hxxp://Roblox[.]com

Analysis

user interaction
yes
max time kernel
898s
max time network
897s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/09/2026, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Roblox.com
Sample260903-xthr4aek21

Score

8^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
77	1440	msedge.exe
407	1440	msedge.exe

Executes dropped EXE 3 IoCs

pid	Process
4528	RobloxPlayerInstaller-MGHFM4WY2H.exe
3372	RobloxPlayerInstaller-MGHFM4WY2H.exe
5860	RobloxPlayerBeta.exe

Loads dropped DLL 1 IoCs

pid	Process
5860	RobloxPlayerBeta.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxPlayerInstaller-MGHFM4WY2H.exe

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
153	discord.com
154	discord.com
155	discord.com
157	discord.com
152	discord.com

Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

pid	Process
5860	RobloxPlayerBeta.exe
5860	RobloxPlayerBeta.exe
5860	RobloxPlayerBeta.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\smallWhiteCircle.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Motor.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\DesignSystem\DpadLeft.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\VoiceChat\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\WindControl\ArrowUp.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\COPYRIGHT.txt	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\models\MaterialManager\sphere_model.rbxm	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\fonts\Ubuntu-Italic.ttf	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaChatV2\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\configs\CrossExpVoicePatchConfig\CrossExpVoicePatchConfig.json	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\StudioSharedUI\pending_withbg.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\DefaultController\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\Controls\DesignSystem\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaApp\graphic\music_tile_placeholder.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaApp\graphic\Auth\DatePickerDivider.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaChat\icons\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\fonts\SourceSansPro-Light.ttf	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\fonts\SpecialElite-Regular.ttf	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\particles\explosion01_implosion_color.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\VoiceChat\MicDark\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\models\CrossExpVoiceDataModelPatch\CrossExpVoiceDataModelPatch.rbxm	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\avatar\character.rbxm	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\avatar\heads\headE.mesh	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\DevConsole\Filter-stroke.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\InspectMenu\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Settings\MenuBarAssets\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaApp\graphic\Auth\FPSBackground.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\StudioConvertToPackagePlugin\placeholder.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\StudioSharedUI\dropShadow.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\VoiceChat\MicDark\Unmuted100.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\fonts\TitilliumWeb-Regular.ttf	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\CloseButton_dn.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Input\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Settings\MenuBarIcons\GameSettingsTab.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaApp\ExternalSite\youtube.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaChat\icons\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaChatV2\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\fonts\BuilderSans-Bold.otf	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\scrollbuttonDown.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\DefaultController\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Emotes\Large\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\PlatformContent\pc\textures\sky\indoor512_up.tex	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\LuaPackages\Packages\_Index\FoundationImages\FoundationImages\SpriteSheets\img_set_1x_5.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaChat\9-slice\chat-bubble-tip.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\avatar\meshes\leftarm.mesh	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\sounds\action_falling.ogg	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\localizationUIScrapingOff.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\ExtraContent\textures\ui\LuaApp\graphic\shimmer.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\fonts\RobotoCondensed-Regular.ttf	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\loading\cancelButton.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\StudioSharedUI\TransparentWhiteImagePlaceholder.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Chat\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\TixIcon.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\PlayerList\[email protected]	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\VoiceChat\RedSpeakerDark\Unmuted0.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\DevConsole\Search.png	RobloxPlayerInstaller-MGHFM4WY2H.exe
File created	C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\content\textures\ui\Lobby\Buttons\scroll_up.png	RobloxPlayerInstaller-MGHFM4WY2H.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1440	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 6 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox-player	RobloxPlayerInstaller-MGHFM4WY2H.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134329361458688471"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 41 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\ = "URL: Roblox Protocol"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\DefaultIcon\ = "C:\\Program Files\\Roblox\\Versions\\version-e7d81637d42c4b23\\RobloxPlayerBeta.exe"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\URL Protocol	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\DefaultIcon	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\DefaultIcon	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command\ = "\"C:\\Program Files\\Roblox\\Versions\\version-e7d81637d42c4b23\\RobloxPlayerBeta.exe\" %1"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files\\Roblox\\Versions\\RobloxStudioInstaller.exe\" %1"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\version = "version-e7d81637d42c4b23"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\ = "URL: Roblox Protocol"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{08F9F36A-D0EF-4F47-A6C1-395D969D87FB}	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\ = "\"C:\\Program Files\\Roblox\\Versions\\version-e7d81637d42c4b23\\RobloxPlayerBeta.exe\" %1"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{1C11685A-BF87-4160-9CCA-D97478C76345}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-9fe94fb0e9d84c25"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\URL Protocol	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files\\Roblox\\Versions\\RobloxStudioInstaller.exe"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\DefaultIcon\ = "C:\\Program Files\\Roblox\\Versions\\version-e7d81637d42c4b23\\RobloxPlayerBeta.exe"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell	RobloxPlayerInstaller-MGHFM4WY2H.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command\version = "version-e7d81637d42c4b23"	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	RobloxPlayerInstaller-MGHFM4WY2H.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 7 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4528	RobloxPlayerInstaller-MGHFM4WY2H.exe
4528	RobloxPlayerInstaller-MGHFM4WY2H.exe
4528	RobloxPlayerInstaller-MGHFM4WY2H.exe
4528	RobloxPlayerInstaller-MGHFM4WY2H.exe
5860	RobloxPlayerBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of FindShellTrayWindow 54 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe
2880	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2880 wrote to memory of 464	2880	msedge.exe	84
PID 2880 wrote to memory of 1440	2880	msedge.exe	85
PID 2880 wrote to memory of 4996	2880	msedge.exe	86
PID 2880 wrote to memory of 4996	2880	msedge.exe	86
PID 2880 wrote to memory of 4996	2880	msedge.exe	86
PID 2880 wrote to memory of 3616	2880	msedge.exe	88
PID 2880 wrote to memory of 3616	2880	msedge.exe	88
PID 2880 wrote to memory of 4500	2880	msedge.exe	89
PID 2880 wrote to memory of 4500	2880	msedge.exe	89
PID 2880 wrote to memory of 4500	2880	msedge.exe	89
PID 2880 wrote to memory of 4884	2880	msedge.exe	90
PID 2880 wrote to memory of 4884	2880	msedge.exe	90
PID 2880 wrote to memory of 4884	2880	msedge.exe	90
PID 2880 wrote to memory of 1540	2880	msedge.exe	91
PID 2880 wrote to memory of 1540	2880	msedge.exe	91
PID 2880 wrote to memory of 364	2880	msedge.exe	92
PID 2880 wrote to memory of 1540	2880	msedge.exe	91
PID 2880 wrote to memory of 364	2880	msedge.exe	92
PID 2880 wrote to memory of 364	2880	msedge.exe	92
PID 2880 wrote to memory of 2152	2880	msedge.exe	96
PID 2880 wrote to memory of 2152	2880	msedge.exe	96
PID 2880 wrote to memory of 2152	2880	msedge.exe	96
PID 2880 wrote to memory of 4356	2880	msedge.exe	97
PID 2880 wrote to memory of 4356	2880	msedge.exe	97
PID 2880 wrote to memory of 4408	2880	msedge.exe	98
PID 2880 wrote to memory of 4408	2880	msedge.exe	98
PID 2880 wrote to memory of 3356	2880	msedge.exe	100
PID 2880 wrote to memory of 3356	2880	msedge.exe	100
PID 2880 wrote to memory of 3356	2880	msedge.exe	100
PID 2880 wrote to memory of 3388	2880	msedge.exe	102
PID 2880 wrote to memory of 4500	2880	msedge.exe	103
PID 2880 wrote to memory of 4500	2880	msedge.exe	103
PID 2880 wrote to memory of 2944	2880	msedge.exe	104
PID 2880 wrote to memory of 2944	2880	msedge.exe	104
PID 2880 wrote to memory of 2944	2880	msedge.exe	104
PID 2880 wrote to memory of 4780	2880	msedge.exe	105
PID 2880 wrote to memory of 4780	2880	msedge.exe	105
PID 2880 wrote to memory of 4780	2880	msedge.exe	105
PID 2880 wrote to memory of 5368	2880	msedge.exe	111
PID 2880 wrote to memory of 5376	2880	msedge.exe	112
PID 2880 wrote to memory of 5384	2880	msedge.exe	113
PID 2880 wrote to memory of 4032	2880	msedge.exe	118
PID 2880 wrote to memory of 4564	2880	msedge.exe	119
PID 2880 wrote to memory of 4564	2880	msedge.exe	119
PID 2880 wrote to memory of 5412	2880	msedge.exe	120
PID 2880 wrote to memory of 5412	2880	msedge.exe	120
PID 2880 wrote to memory of 4008	2880	msedge.exe	122
PID 2880 wrote to memory of 3556	2880	msedge.exe	123
PID 2880 wrote to memory of 4008	2880	msedge.exe	122
PID 2880 wrote to memory of 4008	2880	msedge.exe	122
PID 2880 wrote to memory of 3556	2880	msedge.exe	123
PID 2880 wrote to memory of 5880	2880	msedge.exe	124
PID 2880 wrote to memory of 4184	2880	msedge.exe	125
PID 2880 wrote to memory of 5624	2880	msedge.exe	126
PID 2880 wrote to memory of 5624	2880	msedge.exe	126
PID 2880 wrote to memory of 5624	2880	msedge.exe	126
PID 2880 wrote to memory of 6068	2880	msedge.exe	127
PID 2880 wrote to memory of 6068	2880	msedge.exe	127
PID 2880 wrote to memory of 6068	2880	msedge.exe	127
PID 2880 wrote to memory of 3016	2880	msedge.exe	128
PID 2880 wrote to memory of 3016	2880	msedge.exe	128
PID 2880 wrote to memory of 1764	2880	msedge.exe	129
PID 2880 wrote to memory of 4528	2880	msedge.exe	130
PID 2880 wrote to memory of 3372	2880	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Roblox.com
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa0554c188,0x7ffa0554c194,0x7ffa0554c1a0
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,4167691345237262815,9249016879405976667,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1900,i,16460129253706043225,15029160206992647118,262144 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,8233525864459953901,13453673060186858057,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,11849675228210725293,17570155645617815051,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,4962461796305525142,9280418717573410537,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,13200305470994737437,13090152859874274260,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,15647019692798507312,7707184107243635342,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5104,i,3127212366810890511,1974694445518596621,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3424,i,13795208430291264234,6757060734062469935,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3944,i,4721631370048329700,5972835253417680860,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5904,i,7257640739504013734,10262847300509340711,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,4121927969180806305,1362351780941672108,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,4121927969180806305,1362351780941672108,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,1231966716551402047,2089117820942634208,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3532,i,16394469952387340916,15686415768595054707,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3708,i,11948561562644411409,2327795209043987504,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7300,i,17874216538436276969,5905385442125125842,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:8
  2⤵
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7304,i,5778415573565492915,13571963999283203108,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7308,i,3841807095777211147,8562296466758838649,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:8
  2⤵
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6952,i,62387020624802844,8899476691476413232,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7108,i,1196687689966653953,817394905869222051,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,9423770688887526694,10968869628312646873,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5524,i,7490920906398979005,11998239700057267577,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,7491844226957062562,13593714752796205635,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7164,i,11366261178631977383,4687139903528051810,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=7296 /prefetch:8
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7916,i,3729230892723333204,6282055260218310148,262144 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=7924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5460,i,17707294425904298763,67430079524911760,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5288,i,1621740883860524199,1337668596498642560,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,6980873640398425092,1853356937118962472,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,11525977421521762179,7228741366937904915,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1764
- C:\Users\Admin\Downloads\RobloxPlayerInstaller-MGHFM4WY2H.exe
  "C:\Users\Admin\Downloads\RobloxPlayerInstaller-MGHFM4WY2H.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:4528
- - C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\RobloxPlayerBeta.exe
    "C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\RobloxPlayerBeta.exe" -personalizedToken MGHFM4WY2H --deeplink https://www.roblox.com/games/205224386/Hide-and-Seek-Extreme --webBtid 1788462541843005 --downloadSource installer --authenticationTicket 7xkei5ZQ2BovbutYQqEIDa8Oo4VlfMPKmDEWHvrpA6wdcJDG-35A1LTIpM14LSC3ueIY0fRDkNxz4-4T-rDwUz-GhlfPRjU0VJ_dkTGAhFjxvs1fLDwH8LPJ35Pc9R1pNwdCoCdEEPjTLXys9vA6are3yAIXO1Ah01EQTieYv-qJSzIyTcPNv8NATN4tpdOW2glO2D4yiI3SVNL62hS5y0BM8_JsSaUHU9FHgMAmonL2A2vTo0Yv7Hn0reahtfgtOe8glWK-0uoMuVmAOY-OrCECkMMnWtkACtUNekJL36pJfhnIBcL7E0GUeJcBlXZUSArDUGjj6UbYN5A_t0GLnE1IT52fTOMA8diUE9qzZsW5jKHGyRhN4Kliqx6pHhLyMrGi-WNaQdbObt-pECYso7XaEfzE5L06RAyAXWQujUfN9K5nFaTyD2tv8hU6a8DAxJPjXj-m9ec00f2aw-6L_ZNdCapUnS_7E8km708ilWRH1yIkGG7HLYrEhmPCdyB8cxns21JcIfBKrLELxEWPEE0m0A1Bvs0i6FrsRYO1qDaR9mfN4kDo1oB4Yt4H7g7n -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 4528
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - Suspicious behavior: EnumeratesProcesses
    PID:5860
- C:\Users\Admin\Downloads\RobloxPlayerInstaller-MGHFM4WY2H.exe
  "C:\Users\Admin\Downloads\RobloxPlayerInstaller-MGHFM4WY2H.exe"
  2⤵
  - Executes dropped EXE
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,3621273386693253570,3994298647762352364,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=3944 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,4700932449720510057,14508674065954590573,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,5919793988120137463,5975245749978214246,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7852,i,4623032094531829767,8506710624111618715,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=4288,i,6509400407346712365,12753684113475373508,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7856,i,8596214699829021999,9770314245739558753,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=4288,i,17506958013671218512,5405160797933116051,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,17648117824437770751,9460300420440218055,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=5176,i,8557174646749221484,4338791287655993119,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=7924 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=4420,i,5933239083066512815,353521775675956214,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=8060 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8248,i,16785020712639995126,11202763974691586371,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=8280 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8244,i,4896295220385135347,5095163550587128308,2097152 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=8432 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9172,i,12862646850090407253,13203577925979961201,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=9088 /prefetch:8
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,17159333594962212006,2039537230409456492,524288 --field-trial-handle=2308,i,12017229811440022038,5488955970155358278,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  PID:312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

RobloxStudioInstaller.exe

Path C:\Program Files\Roblox\Versions\RobloxStudioInstaller.exe
Size 9.6MB
SHA256 7a3cc75779e5d17e093e9e6e249c1022af0339fb9bb59030efd3a7b7ed7c4088
MD5 44b95492bd8693f310fc4b2c4fbabe53
SHA1 cda7cb64accacb9170ebdc6d7d876a6b46d29bbc
SHA512 47c612d2ec39fba90c732ff5160ec290499e59f7c578c1d45d5d205abc9c28514681a0bb98d0320334ce649a047e0ca99137dc3ac9a7eeebacde82797701ac42
SSDEEP 196608:fU9iHrHJbgONLiZ3V1ZbmsxvqfkIu0akVZzZC4qJv:fNHqOUbbmsxSfNu0akTI4qJv
TLSH
T149A6BF22BA00C032E8D200B2D6BD9FFA993D59350B3954D3A7D45DB95A305D33B3AB5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerBeta.dll

Path C:\Program Files\Roblox\Versions\version-e7d81637d42c4b23\RobloxPlayerBeta.dll
Size 20.3MB
SHA256 ba16843aff0ae092f7b5ada3cfa5a46cdc08a8c4d95854108939c6e7b299f49e
MD5 c915e742f16468edc1bb1337904c4fe2
SHA1 08fc874ece1c1ff330de49f591c2d05467e81432
SHA512 2892972459dcd2b182b05fc20797f81390dac4fe34011ccec6bdb5d8f00c51a5c5db9d46152f3f9d3fd51a9ce432e0fe97ff5db5b668b865eedcfc4831c322c3
SSDEEP 196608:7bkm4lWYZk1uGwLEit6yL6yC69Wgxpz9svGiDKxZl:7bYEQ0uGjUjL6yC69WgxpCOiDKF
TLSH
T11827BF4EE9D70AE8C6715470D0AF17E3DB22308C4A6D6EF78AA50121367369D2219F7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2b697eddcb2b07f8539bfb3652953b0a60b5fe79caaa7bafd3e57283f337ae14
MD5 941e2ecafe7396f8e97c401afcc3b3af
SHA1 31446a30ef45517406a817809c058cb4d0f8977b
SHA512 222c47ab976196c3e2f6ff28796c492c670705750f2050ae0b523f8bda0f71b8f87e5338b508def4ce9eccd960b940f81d1f8e67bc05678f8080d5f069521c97
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 65ef91732de1ca3ba3a63260f435e91d06c819ffc5fc4964ceafde11e690e6d3
MD5 d13184e72840d07d02f2cd1fafd21076
SHA1 22a9bebb98f5bb3dad16fa929af8e4c11ecc6d6d
SHA512 fb36291e03f9a535ef772905117ad865f9e159eaf65cc7d98727fa9a977483d9dcad21358f2c21f3e0bab5dbc665586ef7d3aef3b395c2446e6dd759ecab4e97
TLSH
T186E0DF8814C9C33E9684E4479165C70C8AA13F1F92C8AF2E270188CC7415090B7E26B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2473dd1a601010150c33cc5b45d9609e732ee851e65dd5b2796eae298eb65af0
MD5 f4b1a9932e427e436f4449da3661673b
SHA1 17cc9ae1b60b0b1b3cfc0caf761f9ed39568d278
SHA512 0a86805e42c7366cd1c6556f01213e04f42100392981d4bb59495a80fffe5a05c380f739cc467293860498409d1b8a6e0f55d9af6a6765ab059870b769bd20e0
TLSH
T19FE0268414E9C36EA600F4478268874CC2E13F0BD3CC7B6A770884E83101940E2C25B0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 22KB
SHA256 a14f0cff05f283ecc9ea6513400685c0d46ed8814537769216ae106398264766
MD5 d7fe3851922df245727597388a99948a
SHA1 80ffb83338c8a723b4e11b8821458ddbb0fe0170
SHA512 c922c50be7d7a7b58fad19ac3be0de1c8767b054850057459bff7886fe808d370ca955c69d6ba14f73872108727e37e4b99f67cc96a1faed9c06b8f82fdd00b5
SSDEEP 384:v6yq5FmplnwrX4/XqcwqzUGftdyK+B3lMzaofZIhmff4yGVg0Tp+fUnHkPh2itcj:E5FawuqRjGfrUVlSPfihmff4zVg0Tp+y
TLSH
T14BA2E176C9F64870C3D7845DA123864CC8D3601696B02D7EE1747ACF84A0EE8C6E1AF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 29KB
SHA256 3122e5edb4f8757fead0f67a0ce29303f1f5701cf5ed338e8b29aea4e3bd611b
MD5 dca5df822f3a389a46de882499773181
SHA1 96063667606d203d7dcade010c9c6f4f34887f93
SHA512 b0848aac18efc259b59f2a33abef0c1fbc82db58502291ab55591224311610a7715a4195aa48d27df7f2cffb95cd2291427d5802aabab4359c7b81045f3eae9f
SSDEEP 768:Dg0YaU0StnDGPmv1TjnCE2kU2a6B0vxYIszlNie3:Dg0YatStnKPS5jnCEVbqx14Tn3
TLSH
T17FD2F2E30AE8B2A694F6CB5D2CEAD81A70795C97D2CA82001DF0BD47D75D912F07A15C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 27KB
SHA256 82c48f7b7f0a07d1673c0e3d9b40375fb580225b8a65da846b0ccbd43a812984
MD5 9ae4d8edaf6b27014f3c7270d73b435b
SHA1 fde2fab49518ef5a96f78ec8b0bc5fefc2341d7a
SHA512 825b35efe6f36cda2ad975048cefc0f02c8e3fa286aa9c011805c330c8bb2fd414aa9f47d09a513eb0689b9bbabf4a8360880579db09a65086f801b58c84a3e3
SSDEEP 384:omE118numhpjS0yNbRNIdTaLSXPvxlRR6+JKSmF+CGlm6i0Lzx2NwP7k1uJqXwFx:oZmzjeA31RFmF+rNw91uJEwFVwC5SA
TLSH
T152C2F141E7152B8BE22ED5E47E9CC231873A486F16D3A043075C69EE3C6663D095A93F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 104KB
SHA256 495e17ceb16db5cfaa2a74b9d7c2b719bfaa50a92f38512bbb29ee62295a8586
MD5 58c8135e9e1779350abd69e907c3b964
SHA1 2cafd043661fae52241304559cd6d3ab68f14bf7
SHA512 0eaef2d731a69a317ef8f68f140b1b2ec6d04714598e81952938b16ae69b37e57f0c77dedaf89586a0acbee363ff03e91ceb51c46fd8e474b37e78b5c51aec4d
SSDEEP 1536:Nozd7HYd9e8g7cMFG8riSvLGDAvi63aeLHu5yvsj2/cUxRbincRpU53T3:o7HYdi7vGe3GkVDTLUEpU53T3
TLSH
T100A3126475E5C324E3EDC303B4B16C321C5B100FD9B394A1A99A0EF5E92A7F5308DB2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 204KB
SHA256 7b19034efa3bd20d53898d5994d75d59411fa3f1763d9f1da485d8d7e9e49d31
MD5 a0f2d93fd3836ac554f0fe3bb1af26da
SHA1 7ef04d570e64df2c3d35ff508602440a3ff0736d
SHA512 14633b33a6976fce0ebf42628a45ab83bb1f41c7fb849b2252ff17a1a63edd61973e557ec71c291db200ef1b19e126db3804532e3a896f29faa3ee8be5e7b05f
SSDEEP 6144:uwOTNgRo5WhyOFhfPrf7l2KXKTx6/mOtyC7XSI:+TNcKWLFf7l2v+VPXh
TLSH
T1B2242339A08CD05291CDD7E86D94349EF86E156F7206A2E7E80FB8F4E688A70E41D5E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
Size 16KB
SHA256 fc3977d2d169c184516de314eb5c88d748396839ae43c5ac2db9afb618a0b059
MD5 37f3872114c77170d343b701cb02f410
SHA1 fe0e539c1ed0b83fd989b801d65eb3021ee52e34
SHA512 4e13707040aadd14415156d90c90c2846b776260d285ad38309af4bebedc34dda744d3df10ce38a2440a8eeea29b46d4bf1cc4349681090cb9f7376eb6cf7f18
SSDEEP 384:PmiD7L/vPiOI8bjwWIPACH+XsqCkdYiZfVa5Qrjbp+:PmiD7L/vNIqwWIFecKd1Z4mrHp+
TLSH
T16772D0CBD6BF53638F5C4600BE18D435A0A7A3DF036CC84409B9669B2A11398CAA3A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
Size 37KB
SHA256 1e2bf8f2004cb363d29ac7c50dec12f9378c895e16ec31e9c7aa7b5d1de614b3
MD5 40e2f929fffe6d9ac5e71be8499e3a01
SHA1 84cd9f8b183853e9fe8c08c000fa764389354494
SHA512 eb3bedae9c907196176586b89c2690637211309f5ee342ccc6db8db70c870677e9b013e0c7119aaabafaea11e9c50a9adeecb9a78184a826f83013397d5e4430
SSDEEP 768:3rZBKoe7NpvVwsQQMDwg7RBVMPMn33iYDIEgxjxSjsdubwEY+3CtUZ:3sVwsQTUg7V4Mn3yYDIEgxjgjsdywmx
TLSH
T10B03F0B70E84E490EFBDA20A34493D1BFF598AB5348C268705E64099684CB48DDF363F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
Size 16KB
SHA256 9a4447bafffa7f28d381ad5718f011c7f0271654f6f4627c73339e11bb441de3
MD5 97e613d78061090d61cbcf90372f1ac5
SHA1 86900236e94f716a7c3adc08e362329b60829221
SHA512 7b8c594c17bcf2d708ce7f94a34c231b4003a1b176d47a991f67cfaf35f304b63089796e1d5e834e3ba9327fd2b336a69887e64929a8baec60ffc1bee8029146
SSDEEP 384:WIdbkdz44nsteqRGtoxSbDunQ+32pFdSLgk:WIdbkdz44sTRkJGnQk2c0k
TLSH
T13772E0FF23517938987BD9913E7E39C2E5B43EA3C0112EB8F225C95B4338BD9615A510
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
Size 18KB
SHA256 ba8634c01fca328b2993867ab9cd15d151f8469b87ec74a5d3972a0cddada6ea
MD5 2389773026dbf4ef2edba00dae0b7685
SHA1 5b9f73b5c5debb06fa4f1c5fe32f43379281c493
SHA512 1c907199879cca9fb897428801676987eb2fd8503b9ceca2ecf65de848bb8ce19522be446c7b03e67484265afa2db55b4dc0902743556f950d6e0d1bffc903d6
SSDEEP 384:5xhi6U2m+MDR2tP053G8OcoYdZ0eDq7LlNgqtGLp:ZBU0aIP088OcNdQNgqtGLp
TLSH
T12882C00139424979A5E25C6BF7B051B13B58EBB54CAE686B79C0C4BE19E52C10C73F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000243

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000243
Size 68KB
SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
MD5 cb3d1e69fbf9c94b15e92f2fa26892f0
SHA1 b8e5aff1547d49a1285e2e0c4cb43dcd9993f468
SHA512 0f890af69b223aaec8bbc753bbc626f6cf0e0660182e38871a03337f1eec7be6b47cb9d5034a3cb8c226feb6cd964d396f56fecf07257f3cbc13de642c175ac2
SSDEEP 1536:1RrPSv8UR94fNhLVxko8PojNVcL7tk9/yGeJ3GI:PPZGefNhLVxko8MrcL7fJWI
TLSH
T16E63026A7FAAA437FB2C87016FF23034D1F8FD579034042826515BB5A4578E92326F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000244

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000244
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000245

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000245
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000246

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000246
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000247

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000247
Size 41KB
SHA256 26b7f00ffe23f22e24713399178643f36cb5d006f3469dfd86b6ff95f8a63e79
MD5 ba148dfe6db2432a1a6efbbbdd9bbc5f
SHA1 75b0060dda4bbff073c035095ffcca7deaf610a2
SHA512 52cb525a9fe3dae8c24a2b30dfd7faf1baf21203dd84b4573bc107c2c043d4a3a0dc358517988ee55bcf53a2d22fbbac18162b1aa35f0da2c44fa6a0ebe54ddd
SSDEEP 768:fuCTrkbkI2/+/qaUxhXQp3YnIQSzPCX3lRT8GzWxHGRGwDqU9v5OC8cl:fLTQQnm/36e3YnGmcZxHahl91rl
TLSH
T1E113F2DFC79C1BE6392566ACBA2B816C8D101175D5DAD6C13203CA8D3BC4B4BA846B18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000251

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000251
Size 64KB
SHA256 49c44a97498af5cdc2abaa89ab61f43895326914e942068e4bcdd946627ea065
MD5 54c07aff64efbfa7cc409c2c39beee1f
SHA1 484508546a33fc90e6b97f6240601ecc135c362e
SHA512 39c0bbe4cddd7eb1b17c6690b580a650640a1aed61ab004092af6cc870286c13dbdd59df763b724b7b022d6d071a18f02cfa751710d38954eaa1eada5b9a1abb
SSDEEP 1536:xB3Y4uo7hjiARYSjFTG/EMsLZ+XvOqRTCQCQF:LAo7hjiGY2FTUEHZpqlCJY
TLSH
T16D530254E3EBCBC3CA9E0A554485D8309A87A8F287851EDFDA3CF4C74697E1C4E27509
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000259

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000259
Size 56KB
SHA256 90a9800e08f59779cdfc04d891519e9ba76838fc8f28ed6aae1258e50cb1af9f
MD5 3d28c4b6a9016d1ee1e03e0dbea2ec4b
SHA1 25024f0847044de65be244173eca45aee24f961e
SHA512 3673e3f14bfc244d9a0546b6d311f6fb49269f2c1c6024b7db110f4d1a25a15d97470570b017edacfa7af2baa6cec4fdddcc8f81b8ca1fd715ec08747425e53f
SSDEEP 1536:8WhbqfC+KFiJH6j7Ba4gQ51DT2S24xLpAmQxP0tYnNm9MzVTNlVh:DhbHcV6j7ss5JR0m+P0d94th
TLSH
T1ED430276163275D883AF16CA4C18F93DFDE2DF2B7310259DEC5BE45454929C2EF92802
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000267

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000267
Size 285KB
SHA256 957f2aec59b1e24498736ac1895067ba016bd2937cedb1b6c70e0024402aeb8b
MD5 eae037c1b6a040a280ac067ecdc651ff
SHA1 0be39fa7a3f839bf6aa233d4935eb6c933ed96ff
SHA512 9f2412fca5baee77e643759b3b1ff852cf385c386bf96fa803cd4bf87ca8883ed6b9a1087ed2cb51d4aeea623b947c1cb14aa7c3e50a0ec24c78199c82bb4cdc
SSDEEP 6144:9kfBzewEt5uGEie7fxKgThi7KrvVb86ozc8VZPULkAKaU+pGK:9kfBZA54/NqwVb86X8bPULkAB
TLSH
T10654234150CBF944A9D8954EF86E67E4BB8191400A43BE7FF485ACCEDE663990C8D1CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 13KB
SHA256 75323d9bcecf5f80b55563872c3804dffbf86f0091d7749dc4a04dbae3fd6c01
MD5 3b63759c0e4b7bda2cb12a4710bc7716
SHA1 740be3bd03e81c82e82d4db5a1b94ff5e45f4d90
SHA512 7a2f4a3660b42321e968c6f97a2304d8c70946f66430759cb3335c08bf5ebefbf3896e2bb02d47b86b9b11abf94bf0f4ed8dc07f724bd9037de8da6cc7f3c6dd
SSDEEP 192:Wzc8FKLitVciv0j0U+RmTxjYLeMeHEZ4Tlr/OSQZ/LK9bwW2GIks:Qj40VcNeRQBbMYTl0ROTO
TLSH
T10152BAEC50B010E2FF62203229E11946F536A8F4F95B9F3FD9E0C43358A3BF6A959516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 14KB
SHA256 00354baaa66c33e7442306f15f3768a267df49fe66ba57f56418aa764fb75dab
MD5 5a1b9742ff00d83f91510b3d91b70a74
SHA1 a238c6f9a0ab99ff4ed7ada273ac3fdeb39dafe0
SHA512 15990e6da6d98755717c71bacf4c1f5030725402d0275ce61bbce5d133c6b5748dd8101c2ada094b0a01e4e2953097bce6bb9ee519668fb83a87bc6b15450d13
SSDEEP 192:6Lct0DeItCci8aQ517B73iRmbxKsLgMWHEg751lr8RSQTXaUKbwDkmUIkr:suMhCc8E1F+RQw1MG51l07lOZF
TLSH
T19C52FDED54A010E2FFA1303228B12955E577E8F4F95B9F3FDD90C4234863AFAA889516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 82e1fa180972f9089e471d93b638992e8d60e0fd3366712ea73bbc0363f979bd
MD5 4f83dd35b7d54d8abed6409e4684f5af
SHA1 fd16dae57dfc6b8defd0a04bade67b2c37108d4b
SHA512 03898262b501d2f93fe3320ff55abeef18400d325592bb98d8e037a0db0af00809766d3f9bfd82f0b3608513fc468eaae15bca2593d2a95a70c7f536020201f2
SSDEEP 192:IthZg+CBytoi5kqrN6Kr+zmQF2xra0T2MSr0DjCF+LD+xvp3pkptJOZSo6cCI3I:Sw/motz3YlkMhSrkLx
TLSH
T10E32D7BD55E040C2FFA5217069F24A05E53BA8D8F05F9F3FC944C02B1863AF6C998627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 219ab9632d3b638c42c65560f1dface3326b968dc967bef06468a8c110a7c54a
MD5 7c66424ed8e7122d91c6126483d5cf67
SHA1 52ce4c531a6c0a0bfc716a54dca02edd528b4ad5
SHA512 36857d4d8e7372e669aef60334e57a252ea060e99102befa4cec62ba67bab37da96c4c29d4723af6a10e85ddb0eb047bd890e708c134bd9fb6e25cc6a3cf963a
SSDEEP 192:Krtg2pqewCa3WO6bgDw9ZHY3n8W1j4NWvO5uu/7zbzmjaYCQ2xBkCWIIG7RMI:KNJ0wUnnkzcqvFLMI
TLSH
T1EC22D7BD55E044C2FFA1217069F24905E53BA8D8F09F9F3FC944C02B18A3AF6C998623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 e1c4839370ca8ed1da7cd5c5a492deadf820c40f746153059cc650211812924e
MD5 4f4036c56f9226342fb8a5b00b9249a8
SHA1 2881cbe468b0d85875b82be54a0d1efbce7957f7
SHA512 571bea5d588890e64fadce18a6bed45b6200f969f9669eb4b4ff8b79054246fc2d9d1bbdb3910bbfa4adebe49162a636b60160e8e3fdf4e14732d4dea6718a2e
SSDEEP 192:pVhZg+CQTtUizkfcjJCr+zm1h2xncxkBMSrs1+T6nF4A+5vA63pE5FtWOZqo6cCp:Lw/8UAzy8N3Mn+TjAumep
TLSH
T1D732D8FD54E140C2FFA0213069B26E49E57BA8E8F05F9B3FD944C0271863AF6D958627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 ad2f32b4a78eb39f3d578a35471b8b90b46a86f0a4af78a4fcfa93aa4a22df5f
MD5 e8c71e03db31a360fb1e4e28250d9d86
SHA1 ccd6fc325a223e18dcd6f0540fa58edb062a11e3
SHA512 b4001664943588a89fe712a1be69a5bf986345aa7bc25ee6d299a6c950863b5c0e11be2c2bbee811ddb38497e47fad3eb8a0094cf682220430a437204949803e
SSDEEP 192:5KhZe+vPytUiRkP6ueBCr+zm1h2xgcxJBMIHorsh+/6np4A+tvV3zEy3tWOZWo6A:oOi4USRzy8GIM++/PhJUw
TLSH
T11142DABC54E040D2FFA4213069A25E45E13BE8E4F55F9B3FCA44C0271863AFAD958A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 e3b2f68c7b7e03ac32d3aa06360674614b54f2912f644af12d4c46e1b3bba045
MD5 8c35e2525804bda266004a2e1549f1ac
SHA1 5f74a6b0870b88ef6883825bc699a2dfc7ad442c
SHA512 fe2ee3580e09a450fcf178df761a25263e2901aed9e3e832684b2df51a862eaeb194ea60d952e291751f3420220d353477996b3e2eb429985237c55e0e429bd7
SSDEEP 192:2xjt0De1tCciMfQ517B7fPGmxxKsCgMWHEJ757cr3ZSQvd3aMQcbwDkmBIkB:+xMcCcBE1FbGaw6ML57cHtBQk4f
TLSH
T160620EED40A010E2FFA1203229B12D55E97798F4F95B9F3FDDD0D4334863AFAA889516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 45e98fa85ecacae8eb91bf545f3ea42fe25bff4e2e73625403ca757cde18a705
MD5 c661d58f3c389184ed500000dfd83d05
SHA1 463de0403ed5372bea3de627de143549af7f7978
SHA512 089aa243dac1af4d932d22cf00322cf28c149fb5a200414b6118eee8b107de8f2af25ad1a78bf472d2fbc059c2650a290b9489bcdb59aa2baec2649b1fb31782
SSDEEP 192:+nxjt0De1tCciMfQ517B7fPGmxxKsCgMWHEJ757cr3ZSQvd3aMQXbwDkmBIkV:+xxMcCcBE1FbGmw6ML57cHtBQP47
TLSH
T1C2620EED40A010E2FFA1203228B12D55E97798F4F95B9F3FDDD0D4334863AFAA889516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 fcb93fcbf054f5e508a9c55d3e26c0e5a8e2120635e403019096fbec3d988f37
MD5 8cfc3bb8ea06b6cd333f6e3e058174c1
SHA1 19c0d1fe90a6860a502aa10526038ede607fd3b7
SHA512 eed73f7e4070cb4cce0bd5e237b81f141792cd6eaab075610130d85f7578322475a5ecb9393c73bdfed40fb0fb3f8de6d6a56602157e77fa6cbc3c9591a42746
SSDEEP 192:8xjt0De1tCciMfQ517B7fPGmxxKsCgMWHEJ757cr3ZSQvd3aMQXbwDkmBIkK:IxMcCcBE1FbGaw6ML57cHtBQP40
TLSH
T1BD620EED40A010E2FFA1203228B12D55E97798F4F95B9F3FDDD0D4334863AFAA889516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58fc8b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fc8b.TMP
Size 3KB
SHA256 11426bb78d51b1628410aaf48d3cf9933480dd369049692f3eb3d4b4c59afea2
MD5 d139b411c7279f68f75b4bd85d7b89b2
SHA1 a2777b10f5742c722072097548aa9b75bf2bd838
SHA512 023ba10db355cf3b30b7956df42a1b79c8d3409efe2e7befb36722c13679161304fb59f5a7ced8c0620109f72d062c39624b028ccf7fd93e356a78a354660fb5
TLSH
T17571C236222140E3FF31417239C16201F9BDBCEEF6AFEF2A4964D4B71C69712D1A9918
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000003.log
Size 96KB
SHA256 5c412d7ec5eb5d88fa7f0823b677a6771cb0daacfbcdb61294f95da98fefb78d
MD5 7f436d72abd463cd0ee9e3c041dc7a75
SHA1 ebe1c491f7d34bbaae981b0f79b61f9abe7c4f80
SHA512 902bfcb73eb93182b86ab7232e26c6fa88d2915cef296071a5da8d22a420dc727bf4b476f212e80bbf58941dd5f60e8d0ff3bfca9a51b8a206e1d8bd5506dcb3
SSDEEP 3072:+9/tLntiWD4cEf/IqfI7YFtD3h7b9+h3UaJvnGIaQg/KTBNuH44cwhqBiZRNJ0mn:vv
TLSH
T1CBA3465BEB848446C17758FAC4200B9F979FAB94FDD7162F708872B8B9341770A6E207
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
Size 349B
SHA256 494c1c28718fc6e0bb3fc5052430be0d524b08ab653aa03386d6bfd8c129aa3e
MD5 2243d019d0d6dd1f169eaaf84b6f415c
SHA1 9c066c308757f98f00b49436d070a204639d92f8
SHA512 b004af853af13c5097c888d797420552e0e88854dc5e7796071d3afe4d7a16cc6db1c04ad399d08f5ba2490021b65dec82e6ceaab52c1ac1e63837d7da9ad10a
TLSH
T175E0687C81D9C22F314020D7453D7B4E96A33F1E978CBE816F02E8147082049E0AE1B2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 259KB
SHA256 ce9aab22854724ba80d23ad1374fed3f563ffc49fe83fa8ad77ec4e2909868df
MD5 9a53d84d419ae1dd494fb40206ff877f
SHA1 1c2860deee9279c0c5e4f0c947f5fd564cc05b61
SHA512 f7fafaa412ae95088ec709052822f29278a8b42e617f65630a936040f9008ca9746b8559969ab8f54299ea1dc385dab29939c6e2ab8dd5dbfcf753bd817183d4
SSDEEP 3072:7mmHP5PqUrdRN1KKV8z8NN/uQoxWLPXuQULaz9uQ5x4LJydKdE+11K2CKtM:Vb1K4uQLuQduQf8Z1K2CKq
TLSH
T1A744D93DB69272E5A02F433B16119D03C37AC9C9665C706AB4A37E0C22FB7453D9877A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 15KB
SHA256 810090543a7f8b31a20be6a475b9b0d47a6efa64270e9872f9da6a49f9fc7d69
MD5 b523111c1b9b527481aa08e548f44fd8
SHA1 187a31ea32fe7bdcde3b6f9a69ad6de65cb7d1ea
SHA512 d0bb6b7bfe26807f28f237a977faa5d88fc6dc3ce3f181eed07902bbca8fa4d0496279f362eb811df5bc4cd1137e86caae50e4fa3d8404918a45eede7c56edf4
SSDEEP 384:GOTc9oOgn97kN9CQ9bGj0LUMSflVHcV0eGu0a:GO0JOQN9lq0ylVHcmTu3
TLSH
T165729FF74FDC84D1C66F867B90FC434EFE24A61E5881E4EC6041710E655F6922A1FD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000015.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
Size 87KB
SHA256 82eefe6cf60f92bd166b90d563b6401184b92f011868653babe8b8aa437e969c
MD5 72faac6d68728948e443e62fc472b80f
SHA1 231aadf32fdf358f45c3e749872717c2cee56bae
SHA512 b07b2ece5535089199612a05e7155d9e0c714f79f57527e7133b08d07ef10c4c975eaba1fe2ffa2af87da64eb2ffcd834616eaa28ee730d04653d9d077daf011
SSDEEP 1536:2XQ8Vhb6zMK+TgSi21K3gSiCYPk9IgSi21OuyFdePFqrHwhvKv2zDeuDMVPN:2A8qzMK+cS/1KwSRYSNS/1OuyFdOq0hc
TLSH
T199934A6F91D4C9E7C64CC1F219661B954B3A1C062CE8B0DFF08E726EA4B7AC41671E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000017.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
Size 10KB
SHA256 a386be96b5aa988ae6256386aec462d93fbb4e9902052f6bea0acdcba8c9c9d9
MD5 5fa8dea16d61ffe1d517152714a2974b
SHA1 483d551925db9e50658ccbb52198cb03299b99c7
SHA512 6cda41f57bec5e9caf662102cc59e0b7ea102ee105e2fb170af1e0bf6a2463840e41c265a45742e8d70ba18e202ce445b0356ae1914b9088aea68574c45ea0dd
SSDEEP 192:sarQiJqKw+TidfxNyKNhHNZNDnHtGVqpeG/LPGP70ygKeJ3:saUiJbJihWCBNZVHcV0eGu0d3
TLSH
T1EC228EB71EE8C0F0D5BE4236A1FEC30EFE24A20D6891D49D5150B04E166B7771E1B69A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 15947c75219f3524b177e0d81f66d0de6f4cfff209567d09fc3ec56303b32a4a
MD5 f72c56409dc8b9e668a6ec7fbefc085b
SHA1 6eb83e754066d1b69c9f1e3a444623a145888f59
SHA512 d3a521cfbae76ae5975cf1a72e5c5512443cb371948d819700e0423d6f35995e235ab186474ac228838dbe4a9ca383b148b845beef1b3cc83f6043ffe50ffd76
TLSH
T178E0D82888CAC26F512464EA1534BF0D95D7E71E97CCAE460F05DC14B04649895AE1F1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 5KB
SHA256 5a576fcb84573eee5b6b7e1e089f1ac8534be76b6ae65a8f419d708cca63a394
MD5 53adca150c19a8fa53c7f74e7c5c28de
SHA1 32989748da3442c141f47933009f1ab501b4e648
SHA512 67c048386a577ebde4ff3e29dfd626fd2f5201653a91f44cdb553c686916ea6cb1c625f67ce3c6ac7e592dffaccb8d0ba810a815c709a750491678e2a0725e9e
SSDEEP 96:GmKCB+mKSghUmf/ceihZSZ1bZoFX1jD5vODQ3JgCONbzHjCL:PBqhffkfSZ4vDSQANbfCL
TLSH
T11EC159C7660AC2B90492D122C138F89ACDDFFB18578C1F64B649BA9F47F091796D60F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 880B
SHA256 81001967af26fc750019ae76d92ff5728035c9c7a562e1815176f6e1ca278e32
MD5 66afbbc7e1b38e6ba9e652d388937448
SHA1 e8372082812349b5304b912e249faae3cd225a8b
SHA512 37f82fe2f6a171b4b075864681499bea7d4139e2a131ea5f3ce1c3e3f4d9d2b28727822c90c442786be75318ae6aa6bbf8727d7bc41d2c21e0c463b9ff935963
TLSH
T1A2118924FBF1B1D2E4B8107514BFB35D632071CE1515C21F711AB29A39731028D2492A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 679613edc703d704ff05d38d630a85158538d20878aba631c0d5b22421cf05e1
MD5 7fc065d3b0b48ec826e3d2131c1345cc
SHA1 10f84a08ec06c3fc267ce90f7d31d9194442fd8f
SHA512 8fe438ae152b0025e1de755fd54763d3f1d7c0f686f8dea021803b76db3c56d1e4f8ae8712e56ca7bc3a9085885fcb52240440f07405122a44384d9fdb3743c8
SSDEEP 192:D3XoR4MY9I+881UGinUU5c575pAGtTMqHxunq9urylfyr3nQTNGj8hAtC:D3XoR4MY9JV1UGinU8c575pAGtTMqRus
TLSH
T17D02A9F383E5866DDA1196F0AA046E1BCE580921435C3C7AC4E4BE1B93F25A1F141B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 7969efa91619b07ba539bc87f03e8278941333e3e59d7736d332c2899260fe1e
MD5 6f1f97f93604b93f7388c1eb0ed9e7af
SHA1 c33a6293dfa6a932bc7dd07a4b9603b52645f78d
SHA512 7a28ef7edbc8300e91ba5cd6280c77a2ab08b44dcd914a7c2186c935fafa8ecc209b5612a885b59384df7494d01350a7e0adff4e3e2c64af574cd8a377c4fa14
SSDEEP 384:D3XoR4MY9JhskvjMW8Tq9XYOjf/Td15mJX1fnQrOr7jEgMrCGrAuGM9nyHEeBtIB:I263Yqe
TLSH
T1AF426AF383E5866DDA1296F49A086E1BCE580920035C387AC5E4BE5793E35A1F141B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 c469f2e55754faaa8e2327b5dfda43cd6db550f69871c07b9f27011dcabbf102
MD5 6b0cff88689e8a7646941af67cb4c8cd
SHA1 011cc142ea59a8acdab49befd4365b2218ae86a9
SHA512 752068d85f697c78fa0c6a882933c298c462b9faefbff9bbe58710516db0ff8f90e567f65d4580d00be8dfd9f1a1932883013daba3f7c61c4196ed018432b117
SSDEEP 192:D3XoR4MY9I+8Iskvj1iWU5c575pAGtTq9XYOjAawA/TSP1P8uMoQThuJ9X1ffn5G:D3XoR4MY9Jhskvj1iW8c575pAGtTq9XR
TLSH
T132329CF383E5866DDA1296F4AA086E1BCF580920035C387AC5E4BE5793E35B1F141B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 5069b016bb8c37cdb59ff8d2c25da95a47ad05bb90b89c5eb37a710b789a52bc
MD5 15ed76d24abc162bf899303d1346fe34
SHA1 457e49707b6e97e0c0fbeaa3e41c7ac704bdf8ca
SHA512 ec011b94e7d725982f56b98e69f488e7340640310376a2f723e24d25ad9bbd7e4032a99dfc3d4dc269a2ccbac86662d43b29fd98385d5aed9c2066188086db24
SSDEEP 384:DWMnwjKGvWQskv3JIHguLkrjcecVyvnb9e5E4dIMW8Tq9XYOf/Td1PmJX1fn5r3R:tL73Y2hG1C
TLSH
T18692CCF383E5C62DE91256F4DA187D1BCE680920435C3C7AC9E4BE5793E21B1E241B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 3bf31c618ee7c96889ad63c33b0df52bddc08b91c4c077313be2cce3e33b14a6
MD5 5c1f5b6448cdc7914018876c795e7060
SHA1 87104806cdf9dc59c295f7ca78ae75c4a57f5486
SHA512 ae44c374885634f586176532f13e86832cd2df0a95762cc90961339e79bb5296dedd0a6149e2389cda772c4c0e7592fc2b731f0de2249cb0f8c78aabff934bee
SSDEEP 384:DWMnwjKGvWQ7yuKJIHguLkrjcecVyvnb9e5E4dMveUMW8Tq9XYOATkPmJX1fn5r+:9+L7Uo2hfTnsceDwP
TLSH
T105A2BBF383E5C62DE91156F4EA187D1BCE680924435C387AC9E4BE5793E21B1F241B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 44ce4feba65822a1bb94f00a6a49c59d3637b43b027f2fb33c7a2426f5faf0c5
MD5 a33cc6637969881e51d18d9e6bb42d2c
SHA1 f45a55f69b1a70f66789d2b56ef7d205967107c5
SHA512 37b0d478c6fc215a682b51d35cd954badfb679eee7c6410aef8c99afdd070d5976be9b6333e1b0c83d63f7afa8d9a4397905af8e7b2fdb85175a1b77a3275dee
SSDEEP 384:DWMnwjKGvWQ7yuKVB6Q6FK/3NQaH+AbeXJWveINvSUeeQI6hvHVMW8Tq9XYOATPj:3YL7Uo2nAyNdceR
TLSH
T13EA2AAF783E5C62DE91156F0DA187D1FCE680924436C3C7AC9E0BE57A3E2171E241B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 f56d43eb22b5897b927134bf7e1ccbf722dd332f1098f825a6d17f8432249ab1
MD5 d079470212c81c05ec5fcfe9b1476104
SHA1 ceb3bfdc0a728750f207c86aafd9e617d97215b3
SHA512 6b2121a513c121bb6645a94c0e9477eed8e7666801b87aa28f79051c2191391fa15fa6f8bb148eea26c00c3c4d90850c2fef64fa5d1b3869d72e48a52020c7e5
SSDEEP 384:D3XoR4MY9Jhskv3JIHkMW8Tq9XYOf/Td15mJX1fnQrOr7jEgMrCGrAuGM9nyHEeN:E263Yq5
TLSH
T18A629AF383E5866DDA1296F0AA086E1BCF580920435C387AC5E4BE5793E35B1F141B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 0392981d9e6e678fa3ec52df7eef672d876e1178af082dc23d6f8acd9329022f
MD5 b04ea92c43a1bf33d4dcb894b023c4e9
SHA1 1dee8a7c4c9ff1924d4d3293e4d7038555305b71
SHA512 34946bafba39a2dc9c7fde99c562b7a00e6d38bfdb785108a108de9f75f5db573903380ebfe1c920f3a1c3520e7013bd35d9aa3686c7c322c69f40be241d1f66
TLSH
T1C6D022E3260030BAB76CBE89406AEC8ED73F2021090B9DE460D4D89D1A398AC192B140
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 c8a6bf3b366d8f5db6f433d77b9e84810fd8bd0fba7ee8927e289ba011e01770
MD5 af16b5e54c2f476b77ea8768a33808bf
SHA1 43e33ac1cef9b83844c63d2f8099c8e985cf8658
SHA512 7a7f515985f076c56047f7567135a4cb60cf6968898f18bdb588614de9ae93a240443a19d4b91e08a171e9d3d1f5b264de27879d69972f82742d509976a3ab52
TLSH
T122D022E3220430F6BB7DFE8A606AEC8FC73B21311A03EDD8A0D4D89C453546C692B281
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5bd03d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5bd03d.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d3e9233de2f7bfc512ba9233d990ee6a1d37cf84a593efb942f3f418c4aae39e
MD5 325b04d5cbe37d668e310c7be6eb5c42
SHA1 425c6379e954a79138449a1afcb69818c307b472
SHA512 8d3d3e91115dec3fa13286fce069e1d50b50b558aaecfb4640f0f5727359daf70e036ef1439f4e141610e8a47a59b406bb417ec1944f74aacb2f83bc3e4df0c5
SSDEEP 192:sxZK7ROyM/jK1Ml8MklG/fBsZ5lL5QiTs8lsdpm7ApLHW6+WNMTfjfqV1DCZ/YIW:sxZK7EMlG/fBsZPL5NqvHbUjq0/pw9
TLSH
T150620902B6346977DCE7D219F905BBA7E2F8546392844E44A9FCDA1C04E6BEC2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 35KB
SHA256 2414d8fbbb2ad1b58235dabb03925aaa5d07029be6502d514fc81007b1870bb8
MD5 004b32d2f80a2284ab9efd482f749877
SHA1 63ac94d766889907f6ec28c3ddf4f245ca9e4320
SHA512 d669f700dc3cb256c2397dbcfad92b41491bbda0ab3688572f801a2517dbd04425856ca992f0ce345f23808566b6fe2f475a655cd9049f9a7dbab34b68249541
SSDEEP 768:slkF7nmmWlG/fwPv4nnc7WeT+zV/cHbRGDQR:xnmmWBPQnmWdloRGMR
TLSH
T1D7F21842A520C877DAD39D1CB83D7E73E6AC50939A85CEDA59ECCD0C00AD2BD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 ccb50df96cb630d3af8c76b55e0144de58dbf9c6d24c59138587cf397f3d50f2
MD5 d8ad435a8e5b12827fea4f266db30a48
SHA1 9b79eefba570648a8eeb1db4426026883a3c47c7
SHA512 79c9001166e152ca9803789f217d19059315311ef3e3fedb43c73b1d726adfbcee7096db43467a5258107d5a3bd093dad2b2597ae996d9d7e4ea4cb50a66c8b0
SSDEEP 192:sxZK7ROyMojK1Ml8MklG/fBsn5l6EQ1qus8awdpmwpUHW6+WNMTfjfqV1DqKXYI7:sxZK7DMlG/fBsnP6ErwpwHbUjqnX1wO
TLSH
T18972F842A6246977DCE7D219F905BBA3E2F8546395844E44AAFCDE1C04E2BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 acf0d2b44d92571a00d1bb094388927c03fadc983845bcdfd70eaa8a7256b1b7
MD5 eef7f63a8d5587de641a324778a2f7f2
SHA1 4bc431766ba34cf1221410ea5180cdb96a556d4d
SHA512 2c85ff9dd68108eb01c6c45b31aaf33aef823fb6eb8abeaf00c69ecc8845862be3c566c5edcb7fb392ca7659f0b198fc4cfcc3872df61066e226d0e1020b58c2
SSDEEP 192:sxZQ7ROyMojK1Ml8M9lG/fBsn5l6X7Q1qus8awdp4wp8HW6+WNMTf7gSV1D7wXYP:sxZQ7D1lG/fBsnP6LrwpGHbUkywXMwO
TLSH
T13472E742B624697BDCE7D21DF905BBA3E2F4546396904E44A9FCDA1C04E2BED2207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 58379e05d9929c058634e654e52db963f2de67cdc0b6e5a18b985c17a57ab844
MD5 ccf4dc8c2f5f02902ffe3c0cb88a4c0b
SHA1 92276d9cc7609c0cec7c86cf652f64b88f01e360
SHA512 c3721e470c1cb660726bcdcc0adfcb694ac56869d31c322599d22caafa3999350ac41cdae4ed455ff231cfb68ff8304aec4d004e396e47d8c2529a1135d8854c
SSDEEP 384:sxZNni7DqkPlG/fBsnP6Qk/aMbHbRkyVPhwO:sli7+ulG/fwP6j/jHbRphn
TLSH
T14C82F702A634597BDCE7D219F905BBA3E2F8546396944E44A9FCCE1C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 051f1ffe9f2dbb141b6278a9d7e029eb1d0c3cb09f8bec5ea49fffba74e4948a
MD5 5405520764ba78f2f6d69a82094ee8c4
SHA1 ec8c3dac73beb316b850af4ec3e9c95120ba5372
SHA512 61d6f422319f62b70bb03419136a1f612c18c48df26746dedac8fea41a254edb3c1da44b239e07447f789f9b3aa81910b642dfde190e95441e317d42989d47fc
SSDEEP 384:sxZNnw7DqmmWlG/fBsnP62/aLQVHbRIyYAiPhwJ3R:slw7+mmWlG/fwP62/9HbRdIhcR
TLSH
T15A920952A2209977CCE7D519F925BFA3E6F45463D9804E88AAFCC91C04E67FD2207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 2c9d483d5eb51bf0131343dcdad30a9ac7aae748340737fdc87c87b546af765b
MD5 fd48c364646f78df8998c37ff3c7ea16
SHA1 1887e2e8661160e845df54dee60a6738a3002389
SHA512 898ef5c6e745665acd31ee59010372a24e35624dd7698d5f53574c917add19f19e17af979c9d66643aa771a887dbb3e7721665baf6c749ccb4dab648f26aea97
SSDEEP 384:sxZNn6nR7DqmmWlG/fBsnP64/aLQ0HbRUyQ7PDkJ3R:slkR7+mmWlG/fwP64/cHbRGDQR
TLSH
T14FA2E752A1209977DCE7D51CF925BF63E2B554639A804E88A9FCC91C04EA7ED2206C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 72464882749f4a80c7d676acc9c8b2ccd400bf81d291405cd52217b102731e3d
MD5 169942aaee4961bb04b429e3db699238
SHA1 73b44197e0e86cefc93ff9902b60aae7cda135d1
SHA512 d3ef8058685b517a271c0efb38dd64d6e562b1f2e566d278a2b4c55eaaf39745cbd3f704fe81fdf3fb27ec4ef29e7d38eb49901355bbb990189f2cc0ca56dfa5
SSDEEP 192:sxZQ7ROyMojK1Ml8UQ19lG/fBsn5l6X7Q1qus8awdp4wp8HW6+WNMTf7gSV1D7w6:sxZQ7DqflG/fBsnP6LrwpGHbUkywXMwO
TLSH
T1C272F742A624697BDCE7D21DF905BBA3E2F4546396904E44A9FCDE1C04E2BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 691c86971cdd0f7bb4babf36721861f81377b2fe392edcd7d9bc0b288e6219a7
MD5 881f43fe0f24a2aae77aff765864015a
SHA1 ab64c1f8dd0c5631cf806e0ca49f735d51b8c7f1
SHA512 a0e35d554b5d64cdf3cbc4a05cd05104b0bf34333aee72a7d5867a2494ac49ebc6b3abe4a83fc781d73dfeef799c4ac08c248be372bc482f503d709b7ae18ce1
SSDEEP 384:sxZNnL7DqmmWlG/fBsnP62/aMVHbRIyAVP1wJ3R:slL7+mmWlG/fwP62/dHbRo1cR
TLSH
T1EE920952A2209977CCDBD518F925BFA3E6F55463D9804E88AAFCC91C04E67FD2207C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9cb1c6c3c2c2c579ff26f66d0de117289a8d2fb997dd989a810c2add8ecf1079
MD5 f76dcc517f0dbd089b41eee0080f185e
SHA1 d6e6c4da93da29a82ba19d3c7f7d9f85c9768285
SHA512 d3ed7a580ef0a35598a1bd464edf98a175be8781c55970bbd738cab8c8b9c9285d0ed015a2cbb3d71c5c66ad05730e2aab7329c4a76d715b5a248142bf72f922
SSDEEP 768:5tsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Wroe3q:5tsqxXlWvJD6Tu1ja54LAs9tea
TLSH
T134D21C3B694CC77E4F840E6CEC266FD76ED801CBA6988D5447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0201ebe5-436c-4d85-8871-7c87665b9f0b\index-dir\the-real-index
Size 576B
SHA256 e9d616fe5af876a16b216de2b7b181b594ae8fda8efc73eb62bebfdccf70a637
MD5 aafc4a08e9d0cfced5226997d66e0a4a
SHA1 b84893a160ac46fa8d3650b154151abf04a31bcb
SHA512 65b9cda7a02a6aa1cabb50956207e02b3942668aff35186b61fb251e6931516094ba50f797b0e435dd73e05aeaaddce761d2b5fc587d9c0b816be7721c66c0c0
TLSH
T16AF0AB80B6C46A6DDE652B70123388A031B3B20A6A6A27FBE5D8D0144D2F340CA40C04
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d446e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0201ebe5-436c-4d85-8871-7c87665b9f0b\index-dir\the-real-index~RFe5d446e.TMP
Size 48B
SHA256 25711eb9792d00016614a85bc732ad5876d50711adb87b24f2f47c88c1fd3a72
MD5 62c6cbfc019f720c62102d7ed358b7a4
SHA1 dcab9310496cbe7ff50fb6c05854d99dc3a75d47
SHA512 2769aef8b74cdff45929a533881492e4130fa8af4f572591168435ba7d6547efdcac841f1f6e4a8a018bf49078506478dcc39e823e973477526c9ed252750969
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f72e8db0-14da-457d-98c6-133f63660f3e\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f72e8db0-14da-457d-98c6-133f63660f3e\index-dir\the-real-index
Size 2KB
SHA256 9021bf576b91ce248bfa0e5d8d9acd821344c86ed5c6bce65a650c75d1d8db00
MD5 e340af109d17ed59e84f56b83e8368f0
SHA1 419a8b39e01c419fd96fdd41806d1e074e54eb74
SHA512 c2d7f90a123278a48355cdee91ca3aa8c15a83251f20de61ec1114828fe723bf174be1c05805da277e0915898f3f042d96191035816277fb747fe6acd81ddcaf
TLSH
T17151424CC99067AEDCB561BE2D9428F253752C38FC59C7A18198B1B130136645B47AFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f72e8db0-14da-457d-98c6-133f63660f3e\index-dir\the-real-index
Size 2KB
SHA256 92fbf5100b9fa6f5e9372cd959cfe5a98ca97c60ce6721b48e84dd766b559dd8
MD5 6444b2e1cfaea05bcd85711546f72fbf
SHA1 6846a05aa86e6a96829adaedbb0078cf0f6f8a26
SHA512 be496277d00e46490efea533f703e59c67d4cc0d7535ff8c7d69841995950c6b321bfb26355e6de29255710915bd5c37e873baae1c86fda2c83447f442592d83
TLSH
T13751574CC990ABAEDCB551BD2D9414F293752C39FC58C3A28158B1B13453A641B5B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cd847.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f72e8db0-14da-457d-98c6-133f63660f3e\index-dir\the-real-index~RFe5cd847.TMP
Size 48B
SHA256 85b9bfcbae9272fe394acaee7eafbd456e31d5c5e072c37d4b2b046666a6c960
MD5 4f96f4addfc59aa7a098e48a51e85234
SHA1 e95bbea11ba992cb0640b3c74129cdb3944c19f8
SHA512 cf3aa65554e3cb160bc5c201af6aad07207ba19a8d49984092d87294a9a5e7c869c25b58e7a6352e9ea89c0c99563c50841c6a4e0eef474d5d8c40ba5e35950b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 dc541deeba2bc79d4573e6dfd538af756b55f80b37a1424850f099c1bd1f9145
MD5 91d20ec121b0700fb71fe2be71688b39
SHA1 7705e00543cd819e9a1f15f5dcc314ead0b92aa6
SHA512 e3277f2f6d8f15a5a5335fba89c392d4d38fd43ee917ed64a8bbbb4cabd7a99453c9d204b26c55e93684dab9ff3c1d65c4fd6a0891f7e768832bb7b83c684178
TLSH
T10CD0A7D7927094590B70BF926074511D521E5858D884C8F98444B0973078603C012626
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 6b9c0cb67cfb355de1f2087dfffd7b6dfd8dcb6f1192fcaf56a9c7b418b0a26f
MD5 fa3241bc958095317cf36e62b501b43c
SHA1 128c71a029c90f71116e0431b7ae6ed33ec1cfc3
SHA512 b0d0a3f67d9b218be64f6446ba19d8996ed24d3737e950e7726139a5a0b131d9d3f64e815987b7757ce23f13c5c79dcfbb471b66649976d979fab0471d2d83a6
TLSH
T161D0A7D396305C592771BF946078014D52179C15D88488E99846709771B4A03C40562A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 fc535837087ffcc95527183d17351745f83532a3dc4e99ccdd1900cf97d51d86
MD5 1a2ea7bebc5e795dfe1d4387206e0ef5
SHA1 966e98fdbcef4bff10c680a7d95304dcad861be9
SHA512 c85f95d850d9b40f48ac53eb70bd33f7be191fda9a691b23c6e022e63a37a1a4ab9b0699ceb696973dd5c7413ce125c85d0b9ebd44b15d9d6e5d8da422fa0c61
TLSH
T156C02BE36A10108A07B0FFC42078160DA20F805CCCC4CCFD780410433234D038401A2A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 386e44fde425ebe0cac7afed1e6df26095419f57e4de49e7e121c38df4f4a690
MD5 a7423c99d5d65a0ceb7c87e1666bb319
SHA1 c6fc88c052eb2af61b0d79c2a86497297f617057
SHA512 1e264ce7f71fb56cf7dfd49e59e64628c3775415f8ad5d2350067617c079c7c3ecd9057561dbc99701d81eaad8118708aaf1230062f8d9f2f482bb504f57e415
TLSH
T16CC09BE35650954E07B5FFC550B8571DA61F515CD8D4CCFD544550577034E538403B2A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 6ac197f4f450260121e1bd58f9e62665d03b368182e77d7e703b2d77b2757cd1
MD5 8107e6b16733b23582244fd53d3bf5eb
SHA1 caab480f1af0d13c6d1800e00242f6d671ccec05
SHA512 447a83da77da550f3775d6855d247eb7f8384c115be1d1a9a21f5f8b6ad3a848cff58145473587188bdac1f7880733c51adb92cd7e43f8900a828ecf9b38a5b1
TLSH
T179D0A7D37E6150492371AED5B474655D930FED5CCCC5CCAE1549315A7374D03C4A1A39
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 2d17ce8df007469e6d402fceab864a175193a52896e1c45ae94e53ead2304478
MD5 dd6b8fccf98773a161bc90b57ddddbaf
SHA1 1255be06f24b3f504fce592784ff7db9065de9a6
SHA512 71d48230e43f53aa56014caf125149bda5624a2ee7fa88db8ebb5abd127d9cef799a53ab54f65ef9271143fa22ffe58f0a7f0c97733bd6233f8553579d7ea5dc
TLSH
T12CD0A7D37E5110492271AFD57475B16E930F955CDC95CCAE1548115A7374D03C461A3D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 91394767d877fcdf77e5b1fb9aa318c8674a50e0b564dbd6533c2c0bc8efe6e7
MD5 3f55b20d9ff40eca1578d424d9749fec
SHA1 47ef792d78c956c8a2900de75752e803721f08cd
SHA512 ec9e0a58587253849f3f2e91b00ce9ac53c69b0a1c8d22fe86e29d60accefdaa69d10bf249a538aa0bd826280986bc033e9a94645259acbcd490f4ab424dc206
TLSH
T161D097C36E5100092230AFC46834B06DD30F946CCC98CCAE010800097270D03C422B3D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5cc914.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5cc914.TMP
Size 137B
SHA256 8a017bcc7e5fb9de2a1f48af2340a296dfda9e2da7709f29a8713a7da1ea8d87
MD5 88131acb5de5a1a97a3a801aead328b7
SHA1 ae04393685558818b92047b3e9c21e72e2041d0e
SHA512 4c2d0f3eab61d4ae2be5fc3935b47d3122e6d260be55f9800ea9cca17e23c4fdf27ff990809ec5cb33b3291ff02a4a090f8d36d24abbe1df12437f1d7b3acf9e
TLSH
T110C02BE35220104B07B1BEC15078120DA21F4C6CCCC4CCFDA006300B3034D03C401A2A
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\623cd082b6202da0_0
Size 81KB
SHA256 865f1d169ffeb122763a0f1690ffdce82b0e8b538db6138c6aa80d097835424f
MD5 bc7b80d106436897753aa6e1f8f85e99
SHA1 3a70c9ecba0b9e8894f3e61fc625c3ea9fefa197
SHA512 c57f26b55fcb8b91d4e8aed4a4d8da48f9150f2a9bc7a7cfe4ddf71fa07cc3d98de9f94b38188f8294030cd4759faca28ac76a31583080848f9d27e0d5b1eff4
SSDEEP 1536:X5TAp++HqsJs0wihp2VMGzGX7HVyOAcU9dP2CsXMoTrQUbXwPIqHPwqYzGz/I:pi+nKMVMGzK71yO4Z2dnFw/I
TLSH
T1D1833BA7B262703587AD11D594566B01F22B07461848C9FCF07C76963F28ECB63B7BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 da7b5e2fc592d77d511f21f4904fd2aa5b32f9d92895f93d0ebdb95a0d58adad
MD5 0984c289f01dcb951cdc8ed533ac10e2
SHA1 9912450504885ea8c26b4708c37dfe3a1e12c636
SHA512 426138f81af9545264de494ae6f194b459389bc0b7220303b6d87b7711c627bd023da2989ebe928999f708bda533842ffe689ee5468604c60c0249c646b10c19
TLSH
T1E4A0025C43880405C122A6B115A302421726D8503D48530B44A17845DC704568D4212C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 ba8f0d7f8672a702dc04e9838b819f5e1cced9b9e02b5dc88ed21db907465b0a
MD5 a06e49e4d680e8f6e04b7406a63384fb
SHA1 e2a43713c01e676753fc9353d0a245b1935fe3d6
SHA512 ae55d3703ab4fba20ebc970746b5bd542501612a6e773957ab8b01210298ff3b3bbc8a8341cbc424faa1097949f68aaffc9ff63af6c1fe4621769088535a47b2
TLSH
T12CA0022642810009D40697B465D7467223A6E916A2415757C194C268CD516564F7110D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 b1233cb3ed2a1afdf4a1dd5d287251e69fdf065cf6d42db4bbef5ee05652e5b9
MD5 ab17e4ff4dcfeb35079f5817ec534315
SHA1 00f00c7cf6f34c68067e06950d086cd3bfde4dac
SHA512 27ff9d982e363e3974b52c5c1c28a005e134943a34236108f28653379ff8fc73f08a4cec8d7ae82c3f32b1c10f54e44e10b7f964a92c9db1feb7ad3c8150f13b
TLSH
T1E9A0025782D04A39C04AD6B1259A05A23356F9120211132B82D08199DC666454F6100C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ba0e5e8e-7de7-4dee-b3c8-defec590278f\index-dir\the-real-index
Size 96B
SHA256 62a85f5413a60590c0e033d2117e220bc9d8dcee003ef6bf1739b12587b96051
MD5 b251e271f5c507548ad70d281e05c6fb
SHA1 e5e058ceeec5da7431a72e968eb555dbd379f385
SHA512 a8960b1e6be70251841852a7e0e2af98fe8e14e2c938895572aaefe8864625123d8eceff9137087718f75d7d3fd8d5c4df2cc4583b89e2c0e536f6abda50de85
TLSH
T188B012442144144AF21682F0109100123390886707013316C141E434A400F0A4642000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ba276.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ba0e5e8e-7de7-4dee-b3c8-defec590278f\index-dir\the-real-index~RFe5ba276.TMP
Size 48B
SHA256 3e39763af9eb46121545474fdb36f51dbb51a754aec6af287803de9000289b8e
MD5 89a5493f17cbeb4fefe83d38c624782b
SHA1 baeafb157b275a49db627b2e7ad8bab58368d345
SHA512 408f4abfb7ddc00b344ac3aa4d66306d2c6fa2a387bbd111c3ba872ec91fa62e8273908b6cf568d5469c7639ffe55780ecc95dabb7118475d40d1871499ffbb8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bbfc1693-6097-454f-b94b-dd68c4f3ce0a\index-dir\the-real-index
Size 72B
SHA256 c1b560b59fd23a1589b21887a9cb5da074139ca52d1a4cc18add2c3d970053f4
MD5 2cf4eec8c3123cc241884cfa64e9db0f
SHA1 8893bba8f6feaa729b5ca42f21022c0b71fe86e8
SHA512 06da69cbe2428ec8ead72fffc660747b3eb15f0fd74baae5881dad0c89aaa69e92911e8cb59a881465db29d8d93ae3cf7fa75ffed130d1462afe7e4a0db620cd
TLSH
T1ACA002A809560051E0610BF0654221702718ED1516014B1780E288D7CE7B15D4A12050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d4ff1903-9d49-42cc-a0e7-0b4411592219\index-dir\the-real-index
Size 72B
SHA256 8baa68f34b1d4c124c99b40a7c7793c436b136d53fc850a7196702b062df16b0
MD5 6cf79aa03ba3c6b466f8760f9dd28934
SHA1 b8555b8ad3b6d53ebad8a9fc51dac7a8b5476160
SHA512 f324eda68577cda389d2488da3b070faa6281aec27acb138b001cb20f8df136695fef6db8bef7eafd516a9c604b2afdee10172a05b8dedc984c1baef84437e4e
TLSH
T1CEA0025482571913CA271F755443819032E88D144511276693A0E2BE8CD8640BA41944
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ba286.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d4ff1903-9d49-42cc-a0e7-0b4411592219\index-dir\the-real-index~RFe5ba286.TMP
Size 48B
SHA256 56dccaebc0d8a30e3931992840b56cb61ef9ec89e53e910e132dfce1a8d3fee2
MD5 d9ada912fb134c3ae95b799a28b8ee6d
SHA1 2e9ac2b9ed025c84410642fc4e2f61b503d4cbaa
SHA512 2ea4060483e5b69d56f9b4abfd657af371055e5150a61b110d97a9d347dd31cebc769998aacecc62517f22e6b20f7309167b09a08eeec1b51a019cb5c40df099
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 1KB
SHA256 99deebe0b0e047cfc44dd47e26dcf061cfe1a9405084b898dc46bfac4e516ceb
MD5 5812668b00b0e6ec8d546abfb2176047
SHA1 3b4d9f08d828d2447347da11b28d0cafdbbfdd37
SHA512 eeeed1c89621661c71bf6760aed7c37888fc40e143d4a4f42674e2b754e0e2b6590295953d24389926aeea0e326e58e3b4f0ade85739a68b95ecdf2830940f53
TLSH
T1383175CE4E54999FDC9445B200B2657437B498CC2F15E6178C7C62367C6336A2A5F1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 3KB
SHA256 246ff5dfd9b28b63c682bb9b1506f66c4428a1395b3163824a0b63dc257a5cfd
MD5 e7da9aa68af9bf548abeeb08472d2821
SHA1 56129e226c61a327f2d19583355e04223113b1fb
SHA512 cc290d6b42c0dd74f1f2cd9327e244cbf32dd71f462eb337b47457f53b020a32cf9806db8d366a3055bae93320f6c93921fe7a546d5ccd2c98126de935b37325
TLSH
T1B451C98E4C460A9ADEDC52B618F61885337524CC57842E1B9FEC9234FCD332CAD1E659
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe583bdb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe583bdb.TMP
Size 1KB
SHA256 501890a432e30429b45f28b5ac45c1be5fcc8f6fa0db377f7dd8c1319b90ba4a
MD5 aca7a2fcaaa3a63b8ecf264afb084f6e
SHA1 2cd2da32970d03699485cdaba4af53bdf949a44c
SHA512 8cc6188a6403395a2ce524ebc8af974114c0565748e8ed46bf5b98710e2e3529180e807099e2f85b03c5cb923466ffad241fd3e139b68617c177f72a35ca4da1
TLSH
T15531B78A4E558A1FDCD401720593A4B43379D8405312B787D4BC563ABCB57BD1E5E1D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 73ef1eabedc176e02d4b917820c3c335414bf3ffe03d1937fafd069c5ddea08e
MD5 dd25adafc8de000407cbe8eb89faeeea
SHA1 0675ac26f8965c3e68ae61e219ea94a3d92f23cc
SHA512 57a678a2621a37f1a6b5da63bd4a0b7cf9f76b456a1f2aa7d3eb743de7baa89ee8bafcf604b77f85d1e48f7061faedf5f63da49b65eedc118524470d376e0227
TLSH
T132F052BB2FF72810B8AAC7EA047208A98428BC18C951FC4F421AA28724332617825C23
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 b3212146341608d07b492189b71558b7a4782a36b582d4725acba12e356cd7e6
MD5 87f438589a4ea2aebddddea63830ed48
SHA1 f376d05f027df16e01b1d9ce7b1733580348fc89
SHA512 931a5249b5c528bbcb36f63e725f7d75d8687ee19447d58875743384418bd7fb75fe2fc0e18b7764dab3a0f8cf50f904d11dbd547002466e775d4add955e521b
TLSH
T185F022777FF72C04BCEAC7EA147214A94828BC58C865ED8F9116B28B54733257869C63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 b1bbee14e04f792e904905426989da8df3ceddc153dcbe01e119e31902a4a932
MD5 5a3dc9b8a6737d5666ca841f64c0aa3e
SHA1 18387884bc01f7d24cf2ff65b4b138d610ad9ca5
SHA512 a3b829d0f23f8062342c4a1ee71a64d791de18203ea23c503455c86ca13e74285015a79dc6dd1e3aeb475e86893a51d01b64f623ca5ef29b5457604fead29ec7
TLSH
T167E0D8B62AF71814A8EBD7DE1872549A4515F468C951FC4F112A96C714622613826C26
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 3771588486adc210db10fc5237c6a86ed3b6fd1224a3faf75f33ae52808612c4
MD5 c3870616a79811312cfb133f124f29ca
SHA1 d46a6750b117f964cca46ef87444be201e42b02e
SHA512 4987252aa57f7d1947d3e4248560761e1f311017d97974fa625be51254e256f39bc564f2a0e9095c05a50992a464a9716663e10c0645d8b22ac00d9e6c29465d
TLSH
T199F072777FF72801BCEAC3EA107200A80819B808C920EC8F4116A18B50733253869C23
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e1ee07fd32e5da19aaa57a2ccd1cf8d1b87d69ed8564c33b54e384775657e668
MD5 c8e2f691e9099f9aaf536422c440dd01
SHA1 d5316ccaabbfd81aae8cd76a60b982bfad1f6db1
SHA512 a0baabe8c365487a1161fab5b45d51e1f7fddf868ca6f5a2cc5800bde792766cd932122a43660f317c4a6816e84dce080e8338019db40c0e018e29668d256584
TLSH
T133B012A649438A40CC1505F0427240A52130DCBE8B04131390FC5069596B090111620A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e874c439d71f0b637c2ff57feff5661787ef368bee21f6aa030e87cc8fdfc92b
MD5 618a6159f647c4279e08a0cfcb466956
SHA1 e3f430a70bc84ee6c136034ffb5454d1c4ec2926
SHA512 1f540c2f7b5e1a059530a4990be3233124c8c132a12c1762c435447c77a31ce8d1f31ff3ae47dd5cc6ad81f242327d62dff32f38416a93338a850086cf220f11
TLSH
T1C9A00221C95DC146D00217F090E1118563308C9C4606233DB2BC609488E81D185D2309
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589287.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589287.TMP
Size 48B
SHA256 6fb6714f044e44def400bb81f09783a98071c0b9c46b7cd2acf88c90031355af
MD5 2e5abb1d3cc70548528dfedc3c3695e5
SHA1 68e35429564da8ee38873f9de63ff1ac7c813fd0
SHA512 3f0e04eb7d731478a2af69185e6b217b0478a5346f0861f0e8c15948451d30f271e991d19c3b1c9b9c3c7e709ea242a4e5e08ec8757cbbd3527ff23bcd4cb442
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 a7602f6e31e04e3177d870d5e1c417c7d7ef924cd6fbbf84e87fb6b936cd8709
MD5 c1a5344d4709616ee1205b01dba0db4c
SHA1 81837600b84ddde8c76c8b0987f380fe16b50554
SHA512 522b9f61ae8c5e9e760aec8a1be2e156ef6a9af5170452316873a1b59f3360f77cb9643ce8e9ec90c41db70e13a8df5bd8d6ce516816239d8ea738cef4426af9
SSDEEP 96:KYbaKYIKmXGKwg2uzCnTRZZezpoFhzeKZrhFe9bzg16yBmSgYI2qYX9IS2KwTIU6:ExN9uzCnTRZZEpojzzrhFYbzg18ldI
TLSH
T11BE14F22367B0202387E6905E3AEC6779E5376633418E46F3B7850624DA7E212DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa3d57a4-0e2c-4a2d-b15d-027e108715e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fa3d57a4-0e2c-4a2d-b15d-027e108715e6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 81310bb48579ba39d9b408756d10a25b19b4ab4047f34b8fb5abc9c33905cc89
MD5 f3608aa3c215d9e3984054b0f2c2acdd
SHA1 fb1a07275b28ff30c1c42c3b4170ba757d47f324
SHA512 3d3aa07fe8880603e3b0906fe495cf496e869a40e3ce5c6e8e9315ae65df43e6575d0eeed5ad802e7ab699a8fcc9ebf55f9796ab5d962deee908a62c5ce49391
SSDEEP 384:RZcIhsNAUdT16b/UL2VRNNOE+l9R+2CYsa+VYABZSoL:5h4LUHNOEI9RlCYhgrnSg
TLSH
T1C4829F326D246C7759F79685F94722178FB8902796CD5A40C1EC9F1C05DF69C130FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b5281af37e879e08ddbab7470f0a170f8c3de4e5b550bfd2d7421ed8d1a4d323
MD5 68051ecb1337c8363933f1d9ce7749af
SHA1 be7b841e961f299f687216eb2b34801b16805c21
SHA512 c8e9fd8ba07229a6026c1327373275c15cc2342fa84b81d896e424a3da24064a9ec5bdf4155c02c3ddfe5bd43cd5c6eda86d03c74485945403b57f6874b017ae
SSDEEP 192:tON16JkRtQmiUyEXW+RNNOmz+ih34RIU6:tON16UrrW+RNNOE+6PU6
TLSH
T14902E9357D382C7B9EE26E05B58B37275FA8203BB9856F80D6D81F1C01D7A5C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 dcdbb56f3150a4258c0051d476932aebac9f9b4ae574ecebcc5bac23b9e86fc0
MD5 b7a72b2c3dd9814e45a0aabbc5c13002
SHA1 f33bb84450c6d50bec62f1b813e9fb72fbe86179
SHA512 f30fd35f700abc0522e7ece086b98389fa187d59722b72c685c6e66126a626372cc52d2120ed83063537a43344ed371499449b820fe6d8ff08c4e80c77f4a8b9
SSDEEP 384:qZcIhsNAUKT16b/9L2VRNNOE+l9R+2CYsa+VYABZSoL:IhCLUHNOEI9RlCYhgrnSg
TLSH
T145828E326D246CB759F79685F94B22178FB89067A6CD6A80C1EC9F1C05DF69C130FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a11a63b9d8de555bae50646603b3f5903de3a4f674dbdc172c3c60d598740732
MD5 fedf817e9c966115816926a2728d9b52
SHA1 8b71a0af99ba0308a3b326f294ad1bf8a47705ff
SHA512 53e4cefae98b4baac654203c248164e64f5a1d773686b9a5725bbdd144eec6bcf93ea93ab6546c414d7cf0b1f06b4c20f11dd1cea8750a7fcf15d08f2367c659
SSDEEP 384:FiFPZcILsNS8TUNTUlIlBT16blBL2VRNNOE+l9R+23hYsa+VYABZSoL:MFHLpwguLUHNOEI9Rl3hYhgrnSg
TLSH
T1A6C219F259D74876D9AE4747E77E2D138EBCC063B5859940B3984E0CCC9A1BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3ea71c6dc6c38cc78344a6919f5a77a20af7769a7da46f3c74150ac6ef68cbdb
MD5 698515bb2bf31812e90dba15ca7b7a96
SHA1 98c0391a3583ac05500cefad6514f541a73d92a5
SHA512 ca39210e93037526a3958af37398c80d56f4b0db57da9cf876ac7755047d8f2869a7b70635abd34bb607d40302e90930c773f8a11fe350a0a286a5a7eb4efc7d
SSDEEP 384:FiFiZcIKsNh8TUNTUlIldT16b/UL2VRNNOE+l9R+2lYsa+VYABZSoL:MFQK4wgPLUHNOEI9RllYhgrnSg
TLSH
T1C4A26C736D549C7BADF79B85F94B22138FF84067D5CAAA90D2D89E0C01DB59C130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fe6638098d07e7dedc3acae0e0fc5f489f708fbf1688a608b2539468bc5e5404
MD5 abe943897ab0312b86d72f43f9d1c373
SHA1 fcdd03462f42e9b03502b1c030b9d533963c079a
SHA512 53268830eb957f2844af931ec0f9625285316cfda1713dc4c246efdfaca43b0d31594236d3063ce8e579e278e94b57bd6225819927d09432a32a2a4e2007a260
SSDEEP 192:aONa6JkRfQmiUyuXW+RNNOmz+7R9R+2cVcMqubU6:aONa6UhTW+RNNOE+l9R+27YU6
TLSH
T17A121B32BD285C775EE26945F48B35174FA95037EB8A6F90D1DC1E1C02DF96C234E826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 acfe33120c2ea9ff749dae65b53a748654d0e189be489fb4afd77a5bffa85f37
MD5 4be14e34999665c7183d3383f20fb1bf
SHA1 51da5ad4d0c5fa4508872699e9e8a664b4b92721
SHA512 3bbd14d0c4233693dcb4484d787a534f5842aff01635d52852816772ac582abcf258142bae1ea3475c1ab6d74348b659ada7d74f5282eb25ab40c6085f20a14c
TLSH
T1BBE002019140447EC07C033400831A313EE1541412F20144662101681C23700BB70FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a6d5f246e29f0ee1bf084286672a45204c7403970f558a1f63460015c3af0c72
MD5 2332fae6717821dfd3f9ca16e03ad8f8
SHA1 ba7eb415ef88ee996fc7a08c3dc8760d8cb30455
SHA512 468c9c279f71b89cd17c8b014c657aa8c6c07f35056bfb53d174d296878a7cbf1ac13c040392dd7837650b04151d0a98225df845848ec1f94559e9777a8d657f
TLSH
T16FE092220700047FC0BC033800C70F307FE2802053F302432A2100682C627807F38FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 926cc144ef611841e2ff44cc3361b0794264035bc766e4705341a059b0a20f68
MD5 c9e13602de1c9459ae3c0610115bfcea
SHA1 11b2b39da7b85ff7722f7d44e6a67b3c7c5ea14b
SHA512 311b8bf0cd19a3e2b2c406d37806d228562143b399c621a5cb324fb5a03a487ad0714ee15ef9d49f3eedbf1086b1c127e2133ddf11d00f6e3db54ccfd90cd3e5
TLSH
T1E3E00123579044BFC0BC073800C70F307FE2843462F202122E2100692CA27807F38BC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 71c6f12631d559d1d5a828d67c315cdb15a19c9019f57a29a88fd12e505d1a41
MD5 0ba3f46713d2c26b8a09e8bfc29ad34b
SHA1 88ed2f3e559aeb71133c7b257778f08983100cb1
SHA512 1857b5d100b8cf7bfc996ff421f59a9a2dcfbacfc866e8d9c63ed69ea937c3008aa4e6fa1b6bb8ce88e432dffd7531f27ae7fd1159dc8efb1c6a58cc49665b00
TLSH
T1ACE00912565055BFC079073500C35F717FF6942413F30A46AA22056D2C26B80BF75EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f245e7244cbaa2af2855648c11bf68e9efff0e476055042abfa8c1f0a8007710
MD5 02d349449fad2632496142ff2b90eecb
SHA1 7fcaba10071c519249546dd9927082cab90fab08
SHA512 bd4c8ffa760f97b63e9e621aa540f56c803cc68c05bbd97873bd76dcc75781901b68ac7cecbdf47ec77718e0ade3744aa4c5d57eca9464de37dd9eaccea727d7
TLSH
T12AE00122470004BFC0BC073800C70A307BE2802052E202022E2100682C627807F38AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3e336aa088560074873de7d485181006cfa31a280588302e2c1bde5d4bd0f02f
MD5 280bf136e10d773447eb6da183b7eec4
SHA1 8c0fe3341554bb26ce420bb9b5e0c48361bcd756
SHA512 3a8b058253666b8c2e73c828f00cd8f510dc49ff3f0f33b69f31c994f1b570dd70e36dea3b9a9c82619f6b12f15c74615b73fd8f3b3f8922d31edd04e2002a94
TLSH
T13CE00902564044AEC068073400831B317FE2942412B20646AA2101692C27740BF74B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c5f1733a279b8d782fc190714a32b27a756c0332eab5b8cd0fe2a729257a3b0e
MD5 ca458d9f5b2d33c617608f0e6d08f133
SHA1 8f1a4fe0c8bad0b834d4a08e203732c6cbe16c1d
SHA512 4127b90c99b6d2fe977e38c88251a9b75c9937aa500b6a4a74be6b262f8c14a2b4dbcbc60d8e4e62e7179bfc2b22c50370f1638e8bca261caef77c636ee35d55
TLSH
T131E00912565059BFC0BD073800C75F71BFE2942562F30A47AA2215692C62B80BF79FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe587bb3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe587bb3.TMP
Size 392B
SHA256 2fd441dc0b3ea13ce3f61f831d0e356c07932e39d5c5c6e9461f6e859e26b8c4
MD5 35de8055ab6c2a18125c199d8f597a73
SHA1 8f7a87be3d32da659ac672cb262063bb5b05ae41
SHA512 a69bb440ed57fb7dca398d1be35a60e05212cc6dd1c90e1a65c8b5f295458ad2d150dbed25c189142cb46c63596f722dfcac8879aa6592b47931dd9bc32d6b00
TLSH
T16CE004015140447DC07C0334004315313FD1541411F10144751101540C137005F30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

2bc9969e-3ff7-4da8-8c25-8b90897c39ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2bc9969e-3ff7-4da8-8c25-8b90897c39ce.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 aff4f5ca0610fb5b097164fb1dec4a1d4c054073bfea8a0acf168738386fe307
MD5 9dc111ffdd3b2c3a885d31b7392a43a2
SHA1 563d06bd693556aaf6e87d1b461bea8ba1bc6af7
SHA512 46f9c0b1e510e600f9353c9f803e49db34eb0e248492fd8f059b70efd13d5122e66fd392e83571d1b292cf97f7a6703438fc2b16971675b07db45938e787edd5
TLSH
T10D412958AAED1108B3B76F5A9BF6646D887BB8332E06D59D10010E4F0663E00CCB1733
MD5 SHA1 SHA512 TLSH

Submit Download

InstallerInfo.log

Path C:\Users\Admin\AppData\Local\Roblox\RobloxPlayerInstaller\InstallerInfo.log
Size 146B
SHA256 1e80bf978d861b4f58ca3a395f0fd657f1cbfceb476dbc40f14b428a987f6b34
MD5 edd430c16d95cc3e34b201788ca1b0bd
SHA1 2d4500bd20188360cf0725268b534240e598da18
SHA512 382a3b609f19c2c6cdfb266b6a057cf95b4511699d1ccb9033e1051b518efe0af5cf650ab32c1661e29f5dc6a0adf6f215bedcd5d8acc3f2dfd590042a095173
TLSH
T1DEC04CC243E4107967074CEFC055CD33915750837248C131D9929A9E5838B5704C39C0
MD5 SHA1 SHA512 TLSH

Submit Download

InstallerInfo.log

Path C:\Users\Admin\AppData\Local\Roblox\RobloxPlayerInstaller\InstallerInfo.log
Size 90B
SHA256 cfe643b2f77fe637ef7b723205fe53a143667cee1e45c5365ab27f1d865c7a5c
MD5 23a9a1f99a33663decacf1602676c1e6
SHA1 09861493c8e40f59c96236b37a9cb8be5974a8ea
SHA512 7b3c4ee28eaba85a2a840c492d343542e423f9247e09cc14604044300bb032963262b96e0cb38386209a455702d25e857a5ec8694119badf438e1fd63e0997af
TLSH
T135B002C553C0103D3707C5EFD1758D63515560C17954433597C7955E593471304838C1
MD5 SHA1 SHA512 TLSH

Submit Download

InstallerInfo.log

Path C:\Users\Admin\AppData\Local\Roblox\RobloxPlayerInstaller\InstallerInfo.log
Size 259B
SHA256 18fd75efa0b1d0278b9e5a45f673b96da9ac4df0c188ee8021d902752fb6c021
MD5 5182400a735444f5cd76038f40dfa096
SHA1 5077f5232c797f04aa6fc3353f83b4615ace09a0
SHA512 75d602ece00bb064f7a34d3e09354d243e2387518f101e8c53dcb432a8b91dc646ebfdafa3e619cae7a8ba2b72afb6a953e781abcd073ce9c68f072530774ab2
TLSH
T1BFD0C2D5C7C000393B828ADFA0AA89112566A08375044626C2D6D89D18286331583082
MD5 SHA1 SHA512 TLSH

Submit Download

InstallerInfo.log

Path C:\Users\Admin\AppData\Local\Roblox\RobloxPlayerInstaller\InstallerInfo.log
Size 306B
SHA256 0d816657ea62b0a2a21534b2e1869830f029ab1bb924896c5d399e84fb66c4ac
MD5 19b950b675ed573e85ccdd1ac880eb25
SHA1 a1f5d2d5f8392af91f6d52ee223033e2bc743a9d
SHA512 64db389a83fa43a505aee64d2a0b39b2d3aae2333d99711d0d84447a836b792dae563cd8ccdb060910c39a35b635aec6bbf0430bd09de976625a003b451e6ea4
TLSH
T1DFE086D6C7C0507A37428ADFD1DE89226566A08376044627D6D6DC9D582C63355874C3
MD5 SHA1 SHA512 TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
Size 223KB
SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
MD5 2ef00fa979161001a3a5cd5169a7de48
SHA1 0d3ee6044ef954db79d4db9984cad411dfd4c3c7
SHA512 f0b7f015d3e766b390a663ca5b1498175fa241259cad73f4b8d2b9646b56bc08a698fea7f5a28324b9a59af1622296ef79d77830a50bce14fd5f02f7f9228fdb
SSDEEP 6144:EqU9NgI6FdZL52dTOgwQh1hV1AP2A2FTR:knh6fZL5mOi1hXAP+9R
TLSH
T1E624AEAACF953C4A28E3F094C9AB037ED919C3629DDAB0B31D593845C78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 31501d6d23aa940bad8d7f15d3db0499af6b11370d16b810739e69db72668f28
MD5 83810578fe661ca4473956a4c28edd6b
SHA1 2195bd89eeef8bdceaffe769eeade764890c18de
SHA512 457ea934b4322c7bbf26194c1cefd123b280d97f92494719f21ce5d6aff6c960dc9b1a275ae87d0a433a336508a6173880776751af99d33a9a63714ca108a810
SSDEEP 96:UlIJNLKWwKKnNskIJjS1KXupw3S1KXucNiCIJruWNSvJIJnIuWNB:4Iq5PIkgkg5I5yIBIT
TLSH
T14802FE585BE63646F2F7ADB2A9B37601FF75B91A6D08CA0D0190820C5C72F00DA79F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerInstaller-MGHFM4WY2H.exe

Path C:\Users\Admin\Downloads\RobloxPlayerInstaller-MGHFM4WY2H.exe
Size 13.0MB
SHA256 6819f279a5f123fb453c9b9192fe98802a896973b0652115fe3a1c06f1c2345f
MD5 be4ee7c43bebc9dbe029421e585419eb
SHA1 39906c7fa61061f19038a387e4ea1ef0151b0f8b
SHA512 9c01a4814685865f3939841163c528945fcb912f7ea0800173c2920953a139c2f07fb8988080263468533b6091f0f8eb9cf8b7992568386915a5ff1d07bf4555
SSDEEP 196608:Es6Sk0cVzmY5pSVlYL8dg7CwqOrNN5QCJ1IsvE:ErpVzTSVlYgdgOwqcYCz7E
TLSH
T186D69D6AA2B800E9D4BBD17CC6565603EBB1B41603709BDF16A046FA1F63BE41F7E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download