16416B137464228BE7808A79686374F4631E7780CB4AF7FB800965E6BE115DFE4CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 20KB
- SHA256 f6e2f2bc0057d40c3d28328d1ffe404d2166625920108864256820a677853f5a
- MD5 773b33327423b8b5ccbed76939c9266d
- SHA1 5bea28d0c242cc0fe622462aff1ac7f1a337c607
- SHA512 a50d7c26101fb232585618a54d898adf35fdef5fa7629d31fbdaffdcef7000c1ab1bae58edd13fa2fc8161be00a06a78df3316b01140e65a2673dc8f97798cb6
- SSDEEP 384:aZcIhsNpZkJziaERe+CzO4eyfxyzOOPrXLpe8C/7B4:YhbJ+IrOXyfxyzOi9Po4
- TLSH T154928D7169785C672EE3EA85F58636139FF860B7F2C42B44D5DCEF0C06DA698130B826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 63d0df10c69197d5c21e1a5c18e25b4bbd9b63c26aa4c81895a6ca6bc0cfad4c
- MD5 83de427cda83a41db76141beeff87d75
- SHA1 e9d6cd33a01b2fb7e96ce497b4647c2a0f8e5fde
- SHA512 01a6890c589b7575acb8d1731402cb4a38fc908ea9367a435734510eba64128c54f113cd07523c49e1c816cb004991fb292d4e5a960ea4f2b1a1e585443e7292
- SSDEEP 192:JONW6v+YLNQmiUyQIQdZh+CGSO49oQus7WftU6:JONW6vz/HZh+CzO4eGylU6
- TLSH T1DE02E935B9381C7B9FF2AE45F58737279FA82177E9912F84D9E82E1C01D764C2306826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 26KB
- SHA256 4b44cf2b910837dd26792e524873bf7639b9ef10d5b3e6b7c12e3aa30f412328
- MD5 15f3fc04ffbafe32d18cbf8a4bfd57f4
- SHA1 7e50a915cec44fe2c85b7469c2a5925a25f20511
- SHA512 f6efac638e2aec91da818e1260dda6d6d5fec1787379b7cf72adaa008b2e3a5a953e622519bfb99aa3b0c413505dbc185a57feea5b9855777a2ba972f424ba29
- SSDEEP 384:uZcIhsNgZTzJziuvRa2e+CzO4eyfx7uAStmKXUoQ49lMXkOOPrXLpe8C/7B4:MhXJbaBrOXyfxlShZ9m0Oi9Po4
- TLSH T1C2C27DB0D8681DE755E2EEC5E746E5172EF81177D098191CE2F4FA3E319F4B81312822
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 20KB
- SHA256 37dce50d72e5130b764a65b5720aba353f0dda12d29d42dc793998dc216501f8
- MD5 75dcdea471e517db0349c3c8af67f652
- SHA1 de3eded9cb764deb70cb183784abfe5806f6591d
- SHA512 5dfd8be4d042e4c3876f4e80844974cb2a27113934d1e9c4c201e0d0c94b8c1d08cc62c71a4e14cc17258c7ceb0e118e6e9d21601108d643d78598b2bad17ffc
- SSDEEP 384:DZcIhsNpLkJziaERe+CzO4eyfxyzOOPrXLpe8C/7B4:bhDJ+IrOXyfxyzOi9Po4
- TLSH T16F928D71A9785C672EE3EA45F58636139FF860B7F2C42B44D5DCEF0C06DA698130A826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 d995d481756ac2402d1e92a8bb71fbc3864777d83f7c57a7cd0a8e2f7fa8ee4b
- MD5 f72b84a5c46a557b2108efcf8dba51d4
- SHA1 cfcfe24d95310eb0ee42ddfaa730a8643ba28fcf
- SHA512 8b512851e96fd652a296733d6b649f2ae9ee77b8b9350d258e787da0643dc5f8b9dd0758d50d526709c880a69882ec7c3cc00747230957934edfa7406896903e
- SSDEEP 192:9mON+P6v+YLYdQmiUyQtQdqqh+CGSO49oyfhCH7W1qiU6:UON06vzyijh+CzO4eyfmyzU6
- TLSH T167122B3579385C7B5FE2A984F58736239FA86167E9853F80D5DC3E1C02DF69C230A826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
- Size 264KB
- SHA256 b62237f1fd826b9189bc8392f18422348601a1fb420cb052d2db3ca0edeb9d64
- MD5 ed954d7640abd53a4a0dd317de1bfd05
- SHA1 003fc03a2fd265bf410e3705c8d19b206613c487
- SHA512 9a66a71c852807a91915225cbbbd655bfdfc0c18f77bc80524aad6e040448e7a2bae10f02a71897626d42532b12350a66056a87e757c1a7f7c9b788d73a4d788
- SSDEEP 3:MsEllllkEthXllkl2zEkl+ell:/M/xT02znxl
- TLSH T1F344041C7FC0050DC51410314051C35047F0D554051157C334510C335DC75501D04401
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2fad09a9-1ce0-474e-8c11-c2d7e5bbd0ed.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 820cd91686df02d2090b23b400cf0b9237c67fffa3b881680dad26193edeedd5
- MD5 2753dafed1cb46870984ee1bd29a1fe6
- SHA1 5fbd9e52fbebe453c30fa105e9b27e587b17ae3e
- SHA512 a882cfa2ffe5a29bd9ccaeca29a8a9976d58a91ca87841d29e51fe9b700a648019864337256062a28f8fdaab2e6ff402850bdde7eeea6d585843020b19f4f882
- TLSH T191412958A6ED1148B3B67E5A9BFBA86E487E79372F07D4AD10110E4F0663A00C971B37
- MD5 SHA1 SHA512 TLSH