hxxps://www[.]roblox[.]com/share?code=0b9[.][.][.]

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
900s
max time network
902s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/09/2026, 23:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.roblox.com/share?code=0b9...
Sample260922-3pp89saa82

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5664	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345941200721743"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{B64BE2D7-20B4-458F-AFB1-2A42C27B449B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-696679853-3915825385-3233721679-1000\{58D3094A-41EF-49BE-979A-50307409BAFF}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6660	msedge.exe
6660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4256 wrote to memory of 1224	4256	msedge.exe	89
PID 4256 wrote to memory of 5664	4256	msedge.exe	90
PID 4256 wrote to memory of 4828	4256	msedge.exe	91
PID 4256 wrote to memory of 2972	4256	msedge.exe	92
PID 4256 wrote to memory of 4828	4256	msedge.exe	91
PID 4256 wrote to memory of 4828	4256	msedge.exe	91
PID 4256 wrote to memory of 2972	4256	msedge.exe	92
PID 4256 wrote to memory of 4480	4256	msedge.exe	94
PID 4256 wrote to memory of 4480	4256	msedge.exe	94
PID 4256 wrote to memory of 4480	4256	msedge.exe	94
PID 4256 wrote to memory of 3876	4256	msedge.exe	95
PID 4256 wrote to memory of 3876	4256	msedge.exe	95
PID 4256 wrote to memory of 3876	4256	msedge.exe	95
PID 4256 wrote to memory of 1380	4256	msedge.exe	96
PID 4256 wrote to memory of 4852	4256	msedge.exe	97
PID 4256 wrote to memory of 1380	4256	msedge.exe	96
PID 4256 wrote to memory of 1380	4256	msedge.exe	96
PID 4256 wrote to memory of 4852	4256	msedge.exe	97
PID 4256 wrote to memory of 4852	4256	msedge.exe	97
PID 4256 wrote to memory of 6084	4256	msedge.exe	98
PID 4256 wrote to memory of 6084	4256	msedge.exe	98
PID 4256 wrote to memory of 6084	4256	msedge.exe	98
PID 4256 wrote to memory of 1360	4256	msedge.exe	100
PID 4256 wrote to memory of 1360	4256	msedge.exe	100
PID 4256 wrote to memory of 3748	4256	msedge.exe	101
PID 4256 wrote to memory of 3748	4256	msedge.exe	101
PID 4256 wrote to memory of 4152	4256	msedge.exe	103
PID 4256 wrote to memory of 5596	4256	msedge.exe	106
PID 4256 wrote to memory of 5596	4256	msedge.exe	106
PID 4256 wrote to memory of 5596	4256	msedge.exe	106
PID 4256 wrote to memory of 468	4256	msedge.exe	107
PID 4256 wrote to memory of 468	4256	msedge.exe	107
PID 4256 wrote to memory of 3512	4256	msedge.exe	108
PID 4256 wrote to memory of 3512	4256	msedge.exe	108
PID 4256 wrote to memory of 3512	4256	msedge.exe	108
PID 4256 wrote to memory of 4672	4256	msedge.exe	109
PID 4256 wrote to memory of 4672	4256	msedge.exe	109
PID 4256 wrote to memory of 4672	4256	msedge.exe	109
PID 4256 wrote to memory of 820	4256	msedge.exe	110
PID 4256 wrote to memory of 820	4256	msedge.exe	110
PID 4256 wrote to memory of 820	4256	msedge.exe	110
PID 4256 wrote to memory of 3768	4256	msedge.exe	111
PID 4256 wrote to memory of 3768	4256	msedge.exe	111
PID 4256 wrote to memory of 3768	4256	msedge.exe	111
PID 4256 wrote to memory of 2572	4256	msedge.exe	112
PID 4256 wrote to memory of 2572	4256	msedge.exe	112
PID 4256 wrote to memory of 5524	4256	msedge.exe	113
PID 4256 wrote to memory of 900	4256	msedge.exe	114
PID 4256 wrote to memory of 900	4256	msedge.exe	114
PID 4256 wrote to memory of 900	4256	msedge.exe	114
PID 4256 wrote to memory of 6668	4256	msedge.exe	116
PID 4256 wrote to memory of 6664	4256	msedge.exe	117
PID 4256 wrote to memory of 6684	4256	msedge.exe	118
PID 4256 wrote to memory of 5496	4256	msedge.exe	120
PID 4256 wrote to memory of 5496	4256	msedge.exe	120
PID 4256 wrote to memory of 5496	4256	msedge.exe	120
PID 4256 wrote to memory of 4992	4256	msedge.exe	121
PID 4256 wrote to memory of 4992	4256	msedge.exe	121
PID 4256 wrote to memory of 1548	4256	msedge.exe	125
PID 4256 wrote to memory of 1548	4256	msedge.exe	125
PID 4256 wrote to memory of 6660	4256	msedge.exe	126
PID 4256 wrote to memory of 5372	4256	msedge.exe	127
PID 4256 wrote to memory of 5372	4256	msedge.exe	127
PID 4256 wrote to memory of 1340	4256	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.roblox.com/share?code=0b9...
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff95f92c188,0x7ff95f92c194,0x7ff95f92c1a0
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,8370963550019484545,4624851086251473169,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1596,i,15594343307571485617,5723034084339484984,262144 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:2
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,16888960691173258053,10677846444773963033,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:13
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,3102685743538990513,8954045826771715215,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,16271505024741650078,5952961530435685567,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,6614882311668656826,558726209000934926,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=1588 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,17751346893009141887,7500459892787372468,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:9
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3808,i,8954418293965670688,15335377857814455811,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,16055761115452479628,10658685010795963554,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:14
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,12110104945198153850,17845818890197539881,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4516578767487657624,16392782528982857108,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,4516578767487657624,16392782528982857108,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6636,i,4720989387088752041,14255173607807263922,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,3300726852627738929,6549585208006221264,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:14
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6988,i,4934830984680637082,13720097133017075881,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7252,i,6300802661505849445,736972999732425086,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7328,i,2370580026915518449,16500510898501731225,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5016,i,17275725519084392722,6407449724884280834,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7724,i,17325302526685778986,13766875960159278193,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=7720 /prefetch:12
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7792,i,5723996115958052002,6275574613268576420,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=7820 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7988,i,1561370023111290507,15400840997259319523,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=8088 /prefetch:1
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,16020158509476057531,15169375511320055323,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7220,i,9445739291887865049,12473426090545481099,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,16243166992793752978,7331764161564965863,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=7664 /prefetch:14
  2⤵
  PID:6684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4036,i,11742202794852860573,4241279695810182178,2097152 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=7588 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8104,i,16806449994098550276,5010474880305653445,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=8004 /prefetch:14
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8508,i,3711105672287943709,846408247856683985,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=8340 /prefetch:14
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8520,i,14573242233325382519,4805886991444789347,262144 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,15795030656461950868,10404782214338697224,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=4076 /prefetch:14
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,15846967836389752833,8381143499636786671,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,8970028224993242398,3304002348059400037,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,16988550139200489733,16441483086057225579,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:14
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,2258279642259915343,5720806459063655909,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,2509778468135334835,16257576027209432741,524288 --field-trial-handle=2648,i,2685686175707144452,1424659928656075719,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:14
  2⤵
  PID:2240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1508

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:6584

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2356

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4148

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4852

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:7024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 59619e39464102fa53912dd9a15237954c5125d546c48a72b8bdb58ad9eb9753
MD5 f80a0057aa895d42a15b594d07d09f76
SHA1 2478a67794a5362ccf809b7a2c8f64a03c72fa32
SHA512 4a9ec8459a11d9e573883d5eacfd5386cf838bad2bd0b33ff1b37017f5f2cf6bfcef877344a87892e3c49ce624e0cae52791ded1593b8233138de87fd2e5e634
TLSH
T1C6D02B75F668E9D2C140043C00410920706035066F6801C206030038040324B55022C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 91a032a4ffcdd10503afdeb5220904a7e7cea899c3a55606bb3e90180ed9472e
MD5 f04321ebc7aa4a8f91bb5362a6c4c79b
SHA1 c98d3283204e4a0453e416a04c3ae56e4c3feed8
SHA512 c2faa7fae738d85299e6f63b9eaf33c25db5a255ea3f5f6a8551842b7e0cec73c7e8b5e86a9cfb9714287d2b382b57b7249bc70671dbfde2815d5937243570af
TLSH
T1DED02B71F678E8D2C140043C00420920705035061F6801C207034038040324B55012C3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 174082786bf880fd5b11530e05047e8e4b17ec640d4cb83e8229505e13e44b65
MD5 e8381be165300a5a7b490d83047ae0af
SHA1 0414e91bdfe9df6f33b9bdf1710db48878641ba7
SHA512 224f645d986857c5eb707bc4f435192ed2395ca95a3fff26b7bab3bb7afefb329ee639ab85b87b7605fc81943af8fd318bf38800d1f159f031d12da8f0753a00
TLSH
T1E3E0268815C8C22EE21C648B416CAF4C8A81370F92CC6EEE5B06CC847205154F2D2791
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 0374fb3beb385831b0cdac7899923e57d38f7c81f4e90fae90b4a7a4c1031d66
MD5 336c5f7a7c2f0747606e2857983115dd
SHA1 11849a555532af94ead6e408d5407cf694274b1d
SHA512 6a30cdd53502bd958da9a2a2183c489da8b5332b88ebbc0e9e6700d3b58d9e779498918e95b3d9b5e518afad09a070d1d2857563240bb50b8dec1d6bcc778799
TLSH
T1FBE026C804DCC26EA62C648781BC6B8CE280370E9ACC6A8A5703C4947941680A7C2791
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004b
Size 22KB
SHA256 b4f20c4b37b7c9f3de9c2378b143f80e78e7c9e723b4536a569693224c3ed999
MD5 ac1afa55722af89e6f5411c9d037dc94
SHA1 eab1040eda39a7035e1e4c9a816ec48337046a9f
SHA512 677c83f3e78caf104048ec5239553debb7c13888867bc3595afd1b08c1d574c97c015c8b223af2fd00123e525cec70d2ea4a96bbfc5105e6d12402b23f6f5356
SSDEEP 384:SfnLhbrhkV8lkiFORrdj10TlESgaogGYqrmD33SP0+4Ok08ndmiMwo66SSxs7zj:+LhRkmlk/f1/2ogG3mjg09ndgwopMj
TLSH
T11EA2E12D64C3D64E69A9DEBC3900EF8841D1460638EDE89DC351E46C2BEF6C14193BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
Size 27KB
SHA256 82c48f7b7f0a07d1673c0e3d9b40375fb580225b8a65da846b0ccbd43a812984
MD5 9ae4d8edaf6b27014f3c7270d73b435b
SHA1 fde2fab49518ef5a96f78ec8b0bc5fefc2341d7a
SHA512 825b35efe6f36cda2ad975048cefc0f02c8e3fa286aa9c011805c330c8bb2fd414aa9f47d09a513eb0689b9bbabf4a8360880579db09a65086f801b58c84a3e3
SSDEEP 384:omE118numhpjS0yNbRNIdTaLSXPvxlRR6+JKSmF+CGlm6i0Lzx2NwP7k1uJqXwFx:oZmzjeA31RFmF+rNw91uJEwFVwC5SA
TLSH
T152C2F141E7152B8BE22ED5E47E9CC231873A486F16D3A043075C69EE3C6663D095A93F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000050

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
Size 39KB
SHA256 f7d85d1658bc3be1ae2916b69296b98494f01786b3615f73226817d606b67f4d
MD5 8ba8255e2ab876fbbcb793f42fdb6ecd
SHA1 465445070be2fd4b978ad311c1dd008bd8e07844
SHA512 7b8b0161c5737fef838be8d5fb4713b6ea0eb4074a839a3076bda5d6340a01f66d54baa2a5cc59fb747529e0beb697da76a9a7db58819baa87ee87d587f4d449
SSDEEP 768:t44ngV2zVbKAZ75wu9giO8fJWpAGgJW3Rv6mC69iKZc:t4hV2eAwuDO8E4JW3Rvbpc
TLSH
T1B003F27DDDE37A695FF9C0A280B1E7389E88477A886E4DC0A71CD5D116F38044C9F12A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 104KB
SHA256 e0e762fa6317b79b809e6406722b025aa5e08baec10a379941692016625a5aa1
MD5 b374b428072ef2e64ed00f6fb7971fbc
SHA1 0ddc5f47e4a64ce17dbfaaee940f12d6c669b7b7
SHA512 5b288ab5e2a44fd006fc24779890f90b08e9890ae56b3f4f635a9ef981e449166691a28a1bda27d4c472cec6f45a4c92cd180a240d86d3cb4129b91e0715e280
SSDEEP 3072:nW7yvEzI6MvrVsTDzm/uCA2zb0nTBw/EnKTzrMKA:nWMvrVE+AGbCTBcMKA
TLSH
T1A3B3124CAD75C3580E280917A3D863C0B687FFA3F456A317A1A0C1F7AE55FB665B84C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 38KB
SHA256 3ac9869257d715ebedfdc829632a83c6ead3d06fcc977d0f1cc0c658a1e98118
MD5 ca989f1c3f0cc27cb05d119109b08c32
SHA1 1e9de34b49212a868bbe1de7704683c89b753237
SHA512 1227a8906ca57dc20cad40ae7435b9265c25657c4b3f0ebb798df8375781c3e39f8638a99c835b778828e4215eead5d86828e5999de0ac76fea07e717e991bbc
SSDEEP 768:SR2zpPPmdFnLVjU0p/vrtz35NFTCqQFAMjcwU+kBcjPQU6cuocmBNVvKFTa:9zpPPKtPNtzRCq6AuU+kmLQac+fvr
TLSH
T1AE03F1220130E790DBA3802D9570C4DF558F27DA909CEAF0EF39FA466679C8E065B696
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 59KB
SHA256 3e071abd3ad36780ce0c611b1c14af68833eb4b68254418bb456f9c760abe9ed
MD5 b4d7647aed090441a4dd452a5b6071f7
SHA1 fad5cb7c9a2f3feec9fe6803568936e3cdb57be2
SHA512 17ec709ce5ceb4b8795e663d2356aa0baa715884cc4c032b040a579fdd60a10d4fc17b572d1fa64ef570d8ba5d568874ac3e1dc2a4c6821f919a24ab7ead1bed
SSDEEP 1536:YyfJGLb84BJcR2/tJhq8qSKajxAAcaNQv75qFVkjlhtCl8:YGcndBJcetJ7ZK+NhF2Cl8
TLSH
T1355302C1161F39A8B6EA9F38B676360E87740C946534B67999937B07BC2974A03E034E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 7fbe4f4870ea33d48ded4c1b8746965c754f986a5fff59feaf0bb59e50e1891c
MD5 768761fd599be180f8a0e97e6d6c2a40
SHA1 1bb62361f0a0abcd279b3bc68335fea4bd47dac2
SHA512 3d7dad4068f5cbaf8a8e72c22a2d9ea6167469984e3c654698be8b11a0f10b4c5f821bbf3e063f8972abc7c0b07a455071d4f37294e2ea288e02488b80c87ae5
SSDEEP 192:JdtKaa7LiPuNEturTNvjQwRGfcMZFWXjKg7rlszElHhX82odiXHNti3Ktc:FKaqiPuN4urTRjufzZAXWerlszEpx82w
TLSH
T10012A4C3F5C462C4FF6E3331A8D91E063930426ED9536B9B2A7EB47439E67C45878816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a255c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a255c.TMP
Size 2KB
SHA256 43f7462a5b57052d3375e519818fb1fee15acf5fea0dc6af110b58433d981a6a
MD5 f0f55e9fd9bc288f3dcdcfc67173a9cb
SHA1 54768dcf6a50dcc2d64ce0bf888bb344694e2f84
SHA512 86408c0c712c36643b8ebba7c1ea3c90c925fe363a788a5436d7371c638b4367139b358f2524c759f390ba6e5725b917a660de8d5dc865cab35b3dbdfbae320d
TLSH
T15751F889DEDCB380F7B9047286ED5D932E70468156833FC543B8D87C9C027984E7885B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 184KB
SHA256 56e3fa68c203ae8f69006983055137c4931d665722d4bfe5f748e916ee270565
MD5 4ffb236e7e2439a3bb6feb1a0e599001
SHA1 08fd49e87e902263450a1188ccf028a52a9e8d14
SHA512 1e3fcf071a7f2fc0e543597a978d0b13879813d7357470aa33abac25bea246195c46605773ad33afda3f45f735a346d48e2bfe4fad18a8483f8b136a12bbbf54
SSDEEP 3072:7DURK1R8yQie37y3YZpkikioAo/6Njld3hVZPQ5liIjiW3hx:dQbRgn
TLSH
T1CB040A66B1A261C5E12FC3B706114F1BC3329EC4A968709AB9D17F0C66F7B442B3572E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 d0e5733ca45875dcdcd56036c2b22ee1fd8bb36d65122f5ce53f5acb7905896f
MD5 c1afabfb8d4d03a43c5f5345b17fb3d5
SHA1 272f87623f5abddbbcaafcd089643266f229f77d
SHA512 35b2ea5e95a3ae904d2395fe01d882772c996a3c1c870ef2efb314ff700f988ac3d9537336435f9cb3a4e8e65e1e4f51471c0d2fa73e93e49788d320770a43e6
TLSH
T1A8E0C02CC4C8C15F513860E706387F0EE597730FD7CCBE418F06D810B04A188946D382
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

689ae349-fb3a-4183-b5ee-cdccba926ce9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\689ae349-fb3a-4183-b5ee-cdccba926ce9.tmp
Size 15KB
SHA256 429f6cc60a1fab228b3b24a3e7acb3f9b105b09ff225e0cce21f237b39674fec
MD5 1575a9af1786de08a51936d209078da6
SHA1 16f985359c5208023d4637c340239085b0df5422
SHA512 a5e960ebfe84aaf708d05a6c0ed6a8311e8880ddb2f893895e586e8297ce39d64d6db9008ced3e53eabc8d6ddb823e51061aecc15f788c0d76219849dc8d3478
SSDEEP 384:DWQnY5w3oVRezG6tGtC7Cdd1Q+kGFFTwaVmKi1QOxHigc7gLD75fJ2rRzHtGvIag:85SzRAD5
TLSH
T13E62AEF783E5862DE91156F0DA087E1BCE680924436C3C7AC9D4BE17A3E6471E241B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 3a5c0c9a87ef22172d7cd01583c3a470ad501bc8e131bf04c1ff9d4abd85c434
MD5 70c0eaf37c46ef6187ba055fbefd542e
SHA1 31a10b6a3505127f244a7be91cb89630983deb0d
SHA512 83ebbfd3d6266092165ab44e91186e97f3b3ce8813b2f044bc0fa0698d71590f79737f3271f24ec895132b622f231a8d91efdf61d7df6773481b14b912e2501d
SSDEEP 384:DWQnY5w3oVvRezG6tGtC7C9dd1Q+kGFFaVmKi1QOxHigc7gLD75fJ2rRzHtGvIaJ:P5SzRA74
TLSH
T1F362ADF783F5862DE91196F0DA087E1BDE680924436C3879C9D4BE1793E6071E241B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 00ac20e9e2a6a8a6dba2e2d76da93298cd8beff8261ba50f0d40744ef55fdd26
MD5 02a94a3493858d86903a08c95a683c28
SHA1 b98d768e6448996a34cb64a6311476655f686148
SHA512 fef4e61674ed93527f8a08e7edffbf5403cc3bdb89bd72ad6e9c02883f1ef461f51ac4aa346805206cedc81033d20e95ce74a98b5b03402a3aba6fd50d631a66
SSDEEP 384:DiMFLwIw3gVARemaP9aZ0hgVFW/jaVmKh1aQOxHigc7gLD75fJ2rez8vsvEKnWLX:ufSzR6X
TLSH
T15072BFF3C3E4862DD91156F4DA187E1BCE6D0D24436C3C6AD5D4AE0BA3E6471E241B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 ed7452bfc66eaa783f0430b608e15bf4e2f74ba89f01e1659dab786275d81945
MD5 658ea0fb2e0bd6a6721b20cb22f87b5a
SHA1 c455c4f7cf9b8af97e63bb8284435983d0b9116f
SHA512 bbc342d4f684e8b6ce5d8f6a325723a6198f7428416ebaf87e0e13c4ad0316968d993c01cec9dbf271a9f33e7c70ed8b52c5d9e26088c44cdab7a89449c37724
SSDEEP 384:DWQnY5w3oVvRezG6tGtC7C9dd1QWkGHoaVmKi1QOxHigc7gLD75fJ2rRzHtGvIaS:a5SzRA7z
TLSH
T10A62ADF783F5C62DE91196F0DA087E1BCE680924436C3879C9D4BE17A3E6071E241B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5d6ba5832d9601b86451b5c07658232389c2af06b219eab4da1099b2165bc1c0
MD5 bf4d3831680c6fca595131d5b3368e4c
SHA1 cb8c5de8c0e57420833de1907c728c78e88023aa
SHA512 e96f396750a950d9c8b4eb8c98255a7939a355cc612b70ed9d5379ded660b95d49c90a94b3266c200fa5aa9d9431e7a57aa26976f29cbb251a08d5dfb63fb51d
TLSH
T12621CEF7C2F8467D8A0192F867146E2BCE2D0810531C3D5AC5D46B5B93E28F1E24095F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 429e142101e2cbdb9e20ce47a14cf573b8c040fe047689666c525dcd201c2e3c
MD5 6492dee6a19c651c81bece9ce61db561
SHA1 ee28b9a43b1cf0a930f58df2d34b55c3931ad422
SHA512 86c545b75e6a49ec27db813565c4747821c9733509500cf055480b1174d917e7ed6786e342b74bdf4f8f0469512ad2650e9fcc80922a36dad286c43ae321cbae
SSDEEP 384:DWQnY5w3oVvRezG6tGtC7Cdd1Q+kGFF3aVmKi1QOxHigc7gLD75fJ2rRzHtGvIas:t5SzRA97
TLSH
T17462AEF783E5C62DE91196F0DA087E1BCE680924436C3879C9D4BE1793E6471E241B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 723461f7cfff37c607306f4717e112485ce0fdd8e562c45eff703297b8779772
MD5 7e3ed70944d26c1c5563f095cb5ec492
SHA1 70d0f70fd0f745b37130908eabbe07f521f8b6dd
SHA512 2beda8f88225d5ccec2fb520a48b9ff7916fcc2ec87645e70e67ba34c1946987b23367c9536b5436a1bffc434afda98c02e4806590775189429ec4e7cf7e1ceb
SSDEEP 384:sxRF5mWi/fjsuOh5c//5B7r29WWmQ5D9bkhJ:s55mWi/fnOhs/5AWIDCr
TLSH
T1C382E7529924D97B8CC7D659BE31BF52E2F940329DD15E9CAAFCC91C00EB6EE5203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 31KB
SHA256 8adf14a713b2794b1818a4209b292516ebb01a2e0a27c14dfa284e987f0ce478
MD5 8a77fc1ef671ec47c59b4e20fc851567
SHA1 082e04c099ef6ca23bb0fb6703bfd643aeffe24c
SHA512 e618f5a4df6567b627093d44f40a7e6c43e85e52ce392116d0625a3ae5edd893152fa6514212ea302e2cf57d64679cb5bfe64374bb364e82d0e4602ad1f8b08f
SSDEEP 384:sxRF5mWi/fjsW66sjqMpRiYnazAW8pZS15posJWeT+aOh5c//5B7r9sbQwWmQ5D+:s55mWi/fZ4nnc7WeT+aOhs/5GFIDCr
TLSH
T172E209469910C87B9BC35D18A93D7E33DAAC40625AC5CEDE5AECCA1C01DE1FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 85c7b303ebef80ca72b3f9ca116d61bba155f021b075b4dae806fdd79207fd1f
MD5 d9e914020e626beddabe592ff5f83377
SHA1 8886f394e1cfb4a686ae62461c04ead1d672c29f
SHA512 5b613470a92c123b2e0fb4b090edca75d1f0706852571a2aff5fdb0d9aa948e7033be696ed098965f5bc5fb4dce42c8e70d48ef98393dbcbada39565d78fc714
SSDEEP 384:sxRF5mzi/fjsuOh5c//5B7rLpLWmQ5D9bkhJ:s55mzi/fnOhs/5bLIDCr
TLSH
T1BE82D7529924D97B8CC7D659BE35BF12E2F940329D915E9CAAFCC91C00EB6EE5203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 4d7ab5b00e4a2ad5f78dd58d6b8859d2fa2eefb39075b9b234240c55c7183ffc
MD5 ef49ef8c9e8b78ed4e15b0cfe43d55a0
SHA1 87eca0afae0b037461da5702729f238106657227
SHA512 1e81fe4d5da1f201d1b9d1712f1a4e3b09c5821a299aa2675416a0dfe17876307eabfddf3e87b468d2df53fb7a1e3866c7654b340d07b252ac9f5d55ae9c09a4
SSDEEP 384:sxRF5mzi/fjsu0h5cP/5B7rv/JWtQ5D9bkhJ:s55mzi/fn0h4/5FJbDCr
TLSH
T14082E7529924D97B8CCBC658BE35BF12E2F940329D915E5CAAFCC91C04EB6EE5203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 1a9413971a6b5a2cb1fc79608e5e2cce3f3a947047c646acd69788b9ed0353e7
MD5 74b8999c548aafc04b1ac849c8ba78f0
SHA1 1754fb60c15bd126bdaf12f5249dc3b858d9a773
SHA512 ef597e01a75ff934781ea7ef6c079d00950ee7098c87776479305d47dba86f3638c5900a1e5c51b724963538014f2847cc354538944fea6ed609a73bf537918b
SSDEEP 384:sxR65mzi/fjsj0Bkg/5B7r/oWrQ5D9bkhJ:sW5mzi/fS0f/5xotDCr
TLSH
T11172D6529924E97B8CC7C659BE35BF52D2F850729D911E5CAAFCC91C04EF2EE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5e4a8c15b42fbe1c4475c6a080dfe3b8a82f09d0316b3be78efaea248c445401
MD5 15f7e0e382fba0b9e90ed45b8381007d
SHA1 e94ff48f84e034240d8b7770225f759f764b3fe1
SHA512 5ab72c7134d4fc76ce0c29be265a39d061da0d8a2e6598a649076373d698d6b451aa7c698c1158c835bbd4ec89aca33a5ca80aef9cc8401cab68cc3051b2bac5
SSDEEP 192:sxRxRfGOi/fjsUShm+oA8pxO/g6+WN0Vd/YiKai+GEIgIJ:sxRx8Oi/fjsPhYU/5k/iWs
TLSH
T12832A615AD68A93B8CC7D21DBB25BF53D2F95032A1951E48FAFC8A1C04EB6DD520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 c056f927a8fc71d26a78ed75c27380c370d16b9bf792b0d45b5f202e26a264e2
MD5 f4b3b41f2e9293a1aa1bc966e2a82206
SHA1 e5c64350f28b1300df3a699808665c9cfcd1bd1e
SHA512 7c9c1e4b3a13c42c6e7535e618e355fac30f59e237a33cb32735934437f29c781297b5bfd06d427e2f1d648ec80cc8ac05ef6def74451029d779fc261fe0432e
SSDEEP 384:XLMDmVifCtgvdFfnvKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVC69lLRRZDrohi:XIDmVoWgvHfnv8F1+UoAYDCx9Tuqh0V4
TLSH
T193B2DB2B640DC77F4F800A9DAC296FD77D9802CB9A588D4047FE994C02D77EA921A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\208b4765-cdf3-49de-87bd-6a9f731263ee\index-dir\the-real-index
Size 576B
SHA256 633b509cdf2d0f802be5b4b87fdb0a20fbc39354451afaab9d629712afa1e3b4
MD5 8057576a3da35e653f700ebb9d16a737
SHA1 dded9f448d11d9373782f304792bd16d437b735e
SHA512 c320136a44895b9c68fcda1bb6a70f3718cebbdd87aff2df36cfd6e5d0b37a8a3c20d727dd1350f86190111996535f20d29d8da2d0480ba2ffd65736c2df50d0
TLSH
T165F0ABFC6BA41A1BCD205AB9A7300CA0443CE60C9709DB8B18A8D882391FA078648972
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5988dd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\208b4765-cdf3-49de-87bd-6a9f731263ee\index-dir\the-real-index~RFe5988dd.TMP
Size 48B
SHA256 46125743cf846086bdb87f829efc861e7639e3a011a79b2705403fa4183a5839
MD5 98a35d433de0fb0a9a612244be0e9262
SHA1 a31afe71d6e1a9ddd3c8744f9cac2e8ba6ece560
SHA512 e29cd86557e649275c2be44d43050ab5dde6c8010c656cae62e5966832b3456fd5c411b8e02275f86587003bdf1cf3755dd98593dd2a0bee56fe99d887332af1
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\96e22f26-ea50-4417-adfe-eea352ad9338\index-dir\the-real-index
Size 2KB
SHA256 dc8afa06ca59ed12fea7c5387250a2399b592f32a4b9594b8e5dc7d80173844d
MD5 0fb1f32710ef1e6e0bb30891740f8dd2
SHA1 3ba201b8b070f8bd8d4e885cb27feb9ebd3a1900
SHA512 4bab6dbaeaa5ccef056091f5d5838105cd9f85a1f46894bca90158ecb0597d7c236b483da7ecf9640f038bf53b0d83bcc00df4d8d5188085d82c2229c4273dab
TLSH
T14851658CC980ABADEC7550FE1D9418B293752D24FC55C3D281A8F1B834132745B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e620.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\96e22f26-ea50-4417-adfe-eea352ad9338\index-dir\the-real-index~RFe59e620.TMP
Size 48B
SHA256 66a79014c5dc5daf18e2a6157b0b395c17d03dfdcbb58ee9b2c487f88fc8be93
MD5 b9ede59eb2748e566abb981ea4d4cb82
SHA1 187e79bc87e9cc7f4b3c9dc3c4338822cd26dcdc
SHA512 c5e942b94566aae43ad563f8268aa9a5940e7e0a52602ec8158a945fcbae78f9bcb3f97df038cc5971178cf08d241f5356d3519c6d174215f3e7cf13aff7bfa9
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d245f683-a3dd-44be-9b78-37ffa434fb54\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d245f683-a3dd-44be-9b78-37ffa434fb54\index-dir\the-real-index
Size 360B
SHA256 3d8a5d500d73d721139940f1db0448ba8c9c60c8dca5cde5dff28edb2e366124
MD5 b7632a7331f15983c2a026eb85fb8ba7
SHA1 7ffa5bff1002bee54a2ae3ba5453b238afb14dcf
SHA512 38bdf39467bebfc993ceb80b0a78f8ae3fd3bc25175876b0f15768275e0bb0091920b53c49c8720f10aed7e0f6ec45629b907d824af6b283e53289a32fd0d9bc
TLSH
T138E0A71DD430E711F90462798A9644A011749D5DFDA56242C540B3A9B866681A64FC7C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ef29.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d245f683-a3dd-44be-9b78-37ffa434fb54\index-dir\the-real-index~RFe59ef29.TMP
Size 48B
SHA256 6771509ea84877a45ef7e14d13405e302bddafc65eef8abf5d2739fa895c21b5
MD5 421b7caf1e26ac679ccdfbed4faef510
SHA1 bbff30a30fa9a33ba5a3df8ac3bc2ba4a8330227
SHA512 4610668af00d94a3061f5215c13ede6ab3b0ae782bc51a4c40d8dfb47dda50ec9fad351f0f965a87577bf9c87fa63694fcf808dbb8a19493ff2c6ce9e4e03b4a
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 89d2a0916612ff3e16d0be24439b701c8d4841726f95143a4cf38df4c258857d
MD5 ca6939a9dd0d952c9b2eccaee8639770
SHA1 4442809c9bcb9f3771dbd4b3fc9ccbf38af65afe
SHA512 257b9736bf26935ab98ced747845fa56c3b5003e38c4be0e70898c106885b09215aef810792101688a3d0d0bf26e1f1f88ef0ee0832b1baf9c6d0b6c6d8f0104
TLSH
T1BEE06886BD62049AB9B3DF90783171F9536B28488C45DCA862C5B009617192FD112E69
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 307B
SHA256 f95301ae2347ac057671e9f3f9e6e485f4bae477d19d1c21e426bca2f36ac695
MD5 87aa14e6a19862cf3acf316853f45807
SHA1 fd046ec8917a599a40a6a16d923aafa37c5ad874
SHA512 5cde46b309ebe391c57544af72fddedf90de76b07c7b8aa47806bf133a7f7f8f4bc863eea349dd90288271902947bd70efa97505bca3c4adb96e5074f09c5333
TLSH
T147E07D47B854405678F79FD03C31B2E9936E21484C818E6841D510095432A2AD112E19
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 388B
SHA256 e4e861dd606cd225a632ac031e4c9619cda03f18e6fe807b539fd0bfe5e78872
MD5 70a20b7b620a9123fbdd2548a9ccb69c
SHA1 6f2c1f11646441e51dfe82fa4c25bc6d8dd81652
SHA512 04a78f8bd21d6651ea2cccc323e06b3b2e08e7b3387add083eef6bf201535d7fa84f000898d0235bbfa5cd816cb3b5aeaa5770ae14d5dd57764d24bf6bd58128
TLSH
T1C4E061467950445765F75F907870B6DD53691C488C40CE6C51C6304D6475A17E111E1D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 ac4f04d512d1d73306c8b04170dac079d08ba02ef334f4cc9b5380e7bff4dcfc
MD5 e87f3f4f7ef3a3088bd0c7485afaf0cf
SHA1 6b72f8350477ef614b4c4c5525f54f3407006fc3
SHA512 b96daac92a00800fe9592e8898adbae849c59cfa4fe28830abea9fb61bc826572c7fbbdf6976c14f6235b169d21265628e4cfb3c3e5054fbf5b667559dadde1e
TLSH
T123D023E545314D9B2F30F744D135117D911F4D04DC84DCD45500F17734F4527C403525
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 242B
SHA256 2c8f12d420eba0baf66312ccc38ca90bec6ae4b3e61593c519bd0bd987bd5c54
MD5 0eced2ff1048d0c0895575b4c33c1794
SHA1 cc1ca8d0da9abde2097986ee7d5a0c7ef7d6c70e
SHA512 b0a44a2526a4f41cb19f5317718c09a9f9f103035c5cfa9297f56f14405e832f7e4d816b06bf1b37045769f5a99447bbd505ad356ce40e638eea73beae944be6
TLSH
T1BCD0A7D32E6144466530AED47074B27C531FAC488D81ECFC3244F05971B5D2BC423D28
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 913546c932b69a91374e86b5088b71ad1fbc6f7222e150608096c432a510359b
MD5 28eb283562793953f7bf9e6735dd9e0e
SHA1 25c7c3dbcd81fe95a626ce96b127d2439fb6a480
SHA512 55067ec4b64f3bd1cd8324c22be58757d8206716fa2f75e0a8bf4e8de7744703a414163ca478cb740915d5ac2eb8d5e8ec205ca9166e066d3e12c1a32383d3f2
TLSH
T145C092E71E208ADF4B34FBC86179633DE21F8248C8C4ECF8A148E056707892BC803A25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 1096a2268d20916af3e4feb0d6ebaad220c985ce6afa285ee210f5a23be85dc8
MD5 66fbc9d08942c4a362ebd8b6e81ea1af
SHA1 41ea85ee83c6f54b61e97cc6c69cd9f57aec1e04
SHA512 22207caec1c431242f5c88c1ade5e7e1d17af35b639e362a4ebbff7b48f97b3254a6f2c96e85b39ead703014b3acf9551b4b4509ac64f21c9267dbc40bb87c1b
TLSH
T1BBE068867D904857A9F79F903960B7EDA32A24488C94CE6D51C9204E60B6E2BE121E2E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe592ef6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe592ef6.TMP
Size 137B
SHA256 9a8430e718705b652a26b0e76f1819263fe5db5428a6b2d8c0c2cab120c8ee78
MD5 b3b9be43388a26fe09e1595b34626861
SHA1 7afb8d07ce65aa37c3f7cd07f2926a193047e183
SHA512 d77bb190ca5cbe1398c4a2c2e20cd7e9fad33d2ee98d1f86b624941a814e5f05f9c0dae149c294271c09ae2ef4fa8cd930874cd51a443068fc93e21d41f5c420
TLSH
T1EDC092E31A2189DB4B30FAC5A138626D922F8D58CCC4DCF8A149F096B07892BC907A25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8b067322-d071-4967-9990-283827d1ba72\index-dir\the-real-index
Size 168B
SHA256 7f7d1d1ee01beac085f34e1ffe1b842ad1ebc55fd82e7719edc534f2212713d0
MD5 ae73ef4b9b1acd0c4aec491ba01a4950
SHA1 269dadfda6d49c6c7c3d074aa32f8a2dcdf3c27d
SHA512 f430cc1cb403480f433e5451dfcbf7fdf38253b0b8f1c1a169bd4844b39bc32160da6d00abf4e35aa412a0e46b0df471a733b11729e819cb01b5d945dcc94515
TLSH
T129C02B14CD711001F817D77038BB303049A014EC00084B16D4FF900CDC52591D140704
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8b067322-d071-4967-9990-283827d1ba72\index-dir\the-real-index
Size 3KB
SHA256 c40ea81567c9c01fb7fd4e28d81766e62f230ddbfb799c00e5a98747c0ac7707
MD5 b13e5b45cc9ab4f4a420a97e30faf479
SHA1 8ed2e2a5c01a0f190352451f800b8b7c72423fa5
SHA512 a3cddc8b19ebd9ebbdcf172d6f4d266d8f789b4ab5f2aaa463cac1e977f9c58c1d188e0664f43acb79602b32eda815b2e8a23d542b724ded0407c9878c74e2f9
TLSH
T1C751C78E8D465B96DDDC61F218761886237A26CC03844E1B9EFE9A34BCD326E2C4A558
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591459.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8b067322-d071-4967-9990-283827d1ba72\index-dir\the-real-index~RFe591459.TMP
Size 168B
SHA256 84d3ea714869b98f0a334a1552eb7d5a4c0c8e2d79d5381ef1b8d9efb36be19f
MD5 3713762d864151eb49caa03abc580fce
SHA1 32afdeab628715dd10e2ee25138f012a90ce4c24
SHA512 31e98ad57409d9c69524a2054460672c163c3926eb56c1d2913d3cb6ca710f2d0c9ca5693821897433823ed574def72b31fded230ba6aebd76336a697bc3f73b
TLSH
T1E5C02B648D315001F452D7B018F73031102018440414331342FA904D5C915A0CD41300
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 256d4c9f61bdf04b5007775bdde6aa967ac98c447c0394cff39683ca95cacf41
MD5 4c9e15e4a08e4453e1fff73ea821191e
SHA1 8e812e5d07647400517422f61bc4781b8dbf2971
SHA512 7c3791226d3f0cbebbb7e576573742ce7475a573ac6489c660e2e55e51a0edd37fbaefcbc5d4602aee8c56b3cb798b52a6f8aff83cc8b9e0d9b031688f254c59
TLSH
T1E1E0D8FB29E76814E86BD3D625718061004239A8DA44BD4F142BD69761A1314B495C35
MD5 SHA1 SHA512 TLSH

Submit Download

67a473248953641b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
Size 193KB
SHA256 1eecf8b4d0455e22178976ab90f5343590fffd4e0928d168f8cb0097efbf5bf7
MD5 a105fadd729cd4f33e06d6a177103d92
SHA1 205b0c40001a4d6547d3b111154e638b228c571a
SHA512 751e3a1dd3d62106c290850cd368d21f7ced0d0f602029b20f04d9e2927c7e00b1af4d162bc63c32da7f65c31b1b961522dcb5daa9cd72bbd6a89a3a6d28dd36
SSDEEP 3072:VzDylj7b8OLIgWq75ZIUjVxgao2lZacwdHp24p:ZWYOLIgWQTIU3gclEdHp2w
TLSH
T122144ACDBB91B47752A744F4802F0803B239B896B80CC4B8F595DDD96E24659837BF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 20KB
SHA256 d48ddf0a96175f58f73d935a6cfbbde51991468bbf01436f3e5315d8c6606bf5
MD5 c92a193e52c66e4d0288318124209015
SHA1 41fc00f2167759e8b9eec5b50c4a2ea3e5f6b9ac
SHA512 12625fe956777edcbc5ac880ce73c96cc5036561e416c32841151607c464c4f0d299cc762fb8aef13a181d8c11d4cdb61f8632fb1534d4ff4830f7b1e4138fea
SSDEEP 384:CwW3+TJ1Lvm2mM1eeAcUuyJ3J6Mhd0y5vnIMtD7+D+baMefQu+JEY9:xWkDjy7vh+y5vLn+4ejg9
TLSH
T14F920BB60C64A477C2A5C6B559BEBF096DBC12BB08968BE5F06D457801F4AC7034F80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c131d807288d22af5c1db512a8d0a34e19f35aacb6f9a8466d47a47e32439ac0
MD5 5e6875a8dc9a56035642c8fc835d8a64
SHA1 749951339205471b66c6563abe8322f16a0f5c27
SHA512 7a5530d10a6b9b94375423491f680710ecd9ab4727fec7ff58112eda8e67a5575f42b7d3e183769874500af90098959bda1f0c303fad4a67ebb5307804c8d0a5
TLSH
T1CDB012A54C0E98C0CC3C02B5C1501588311888480A19B20690EDA0B4982314000E1409
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597eea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597eea.TMP
Size 48B
SHA256 3e3b6f7c99fe42f078062eff871f268669e5d7672962d895fea7d771e9489d35
MD5 4fb653f50a0ede0e66a80cbe85d6b206
SHA1 fc12106d6d0e48bff43a84173a259ff91d34d1f0
SHA512 8845de4ddc10f1435f1f160e06263f70f2f30aa9d1eb7d98ce9b3102bc27479e032ed672feef8d0b57ad473ff7c3af807969d0a07dafdadcfca74e55350b2b98
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 3a46f43b77782feb6b218b6321be712cbdb9ec8092bb1f4e969085517eda9dca
MD5 85778a686dff33cfffc1cf50df4e8ba4
SHA1 8be5639f0e30bfb391dbd9d3348c14b0006441db
SHA512 a73aaeba57d5e69b35d0fbcd0f5d4eaacbebe96f7423e90c77741161e109e163f0fe7fcdf376b91fd35ff50753c7832949d0d2312f2e178e787a4ffab261529b
TLSH
T119A002A563C01083D0AD53B065854B4073924C98C5090A1755D520498AE41908A52014
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 ef41b99a23a347e2e75d37b1bcb5434e750b7c16a1e34c66dcc178532ca5df53
MD5 473cf38596037568909441782267c7fe
SHA1 73896a21f3a280a05762f96c08c91a63e59fbc9e
SHA512 fc44077f4497ee837af6907a51da98078abf8a773245e0c98e05c30cc644ae286c3fe501ff3445f1f4fe253f07d18d06077d5b94b7fcfb81b89824ca4823b6fd
SSDEEP 96:KUowK1+KKukK3qyeT6KMsDegK/Ky6+8KT6D:qjXXhDPXk
TLSH
T12DE1D02431371352787E391890E4AFAA134671637029EB3E7BF954A58E2BE044DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59d8b3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59d8b3.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a354eda8ea9f0283fb37270e9d2f94f66b23c76904c628db479b120bc9e23603
MD5 ad58218fbb67abddd4b7c1c0353e59af
SHA1 ae636e44044e7ffdf2fe0fc30e42d3f4a0dc058a
SHA512 ad626f544463ddeeb531f35a97366284e240f796a38727041619dedfdde66ebd8cd83fad18418d91e709ac5a6e8b4ef1afc092ad094518c1fc83e319285e482a
SSDEEP 768:Kw35aPsPcZ0rfZWXYo+TYoKsSBw4Ot5AEl94BHYjH0vlf4n:Kw3ms+BVa5AEncHYjUen
TLSH
T1FEF2BF78DCB199678CFAD3C5B60736065EF5D1A3FA801ED0ACEC6A1E098B15E130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 d873c9184062ec29110242e3aa94d410cae2f4ad9dbec8ba4b07af3938b1ae08
MD5 1cec7d45577028cbfeefdf1193f467ea
SHA1 846bb6b6bc9e408e34e9d1c499df585b6199b704
SHA512 d3372a172686e50f8fb5169aac02fde2d57b3fd85b136e1c972b2ec150715ad9770d12f0a95da6b277e99d593daed3348062bd99f99c7455ef4bca2ffb892e81
SSDEEP 768:xw3Ka5jcZ0rfZWXYo+TYoKsSBw4Ot5AEl94BHYjH0vlf4n:xw3F+BVa5AEncHYjUen
TLSH
T116F2BF78DCB199678CFAD3C5B60736065EF5D163FA801ED0ACEC6A1E098B55E130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 f1f0e1db09d9bed259a3c1460fc51b84ce9b7f5b7338742e8aaa7b9736cebcac
MD5 5c730833bc3d0c28152c55e04515fb2e
SHA1 4928395aaea894dd2691d25e429eb7d9911e283e
SHA512 05780eceb4c71fdc3e03292b7d308220cc52e9ed573e4224cb51c4b5e6f4f468f98b545af547b653058d4b977b508405926c227b0e6750ff81b823bc6f3bcd9b
SSDEEP 768:z/UxvxjgC+b3s0cZ0rfZWXYo+dBw4Ot5AEl94BHYj/CAFTN/:GZj3+b3tdBVa5AEncHYj6AFB/
TLSH
T1B003BF39DCA59927CCF7A785770B3397AEF19463AA812ED089DC2D1E0A8725D130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 7f37eae48c24835494e3017a867e7edfc0062500ad64d122a82f2ab7659e9509
MD5 ca91f572d2313ff83e90875a3b46d7d8
SHA1 d6eee2cf9ec51cac7b0b756fec13c87805683e82
SHA512 77e1a6b04bcba7f6908c0f2173fe21ec633ef52e8ff09ecd4fc1ec49cdb7c66701df5a9d23fa184488ffc8b7492c8624f614f66b0d815df317e398f185d7faab
SSDEEP 768:oFQF3NwgYaZIK9DcZ0rfZWXYo+TYoKsFBw4Ot5AEl94BHYjH0vlf4n:LF37JBVa5AEncHYjUen
TLSH
T138135AF588D38937D8AE9787B73E2E025DBCC163B9805990BBD8591ECD4717FC20A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 69a13e41cecbd83ac41640ba4fa25a5d51375cd1b8d4513e9aaaa94b1644d220
MD5 abbc789cf9d87218903427be78e0e76c
SHA1 78099f63fa80b6b819b4e2c75e96c144a4601250
SHA512 84798a4767dd707e80dd2a2908d99d7934b8b3a4c92a58e17ab3f80dd86ed2e9e2850746f43413efe5695a728aefdef39ce881c52dda3378a89349900e4d94af
TLSH
T194E00402A74190FFD13C6330419B127172F3807813F206965C1209B568033011F34FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 aab311ec53a2f3cfadcfc3b1dc9b08280ecbca656db737f76f28a08f03b05669
MD5 0d9893ecca5f71adc55009f3d98903e7
SHA1 c628f4faa9e663f51e43bc38daa8efbf06b4ba3e
SHA512 b0daa2c761f1acdd907041637f70e988295ba16367ac0791731edf9a4a5d3a69ac1978c1d06e1d6e80b245fa1d70c2d99265d1179863b9fd4c9491224ce5cd46
TLSH
T1C4E00103634180FFD13C5330409B227562F3803403F20A555C1009A55C033010F34FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0fec3eff327f6e6b36950d82be54ee79d72b3f720bf5fbae236fe65caacafe93
MD5 b9752dde342acb02d3086880f23d085f
SHA1 8863d794495d873c07d26e2b877d6a6998e681d3
SHA512 a17db26f7f97b9d25787c9b925962dfa554b537bd679b529fc5b63abc28e700c7a5d38bb376aeedd6107cb5b7c7ce723051589557ca0837d3f5351dd19a8e073
TLSH
T108E00902A34190FFD13C6330419B217172F2802813F20A555C1109B56C033010F34FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3e9b499a7114b84232e99beb452ed7c6d700823b9dbc397934a791b6400b4792
MD5 28ea9e2892db01314366f9957b61afe8
SHA1 7e4ef14dbf863edecb637e73467578cb266097df
SHA512 ee8f8d5c719007fd87f0bf751cbd9b92bf46951b7d5feebf800b1e02f900fc5990fa2d966afd5faf46f052cc18a37be8b48894889fc0825b99b5260c5fd5f766
TLSH
T1A2E00203734180FFD13C53300097107960E3403403F205545C000DA548033010F34FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9c49bf10f69262491b76881f7b9df80fd092f4907dd3e701267f64c59d364966
MD5 1c6feaabde41f8ec4829595bd3cfc310
SHA1 9f957cad66b7698cedf8e4bdac191db48cb09842
SHA512 5b14d067fe50041f258f1ea837ab6844e406560f6a2a5f1dca52e16671058abb4160d96c4382b26a4989422355301280c4a7a351f375e14c7836a92d8545be7f
TLSH
T17CE00202624180BFD13C53300093107961E2402403F205545C0009A108033010B34FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5939b4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5939b4.TMP
Size 392B
SHA256 d03069ddb8118752af5a5293124ed95fc8683daeb2b0f48ba2958f55dec7a745
MD5 f530d114b6537a91aaae8486095e706e
SHA1 f1b6fc68e08860650e5fd2d64cfc56b5f3b92f46
SHA512 8fa59a00c4d8705ad7e54a8b6219b17865442d1715c6fd9fe2bffbffa93a05add0cd7f72f8cc657082b98f4b2bb02e930b33e0c6026908824a68e4ef3903c29b
MD5 SHA1 SHA512

Submit Download

453f9c68-d58d-4a16-810e-f180210e66b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\453f9c68-d58d-4a16-810e-f180210e66b5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

memory/4852-2419-0x000001853D6E0000-0x000001853D829000-memory.dmp

Download

memory/4852-2469-0x000001853D6E0000-0x000001853D829000-memory.dmp

Download