hxxp://roblox[.]com

Analysis

user interaction
yes
max time kernel
140s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/08/2026, 22:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://roblox.com
Sample260830-2te4esar9y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1276	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326039431266434"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{BAD8CA67-8C6E-42A5-A787-6E9EC9BE7F89}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6048	msedge.exe
6048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3124 wrote to memory of 1876	3124	msedge.exe	86
PID 3124 wrote to memory of 1276	3124	msedge.exe	87
PID 3124 wrote to memory of 3492	3124	msedge.exe	88
PID 3124 wrote to memory of 4132	3124	msedge.exe	89
PID 3124 wrote to memory of 3492	3124	msedge.exe	88
PID 3124 wrote to memory of 3492	3124	msedge.exe	88
PID 3124 wrote to memory of 4132	3124	msedge.exe	89
PID 3124 wrote to memory of 4508	3124	msedge.exe	90
PID 3124 wrote to memory of 4508	3124	msedge.exe	90
PID 3124 wrote to memory of 4468	3124	msedge.exe	91
PID 3124 wrote to memory of 4508	3124	msedge.exe	90
PID 3124 wrote to memory of 4468	3124	msedge.exe	91
PID 3124 wrote to memory of 4468	3124	msedge.exe	91
PID 3124 wrote to memory of 3480	3124	msedge.exe	92
PID 3124 wrote to memory of 3480	3124	msedge.exe	92
PID 3124 wrote to memory of 3480	3124	msedge.exe	92
PID 3124 wrote to memory of 2844	3124	msedge.exe	93
PID 3124 wrote to memory of 2844	3124	msedge.exe	93
PID 3124 wrote to memory of 2844	3124	msedge.exe	93
PID 3124 wrote to memory of 4004	3124	msedge.exe	97
PID 3124 wrote to memory of 4004	3124	msedge.exe	97
PID 3124 wrote to memory of 4224	3124	msedge.exe	98
PID 3124 wrote to memory of 4224	3124	msedge.exe	98
PID 3124 wrote to memory of 4680	3124	msedge.exe	100
PID 3124 wrote to memory of 3304	3124	msedge.exe	101
PID 3124 wrote to memory of 3304	3124	msedge.exe	101
PID 3124 wrote to memory of 3304	3124	msedge.exe	101
PID 3124 wrote to memory of 1300	3124	msedge.exe	106
PID 3124 wrote to memory of 1300	3124	msedge.exe	106
PID 3124 wrote to memory of 1300	3124	msedge.exe	106
PID 3124 wrote to memory of 3324	3124	msedge.exe	110
PID 3124 wrote to memory of 3324	3124	msedge.exe	110
PID 3124 wrote to memory of 3324	3124	msedge.exe	110
PID 3124 wrote to memory of 228	3124	msedge.exe	111
PID 3124 wrote to memory of 228	3124	msedge.exe	111
PID 3124 wrote to memory of 4048	3124	msedge.exe	113
PID 3124 wrote to memory of 4220	3124	msedge.exe	114
PID 3124 wrote to memory of 4700	3124	msedge.exe	115
PID 3124 wrote to memory of 2204	3124	msedge.exe	116
PID 3124 wrote to memory of 2204	3124	msedge.exe	116
PID 3124 wrote to memory of 2204	3124	msedge.exe	116
PID 3124 wrote to memory of 5540	3124	msedge.exe	117
PID 3124 wrote to memory of 5540	3124	msedge.exe	117
PID 3124 wrote to memory of 5540	3124	msedge.exe	117
PID 3124 wrote to memory of 5160	3124	msedge.exe	120
PID 3124 wrote to memory of 5160	3124	msedge.exe	120
PID 3124 wrote to memory of 5948	3124	msedge.exe	122
PID 3124 wrote to memory of 5948	3124	msedge.exe	122
PID 3124 wrote to memory of 5272	3124	msedge.exe	123
PID 3124 wrote to memory of 5272	3124	msedge.exe	123
PID 3124 wrote to memory of 5272	3124	msedge.exe	123
PID 3124 wrote to memory of 5348	3124	msedge.exe	124
PID 3124 wrote to memory of 5348	3124	msedge.exe	124
PID 3124 wrote to memory of 5348	3124	msedge.exe	124
PID 3124 wrote to memory of 2136	3124	msedge.exe	125
PID 3124 wrote to memory of 2136	3124	msedge.exe	125
PID 3124 wrote to memory of 2136	3124	msedge.exe	125
PID 3124 wrote to memory of 2256	3124	msedge.exe	126
PID 3124 wrote to memory of 2256	3124	msedge.exe	126
PID 3124 wrote to memory of 2256	3124	msedge.exe	126
PID 3124 wrote to memory of 6100	3124	msedge.exe	127
PID 3124 wrote to memory of 6100	3124	msedge.exe	127
PID 3124 wrote to memory of 6100	3124	msedge.exe	127
PID 3124 wrote to memory of 1776	3124	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://roblox.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffa415bc188,0x7ffa415bc194,0x7ffa415bc1a0
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,15419086140312651331,13113793502258354750,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,5087047882059633177,1277923320416251603,262144 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:2
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,11309807508148032541,15531388251552998165,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,11034992985174224551,15002637581439635187,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,17908535192839905990,14890360661686192013,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4108,i,2977402436459738350,17664037833058213661,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,14396102301470367932,2589254202289789236,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:2
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,7131707007304910225,11142484824884226027,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,6306428976061319267,12026384203980957207,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,7963645933951263390,15067957581039783799,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,7963645933951263390,15067957581039783799,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6188,i,4183085931466791183,9945001485425221405,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6148,i,4560971388113682187,16748596967194440845,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4956,i,3655446681473375680,2985785101706528225,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7136,i,581885840216196711,18144904703835789520,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:8
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6640,i,15289420671302371176,11201347656502789130,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6612,i,1567787092813468624,8096935748364880246,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,5778676674395611905,16337146620168224383,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6328,i,6523441226792636088,4885334083471606560,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6576,i,8279952563441214213,1377585055893738779,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,15319209605879569858,388344166504891445,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:8
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7288,i,6728552588625482005,9546656094638723849,524288 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7240 /prefetch:8
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5156,i,17486295312672885022,4981235293102148582,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7568,i,11804017984852214252,7772622926598269578,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7652,i,4557990465022127211,11074811068150851199,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7636 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7608,i,17160778569070613946,17495215870478076023,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7304,i,14297696070077336439,14543897622076149548,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5264,i,11622078168132893367,10831798766602538850,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7816,i,865145321979419538,7731679479154894855,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8004,i,12703163143305688692,18215459194005170143,262144 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7792,i,8860538151278698662,16628861838622022124,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7812 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5284,i,4431148073899340611,1457031740124627916,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7564,i,10955995617830678809,13067445155818343251,2097152 --field-trial-handle=2416,i,17465398409923258356,7760435375503888839,262144 --variations-seed-version --mojo-platform-channel-handle=8048 /prefetch:1
  2⤵
  PID:3468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1d41e90a-4e24-4ced-aab2-6da8770d0f49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d41e90a-4e24-4ced-aab2-6da8770d0f49.tmp
Size 18KB
SHA256 996bc5f6c0ac3142f9e4421e31fc876ed598c7356e3aab71b857d9303cc55bbd
MD5 2202974311157ff20f34ecbd4d76a57f
SHA1 fe88628722d7daf0c034d473ec78c44e6955ef9c
SHA512 60ef183c7d2d9a9f08904fa1e84bf67a64cebd4deb726c17762db1f2b5feecdd65dfb8acde1d3f8336e1d47a3b9436ceae615c8f660e007557dd7dac3b519e38
SSDEEP 384:XZcIhsN+uT2CRU7q2kmKF50X1puL99zzp:fhdqb5syL9xzp
TLSH
T172829DB19CF4687B58E3A585F58B36174FB8C423EBC82F8098DDA70C05DA598030B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 dc3cbdc636712cd0ad246adb60e10a6c82511eff5067261c392024fae841e7a9
MD5 c1825e771385238aa2866582788cf8ff
SHA1 cdd34f1c740914ce98dfac6172ecd00fb2da9783
SHA512 33f14925d45545eb4c68af5b5b273b9724142601b0f5098ecd00afa7d2c73115a7bbfbde0f2118a5645868d8b32a69bd2a748d5d5a3d469656956f8af0313fdf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000cd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
Size 19KB
SHA256 868ca9034e62a6169955ad39b1802f61f9e07d39f2b72e8754215ca5552cfdd5
MD5 ce3b26bb58e5691a1ee20767032a57da
SHA1 ca6151b90810c355bf74c3cb167022ffb95e4385
SHA512 9d8a1a56731fc8665a1d37eeec763f982fa75efe0013037f33bfb665d42347126abfaac83d9e1b7c903de5c736f9be3394934cd20422ac50af1a91772c48d222
SSDEEP 384:kH4rQVrFEpCQMqKJcLjfdDow1Mkm4rcKNgd9G4Nect7u42n/ZE:C4rQ3E9icLJDowC34rcKNo87n/ZE
TLSH
T12692E02B914BF92C43AC8DDF9234CD6074A6262C5782739F8CEF43476B98C1E086532A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e5
Size 16KB
SHA256 fc3977d2d169c184516de314eb5c88d748396839ae43c5ac2db9afb618a0b059
MD5 37f3872114c77170d343b701cb02f410
SHA1 fe0e539c1ed0b83fd989b801d65eb3021ee52e34
SHA512 4e13707040aadd14415156d90c90c2846b776260d285ad38309af4bebedc34dda744d3df10ce38a2440a8eeea29b46d4bf1cc4349681090cb9f7376eb6cf7f18
SSDEEP 384:PmiD7L/vPiOI8bjwWIPACH+XsqCkdYiZfVa5Qrjbp+:PmiD7L/vNIqwWIFecKd1Z4mrHp+
TLSH
T16772D0CBD6BF53638F5C4600BE18D435A0A7A3DF036CC84409B9669B2A11398CAA3A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000108

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000108
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000109

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
Size 68KB
SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
MD5 cb3d1e69fbf9c94b15e92f2fa26892f0
SHA1 b8e5aff1547d49a1285e2e0c4cb43dcd9993f468
SHA512 0f890af69b223aaec8bbc753bbc626f6cf0e0660182e38871a03337f1eec7be6b47cb9d5034a3cb8c226feb6cd964d396f56fecf07257f3cbc13de642c175ac2
SSDEEP 1536:1RrPSv8UR94fNhLVxko8PojNVcL7tk9/yGeJ3GI:PPZGefNhLVxko8MrcL7fJWI
TLSH
T16E63026A7FAAA437FB2C87016FF23034D1F8FD579034042826515BB5A4578E92326F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010b
Size 65KB
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
SSDEEP 1536:654NcGosP0w+UcGoanS2RR/QwNdIvEsgXn:6iRsw+UkC5QdEfXn
TLSH
T1055302E4123CA75C49FC43EA5434D635BA4B31ADABD4102FB69BC4258F6EA824447CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010e
Size 40KB
SHA256 0d016b25b8d4359642723402910221974ab5248cb459a79c9953480796ba6531
MD5 df64d530112fae60087f5dddc774d6ed
SHA1 06244bb7334c9960b8e45afb10d3d1113b9b0d10
SHA512 72e7c170cf4d016ff893f7f636086f442fefee9cad53e2cefb0204c0ab090df3ded7a74588bac25805d26c0abb9f37be23007cee81de8a2730f72bd737400ff8
SSDEEP 768:iSikonYm2wfX/YVKuj03FRW7NbEV1OJHKOlqpdXn0B6:iBnYcfXwK403FcNbxFKOUXL
TLSH
T18313E12325F98C3FEC026C50E2FA5A1199C9D28AA0CCD1DD3DC6D696946C5DF872D3B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00014a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014a
Size 402KB
SHA256 68857021b28c2090f44dd8f08fa4226de10bd4bc56b809d3cd5ad7d3652d3bc3
MD5 c6f6354f280f315c2c9a53a98a0f883b
SHA1 0c90957874b061116bddaf2a1371678295aecd5c
SHA512 2ccc958062928339acf0e5f1dd8e7148cbd15efbfae76ab767375ab46273967507ea862e1a74e17276059d29bc31f89d3065d05e198cba91d0a3177028d63fe9
SSDEEP 12288:H8rfyG8aCOzSyTL671zHNcjZItzpaFFmc:NG8aCOZH671DNcjIzpaFD
TLSH
T1019423CB4AADB445C8F310F8D37B370BA00941566BBED07ED98065B2368D9C759F292E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00014c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014c
Size 380KB
SHA256 692981327548f5b08fb9e23213d657aca6fa117678a20e22f99a71c01913df16
MD5 944f9b816214c7b7ba67976b2ce9f562
SHA1 af157109964c722ff9dbc5201ece2c16436c1a4e
SHA512 dfea2c2cf4eab453015f2d70a34a0b452ed0310a3a1071baa1f01951b905cdebbae3fad7668d9fcbd2925a60db701b71a12a89a6f57344aefdc1ae3f2576026a
SSDEEP 6144:8aHSNJPdU7OfmOcLV3QvPX1lfAX8bUem5/FxVpioMAt+xrJXIKwbo6RcdIwdI:b75qP4Xs4/FxVpiGQBwad9dI
TLSH
T1B684237532718839E54076354430FBB2F5580A225B7DAEAB3EA43F30DE498790ADF726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 c05105d8e076cafee9278175ebdf44d395394d97bc9f2e882b492097e49384f0
MD5 1ca8f7eec9ae857f4075ae739192cf19
SHA1 dc3a951e575158ee813e72b067f769e42440378a
SHA512 be993fcc0a601675977d25e73c7b7cfb810cad01d078e10d823351318703ad670ad57f19fca0bdfdb0b745ae104bde4f0618f33c715d7c4ba36f5b5e7abb77cd
SSDEEP 192:FiDjYH0jyXeuIhH8i9UZ9uSCvE9qzXuaChSu9BHTf+BxZ1cwnKyxM3q98:FiPYUj0IhH8W0lCCsXuaCh39BHz+bZKN
TLSH
T16A32D84480DA286EDF280D7FF7AD0E4E347A0085959B8F97208044FE56CB7DECAB48A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b4d6dc7bb611a5f9ff1e9e61e5f33b0f9ed2e66e18e7532ad9402a62106f5660
MD5 c4c3168604a976f9426eb24452aa4ad1
SHA1 1cf08ace713e7ae4becca639195dfb9fba763876
SHA512 14fe4838da530ec26d8936b453213514bbeecfea5797de0af6552080030a1d5a31bcf03058f92b49c062ac9086aabb93c59e32b33b2b1b1b4474d8ac8c3d5cb8
TLSH
T1FA614D18015F6D6EE32CADF2F7D1625F747D818A99AB0ECB200088BC1906BDDC679DD8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 7c5430a7a50ef94a87a6be043d2f385bb88fbacc4ecb6c07ffb42ba25dcf3dd0
MD5 181c85c6482b12aee8bc29fd2d12c348
SHA1 c392f1c02830faf9d443773f5c60e624bee75091
SHA512 c5d46387ccfc7d0733ee515cb0ced0974433abb9192927dab0357321727712f8d128a57c0b66a63993261a9d870396c8fa19ecb55d39dd0c7138196374caebdc
SSDEEP 192:Dcbrety+XI01OWahPeFcs3MC1A75HMnqacgiShkULQi8ufr2Ikme7TrWHlfyg7Rt:Dcbret3Y01OWahPeFcs3MC1A75HMnqaJ
TLSH
T10432BAF3C3E8826D981256F0EA182E1BCE1D0955432C3D5AC5E4EF4BA7F6071E251B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 1d3d52411fb597c35d6f18dd327226d07856b84d177f5d46b81ca7fc8d1bd242
MD5 f9720b0de476c750fea5582b9ff06a12
SHA1 c1418a69f5400a62bc4ff55b612e002c3c6abce4
SHA512 d4c8d35e9f1d232a525552338d4b62cae5bbaed513d2f59c43e7c4fe89ce3acd9d360bf944b337943b3682bf47ce19682fdc1c95d861d8b074d44024a31f76f7
TLSH
T13FD02263520830F9A76C3EDAC4BAAC8ECB2A20281802EDD9B4D06998053A4AC0A07247
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 849b93a5e76f1e0599a8003a9c83e340e76dc2353c38d63ac9bebb108983ccdc
MD5 6a12125db563ae9c83b2520d41940924
SHA1 ce71785bca98d133760124c0893d698254399770
SHA512 1658ba489c735779696aac31df087d1f661d49fad31ff0f3cfa990a83251fa07d7972e448285454cb71a87d14fa3acb55aff8ad6484f1b66b0d29dc65e6767d2
TLSH
T1CCD02233620470BEA77C3EC6A4AAAC8FCB2A30281802DDD4B0E09898153E4AC0D07247
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58a350.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58a350.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c352c7a1204fa7237e7a0c472501115c33037347c7c2923a0dea66f0ec8baa76
MD5 c9eac07aab649e40e7a38c17d142bf7f
SHA1 ed80c21b4fac70ba7a57642760774ea82f8fc558
SHA512 777c27e8d98fb98c18a2f8f551d96c7292fa4b79be6a8ae574bb4fede41a9f1967bbae28c0254a67d0d9d3393ab7e105f520b92865241f9252b910223fa30da4
SSDEEP 192:sxZjRnyM/jK1Ml8MWOM/ffs4ETAdpmT2HhL6+WNBeXDyx/Y46VyGIgrasg:sxZj/uOM/ffs4E8HH2+I/E3g
TLSH
T1A352E851AA3499778CCAD209FA55BF13D6F55872D6500E48A9FCC91C00EAAED3317C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 e20e1ee188d494ead9b3acfe5da2e32c9f1450ecddee42bf41a361ed2bc5b7e5
MD5 9ce5863c17e08f3f2d4a449b5eb12f40
SHA1 7eebbe886e765aae994f2fd47429cb3683bb762d
SHA512 52f7e974b888dc45edee7986760f0153caf56fe850e80db12d0817e44e522d152d6df6144bf0703e37ba021169748eadfd606ca78f07b29181351c3e0eb03e89
SSDEEP 192:sxZVRnyM/jK1Ml8MWOM/ffs9EyPsNSjdpmT2HW6+WNBeXDyx/Y46VyGIg5/asg:sxZVZuOM/ffs9EysSPHHb+I/Etg
TLSH
T11562F952AA2499778CD7C209F955BF13DAF94862DA500E4CA9FCC91C04FAAED2317C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 83035fbd8e8a3f215fff5ac0509cd5888e1a8747fb6d9d1c48522a47ce41c5f0
MD5 8fad46749c56d7ff3bf8d3abbac0e46f
SHA1 9da5ee05f417364796030e3cec2e69347573648b
SHA512 74d19e9c0ea9be3050ba0a63ce4930e13ec2cf469ff62a699c1bce28a3302a8ce57c79c663859bd97a81030ed02390cb498ac5521fb10ad8d729e40ad5dbfdae
SSDEEP 192:sxZVRnyM/jK1Ml8M0cBzM/ffs9y6PsNSdddpmySc2HW6+WN8TeXHVKDyx/Y43Fy9:sxZVZsmzM/ffs9y6sSPGHb1AI/XzQVHd
TLSH
T17882E752A62489B78CD6C609FD65BF13DBF55862DA500E4CA9FCC91C04EAAFD3207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 ed98832baa3f3c7a6a7a6f4c13445771583bb0b60a86688f813693b7054c110d
MD5 c9d054f28b918c4d63e1abd8bebc8c0c
SHA1 1d19d61b48b3c540ac8dfa569fca45e9722920ca
SHA512 d6076bad8b840254ff575e8ecaa90c994372e564afa3c5e6a3f642def8c4c534fca580ef44f20bdda0f89f9756d543b0f19d15b41b241b49331c1955ed5a0d36
SSDEEP 384:sxZV0qdmzM/ffs9yUsSPXHbTPHI/kzQbd:sNjdmzM/fUyUX/HbewQbd
TLSH
T13182F852A52489B78CD6C609FD64BF23E7F55862CA504E4CAAFCC91C04EA6FD3217C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5baae7b00a292954bb3bf6fa549e9d73b5305caa4907a9f9152b606d8ad3f0c4
MD5 bcc291290de3f74b61a66201b1776f01
SHA1 0fa5db90faa2b793821f10052c4de9025c3bcf5e
SHA512 b406190af8dde887794d53ed4f6ae3f5f6eac244107fec3df926cbda17d1b151b691938e5fd6cb053fdd7ccd1ba6cba0a61a130e9efe2f9a167b1461067080ff
SSDEEP 768:3r8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdQroJkRUnw:3r8iJPNWvx76ru1jahALocd7cUw
TLSH
T131D2FB3B680CCB7E4F844E9CEC266F966DE801CB5B984D5447FA884C03C76EA512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 eb0bcd81b0e08dad461f7e39796590694b5ba579fc73cd8eea1d1427c6058a67
MD5 ad8c84bbca03b35a6a9bf9da4b9261cd
SHA1 fc0a9efa891eebfeb1a5b0ac0ca6ab80879565a6
SHA512 eecd6e7463f64ff0a736adac5a77d93d8be3fe5856c441adbb9786435ae23c9ebf6a1a8a2b166652264c5a5bc2ff001c643459dcb553b88dfdc7b55dc1aeda4a
TLSH
T1CDA002B046C46409C44213F529D601816324DC105226A3CB81E005FCCC54DC04BB300D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 473acf905ae2afbc795b9835716faf593b65f72fa0d185b1e075fcc3e8f9def9
MD5 3a6786ce8eb1b464f8faf7904b05005d
SHA1 00f8d72b599b4d2aa81fbb08e8c1794a047b8ad7
SHA512 535dc37d1e2bba9827426d9b765bf54b1df7e729963e9d3b632240d7ad325fbb018355ad656ef62cf1088bdeda696a2d4eafc751fedfe9720078d50b5c0e8b5c
TLSH
T11EA0023423C80806C01661F5155282C21200AC101A001746F0E5188ACD50580855110D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 1KB
SHA256 e89e9357fe2544f029c546b7eacc2a47be2229772684958f5a935b911937a388
MD5 ee4646dd1ee1b86a850c7fe65ad04eac
SHA1 30c2f0df64d24edf4d837286715cb7f45d3f6c34
SHA512 5b2f2771af92e66202c27fe5a35ee1514d2a27b0e83279beefd991b70e7fdc2042a54a4ce916bd00aa5481ee368f2be5d58c1ef8871fa3e11ba9a2172063442f
TLSH
T1702175484EA08D9FFCE045B21132A4B4737085EC1315B713583C31316E2775A26079EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 3KB
SHA256 04f64a5b8c4809a73ac1a10214ce721e5abbf9eefd6c6bbe7e670f16ca2b42dd
MD5 8079b61d3a4233da456fa76898dc195e
SHA1 1a80d1916e72b8898c18b552dc0b6c224c4007ac
SHA512 03367cf6540c21011d522741e6e45f1a0933702ca82bd776c253cbf98c3cb2530469f4b64762822a44ac5f0e79e60e5a81a6ff7323fd83cbdb6f8390bc8eef2b
TLSH
T1EF51C70E4C464BB5CD6856B21CFA1C91333861CE16887D1B91FCA2B5ACD37A4BE4918C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5825d3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe5825d3.TMP
Size 1KB
SHA256 eb87613b60309cafe3834c14eadcfc5c47baa3ba3c3719497b548bbebc3ca8f0
MD5 c8c25ac6becc1d021e5343292310427b
SHA1 f18dac47b8c096cdbff6cfdb6cde712a28f7a977
SHA512 f88f18bb470db6a4e44d51a339b9761ae37ad936fac9a02c4a1a53c5944953ded00981f5cbe5163b6162e9273192f59777940230c6582fa470d1c91eec704d91
TLSH
T13721584A4AD44D0FF8C0507B1963B4F8733089004711B3D3647C62355D25B8D1B4F0CD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 19f2db212f9d096b6126fa0c548c1610e4708a098ecf3239fc3e4d1f0d34e2e4
MD5 cd344fbcb92fc14b0bfa951f457fadcf
SHA1 5d13acfda499e46286cdc80ebf05636cf13c3ea2
SHA512 9fbaf46e31c079ee21b1a0be80060ed62b96236fed31a6d65436276dc63a834fb17c4128fc044c0263dc134afb85874b365a291d744a50f4e9090898e3fe6db1
TLSH
T17CE0C0F72EF72844FEBF63E504709CE40245B459D544BC8F5417EB8334A13523406C22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e5205795426ede2f1402ce1b4bd3948c187303bdf6b5226abffccca24a08b1bf
MD5 9430cefa905cb848157daf07d84f88b7
SHA1 090ff3d0bced8005a3709111b9219babfcd042bf
SHA512 5850027b65a5790d04a74da147c2732470d3485cf1bd6c9ff4a85d65b904c6043b9323961dc9e7f28edf62c0eedcd4553aafd083c81814c4fe955bcc4fe98593
TLSH
T10BA00251CB5D94E1C5010775F47905DC62218AB84605361280FD1594899539041F220B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588911.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588911.TMP
Size 48B
SHA256 09d7256a378048c87459823c9e5b602aa8bbdefb11ef134aa340b4677e99c920
MD5 6760ae0acf8ef21c612307caed9465b1
SHA1 4d11c96d3e72f4c849d43e49aea8707795ac8712
SHA512 65eb94d235f9a38b07f0a583913718d6b8e5811bf53354ecf687b29d698eb8dc6fd9a9964066ea29a06f767a116045557af40456e0fcc89ca65f3e98e22ba7f9
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 667e9e57fe4c2305888dbd643d0f0acce09dae29b1bd64619cdf7c439e2d1b1e
MD5 e62671c42a88992ed035c5b2fa2c33f0
SHA1 71197f041c60c186ef3de9b8b649acafb5ee1cd9
SHA512 416075c8650b7e8530da81c832a1abbeab2ca8631ce1f3e444cdbda0cff85917c67fa97d8b9f871d99bfb416c4f3b207dc576f611e2542791724fc48de9f1c71
SSDEEP 24:KdDf6ZQaVdJ5J49Z+EIjFJKiWhaLJ1EDZSmLMO8Z6yXYRfcHuaLdzfn43b++Ij7C:Kc0I7KVScvyBOIXKnqAPYIvKZ+cny3
TLSH
T1D191570171FB56537DBE641892D0A72B4B83B1A37518E46B3FA810760F66E240DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\1c0d46c3-0e9e-4141-8345-cb445dda53c8\index-dir\the-real-index
Size 168B
SHA256 b85f7404a7b69bb1f9be2e9b902c06ef9fb997c6453c131aeb7605eec838c2b7
MD5 baade1170c77820d2dae6ac32e393938
SHA1 d2803ef6ab65c72daa5e9fb6d5d78fa2613bbe25
SHA512 49b45914cd4dd4782150f4cfdced3f2d250916ee2d0ed9e48a431e2ae2ad4c2378f9af5654dee84fd64243dbc1051ada702657ca1d460040d47dee16e427ad0e
TLSH
T173C0925CE4B50605D16102B5A9BA0AA277381F58FE86521261E176A9B04B06549A31B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58edc6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\1c0d46c3-0e9e-4141-8345-cb445dda53c8\index-dir\the-real-index~RFe58edc6.TMP
Size 48B
SHA256 85d8735c183f682f3122e01c5198df7ca2a7f6c61fab304b0784d3d1cca47333
MD5 5aad691a7d973ab498a432fb7ce43eea
SHA1 b8aeb8bfc22cde4239086422a0cf22a9448c05c0
SHA512 cd5448432f8554558f7b8c3d07399a70873462314908ae264c51a22d69e759dc2fc8e78ce41582e0b3c04d1f303a76e61e223494266442588cc67a9f6c1c3135
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 149B
SHA256 78306ca2107f1460a180b93ca1bafc111ea7da1c111004ee8bb784dc274b4020
MD5 59dee16f683bd9cabf66bbddebba92b0
SHA1 78f98c02114eb868f2cc0ceafa0702aed56d3195
SHA512 8d2fc4bdfb63b6c1d73466a7003a1c1543a92e17f4744bae112a7858956793256d05606d07d95b2e46186831a54d099c8c1eca60dc1ff4c9e68a067adfab155e
TLSH
T13AC02BF70B20848A4F30DBDC1018373CC00BC14C4CC0DDF49088A003203CB374402976
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 74B
SHA256 dc3fe778aab2f1384a4b17ee2879a40cb097b936caabcbb9b3a025f20c6ae9ab
MD5 b86f8fe970cc69cb6ef0a19af79ea847
SHA1 36169efd4638ae69434aee68e71c30a275aea5e1
SHA512 7cae05fc0561022b1d82c9bf885ee03979a84343700a28f597d5beda4efe04fdcf42ee690a5dc0eb5710d55cee06103fe0f5abb13598534d6577376a09ca6ce5
TLSH
T1FEA002F70941809E8F34A9EA2038BA1DE44B828C8CC0EDF1C448D046323CB330003990
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 155B
SHA256 44624634752e2ba398c49d47cf7296439c2ce5d400fc8bacd8f83aa786313926
MD5 d5f1bd8320476a727b882be582b1a68f
SHA1 5b6633d785913fed28546ea1fbd144de14ae05cb
SHA512 c574c6c0bc5b93c23a20fd1e41d69f3ea2fac39637b17bb5650ff3eec0a0242d856cf8abc2b5cd83cf70b196d9e626715ac320ac784cb9cd5df0246e082ea3c7
TLSH
T10DC02BF70620448A4B30D7DA1028372CC01BCD4D4CC0DDF49049B003303CB374401974
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5898ff.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5898ff.TMP
Size 158B
SHA256 e248ad58431366284ff6766ffc96f3c4fe6e81827f4c7baad76b6982f9fa4a50
MD5 2bab54d4ad35dfdd61335d40bf6a70ac
SHA1 ace688c329e36b4017b319b87c5c0809bfce2c83
SHA512 ea910ce4ade8bc9c11f4559b2a51a58a3a5789350192e56e7f9a30d3bb2ace86469e39d150cc139d08534ce942f854251fcf2f7d3bc4ab608379903092fd6f2c
TLSH
T11AC08CF3A67290A9AA70D8D62024304CC9A3AE8E9CD9E9F19450B0413178B238102E24
MD5 SHA1 SHA512 TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58ed88.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58ed88.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ff711b65645e2ae2993db011075ca8a6c401413434ddb286d882fb109ee9b82c
MD5 69538028f9d5fb26d0e693f01cf9dd54
SHA1 75351c869184c3a7176b86325ecde5eca69b3bbd
SHA512 e1ab8a3a7ca20e066065cd022e891b6d707b429bc082112a61f1c4bf33932dfc46980494fca105dc632d01f7931ff2ccfd04d87587d1765e5e35ba2668358f60
SSDEEP 384:rZcIhsN+rT2CRNXq2kmKF50X1puL99zzp:zhTqb5syL9xzp
TLSH
T194828D719CF8687B68F3A585F48B76174FB8C423EBC82F8098DDA71C05EA598030B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 3b12122713d776938f7d3b1faf9a1086828cdb86c7afb814010fb1b7f4429a84
MD5 b39e67c3d3ef8c795f0e110f89239285
SHA1 4480f1dc103866170842ae801b11188c1a922706
SHA512 d49530b04ae1c298fc6584e9e72329c0402af2e915fb9fb6f42e1e3fbab4aa3136e93b802e9d217b817e5a1c3355ad4a1d2306a4b6f6af2905593acd22870640
SSDEEP 384:HiFiZcIfsNO8TUNTUlIluT2CRUZ++I+oSq2kmKo50X1puL99zzp:CFQfnwgL++I+oSq65syL9xzp
TLSH
T1EDC2F6F248D7953AD9AE9B47E77E2D134EBCC063B6846A50B7C8560CCC961BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4a0da7372a0cd97957e5e484e1dc1d9445037cdce06355503699bc6dd3fc07f4
MD5 a91ad4b582d694e1247e877bf13042c5
SHA1 30bfdb06493c875f8bddded7227b114e80b666d0
SHA512 48349f7a264b002046669c3d6a5a1fe8c76f3ce3d1ce73a660a16b7747b9adef60abb0961953a128e29a7a716519155da8ad990e85fba0fb1306394e85af89a4
SSDEEP 96:ZqONkhQsjpfmUTmDK5ih/cIPURHl8h4otop5e5DYBhPwivh50xy0SFYKHAxEYe34:gONp6kDfQmiUyIsZ903cmxQido8U6
TLSH
T11F02F834AC786CBB9EA3AE4AF44777175FA5212BEA812F84D9E81B1C44D764C1303836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a43e5731e87087426944a36a0e4483a12734eb0a170309abf3358b93ab499444
MD5 1ce348a4e307718237a27e790ac21f0b
SHA1 4cd729242c90098f381a44ae6db70db9d28b6819
SHA512 72d0374a6af0b8882d3182309dece46d9358009fed4ce758346ae3a64f11afb39e72908f5ede03ae78080001beec03a4ed4e39c98bc601842f07c60fa51f5df1
SSDEEP 96:hqONkfQsjpfmUT2K5ih/cIPURHl8h4otop5eXDYBjPwivh50xy0SFYKHAxEYe3Dq:IONX6knQmiUyssT903cmxmFbcRcqnU6
TLSH
T1BE124931A8B87C7B5DE3A881F48336135FA59127DF892FD0D9DC2A1C05DB69C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 891d0169c9a5633324a7a1f8e23c7b02b29af9780be314eaea69deedca38694b
MD5 3820a92a968b34a56d0c7c8d73adb3de
SHA1 588bd634dd2dae4dcec546d2d838da0a18ff56fd
SHA512 1e434e238e1fd9688e8f651f4a2ac85ecb1488443a39936059005a33bb9ea1d706e3617db45a5969b3b422ad13ab455933142516ec8617a0461fcfe5f9b46c29
TLSH
T19AE00906D71241AEC128473440972F647BE7E02026B207875B6102692C6A3022E30BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ef12c09a35af2f19c5579a3c183756ea38d6003c5246e71f728a951eb254694b
MD5 c7ded193cfb24a13d5aefc5ba09ff590
SHA1 c9b79760ad8f75ab22ad1e768d511ece1e3d5c06
SHA512 f6484076b50c18a5329d390918c2148baac46d6b236c84c55f6ed3fdebcf51fd3550a892e9b6b8275c8fb69ce2a5ff52b0f87e90dbd251c76a0e1e76138c310d
TLSH
T18EE00106D71241BBC138433400C71F747BE7D02026B207875A2102781C173022E30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 54cc70bdfdfd2f0d81f434aaa50da8640e3dd849c753803fb9fd15dc82911b2f
MD5 411a33bf10f08850165705e71512e09c
SHA1 339e55562e28dd8fff964de23e475d6e8ffde334
SHA512 44d7fadb0d4a7c886357f775dc5e2a5b6d320a9c31c2def882e2f9541085f1b9acdcadfab0304a5237059b994d6338ec89c9a7446297132285de0d9d82b85112
TLSH
T1DFE00405D513017DC13C0330004715745FD5501015F105C4553103540C133011730FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe586de8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe586de8.TMP
Size 392B
SHA256 981a63718e6461543e3aa511f42e28a6ff8197b0d7fbf011e1ef3a1f04a752cd
MD5 26da676739de0fec103f2fc3495d19dd
SHA1 5f2e32a989605e6b191f31c5e8528d18df5a15c5
SHA512 4bb044c9a7b532b9a479f308c6d0acf88bda3396b6edfb57b3f9447ed1cb3e7d1a642851e0afaf293ed42056a79bf5c63de0ba86360afe0b1fa2d842a6d6cbbf
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 95ef870c310a7640df5bbd10539c8de5bac94d5e983d2871911044c2d69cba94
MD5 1da1be84e7c58aafb6be06b4ab2b5b56
SHA1 6f58bfa7afc46f079c862bd9713fb4ea1758acf1
SHA512 a7b97f60df0e9360ffbce2e6d830562e37b6ec18896b67ca2e243025ab9ae6494f37e8fe03bc21198e2ebcdbba38216379dca3b5e47e9abd0f3374d2a6266e8b
TLSH
T10041264DB6F91158B3B76E5BABF7A86D447E78732E4B80AE10010E4E0B66A00D871737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download