Resubmissions

26/10/2026, 17:33

261026-v4tw1afv4v6

26/10/2026, 14:35

261026-rx229axtcw8

Analysis

  • max time kernel
    899s
  • max time network
    732s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    26/10/2026, 14:35

General

  • Target
    PlayGTA5/support/overlay.html
  • Size 1KB
  • Sample261026-rx229axtcw
  • SHA256 34071c613c3891552b31ce84f6f4d45034acae63f4f1f7cad809bec2ff832b71
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\PlayGTA5\support\overlay.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4604
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffc4d2cc188,0x7ffc4d2cc194,0x7ffc4d2cc1a0
      2⤵
        PID:4976
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1736,i,11048439117370261338,9637941571855259671,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:11
        2⤵
        • System Time Discovery
        PID:5420
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1544,i,6088227145589759369,17608118602602042132,262144 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:2
        2⤵
          PID:1128
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,6768564415552954712,501271259080595581,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:13
          2⤵
            PID:4520
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,16397065649441672705,17768443829825019808,2097152 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
            2⤵
              PID:4680
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,11197024039792560402,13332839157793714816,2097152 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
              2⤵
                PID:4336
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,699007408265716504,3296568297230092297,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
                2⤵
                  PID:3132
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,4003144807632554367,17520337347120232459,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
                  2⤵
                    PID:4504
                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,6001531955230914995,2050514647976086588,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
                    2⤵
                      PID:1552
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,10930372023820634185,8360347305231491851,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:14
                      2⤵
                      • Suspicious use of WriteProcessMemory
                      PID:5984
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                        cookie_exporter.exe --cookie-json=1096
                        3⤵
                          PID:5900
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,6001531955230914995,2050514647976086588,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
                        2⤵
                          PID:3156
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,1078309242411375777,13897571752836464814,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
                          2⤵
                            PID:6116
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,12769131444848968499,16712736287557479501,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
                            2⤵
                              PID:2256
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,14284290652794309493,8761099367918746421,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
                              2⤵
                                PID:3336
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,8424848103667251853,16321638015838175425,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
                                2⤵
                                  PID:4124
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5632,i,12505196534969006638,9537842619097652207,262144 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:10
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:5444
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,18440335245635859633,17919710483180103139,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
                                  2⤵
                                    PID:5672
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3192,i,1388943580541968447,5405911266877772919,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:14
                                    2⤵
                                      PID:2112
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3176,i,1036439024789008758,3863433518390009220,524288 --field-trial-handle=2088,i,5897403721121398387,4380397535798597270,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:14
                                      2⤵
                                        PID:1360
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:436
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                        1⤵
                                          PID:4620

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              222b3bf0-43cf-4658-9254-201d74283e75.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\222b3bf0-43cf-4658-9254-201d74283e75.tmp
                                              • Size 27KB
                                              • SHA256 2a538029c3854eca4a20b958b2e9fc2827bde5ffd2c505e74af09cbce97a7be7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              743f071e-fe87-4a5e-b3fc-e13d2d856319.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\743f071e-fe87-4a5e-b3fc-e13d2d856319.tmp
                                              • Size 27KB
                                              • SHA256 1fc456e3de0c2e6beb10b17f12caa34c9d099fcad0fded8c80bb5ef9a3c0b818
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              670a5039-4c60-4d47-a5cf-f312464fc37f.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\670a5039-4c60-4d47-a5cf-f312464fc37f.tmp
                                              • Size 105KB
                                              • SHA256 c232ec974e0782cd13a8942d319d172253ded086c99dd896db4bd09ec5006e8d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 d06c655b2480a29ad334636f95a35c5bdce83a66295adea08a8856dcd298e39e
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 83eeb6fb69147b86d59db93f6bef3b9700e1a01b1e16b7737138a14705b925ec
                                              • MD5 SHA1 SHA512 TLSH

                                              026d6ad4-e5b2-4b1f-889e-c8d5ea54a626.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\026d6ad4-e5b2-4b1f-889e-c8d5ea54a626.tmp
                                              • Size 11KB
                                              • SHA256 5cfff58d01d948d7fe6cde1a5004e69c7e3201f6c3584ff1c9e4527965e80720
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              0daabebf-d3bf-4553-90a0-73cb68a6b423.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0daabebf-d3bf-4553-90a0-73cb68a6b423.tmp
                                              • Size 414B
                                              • SHA256 e30d78547d8f22288376dd9ad897e7cc0f7fb2d39190cc713885e58178fb2169
                                              • MD5 SHA1 SHA512 TLSH

                                              45a801ef-3164-4cc9-8a03-020eac896a67.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\45a801ef-3164-4cc9-8a03-020eac896a67.tmp
                                              • Size 28KB
                                              • SHA256 f8c6613100e2e03836efce332c8c5b99b84085e0b6f868f5c5c9c1389626922f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              71bda027-e09a-4405-bdf9-c5936c6a9fac.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\71bda027-e09a-4405-bdf9-c5936c6a9fac.tmp
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              8ba48c3e-4832-4615-ad24-29a28f4598f4.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ba48c3e-4832-4615-ad24-29a28f4598f4.tmp
                                              • Size 12KB
                                              • SHA256 47e884f344febc9ef2fddbd5ffe87d9def1ae26164b14b2bfb7a9898b4f5a78e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              LOG

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                              • Size 334B
                                              • SHA256 25d0168ca302bdb2f4eda36d0d162c5cf7c6331a11494f469cb01da1c68c6a07
                                              • MD5 SHA1 SHA512 TLSH

                                              LOG

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                              • Size 331B
                                              • SHA256 64f26a00b0ce8c2091232dbd1079c66ea95fe3644401a904717c51d69282a366
                                              • MD5 SHA1 SHA512 TLSH

                                              LOG.old

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                              • Size 331B
                                              • SHA256 752a19047ff5f215a5d0bb225f5ed4981fda161c2207403557477729180caf12
                                              • MD5 SHA1 SHA512 TLSH

                                              3731a5e3-4da7-4ba0-9ef2-4bc6f6afad12.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3731a5e3-4da7-4ba0-9ef2-4bc6f6afad12.tmp
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              5dab7a0c-c54d-4553-a0fa-5f3deb0ab9f5.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5dab7a0c-c54d-4553-a0fa-5f3deb0ab9f5.tmp
                                              • Size 1KB
                                              • SHA256 c666d352000907f96ea5bbcc1fc6624268c540958fa63d50ea51e1401f0e5149
                                              • MD5 SHA1 SHA512 TLSH

                                              6841cd93-c77a-4474-bd85-06b1e516aed3.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6841cd93-c77a-4474-bd85-06b1e516aed3.tmp
                                              • Size 1KB
                                              • SHA256 b4dc9ce105f45c0948c477d5f173c7da29e8532b55983886d2ece590d0e68d17
                                              • MD5 SHA1 SHA512 TLSH

                                              a9a77d31-42bc-4993-aa62-62ee71863b2f.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a9a77d31-42bc-4993-aa62-62ee71863b2f.tmp
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              eaf1787e-f378-4afa-93a0-fdb806bc0948.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eaf1787e-f378-4afa-93a0-fdb806bc0948.tmp
                                              • Size 40B
                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                              • MD5 SHA1 SHA512

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7a53c864-ac6e-4416-bde8-8f6cc6c78955\index-dir\temp-index
                                              • Size 1KB
                                              • SHA256 453ae0c6a2c62426b5622c03fe9d3f5b0e08bebe666e89b11a1ace477c1d25e8
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7a53c864-ac6e-4416-bde8-8f6cc6c78955\index-dir\the-real-index
                                              • Size 1KB
                                              • SHA256 1da2017fe5eb7b6d2e7c504c1409258a4307278c9e2605c61f7caaaba82a127a
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                              • Size 371B
                                              • SHA256 cd6588cdead3236a9801b4f9ae03bc828aa2411481671d1ca9aeb689ff75f03e
                                              • MD5 SHA1 SHA512 TLSH

                                              CURRENT

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512

                                              sync_diagnostic.log

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                              • Size 23KB
                                              • SHA256 a136926df9be68bd29223ff65c8ea71179b8ec03838169a9cc4a04486fb7f971
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512

                                              d1a75150-9ef0-4de9-ab69-f99c94f9bd4e.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1a75150-9ef0-4de9-ab69-f99c94f9bd4e.tmp
                                              • Size 12KB
                                              • SHA256 fdeafe225d75e0024d4f06cedd2dbecb7b0c6e3880da42e443dad7dffd6d52e5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b8bab5ba-0172-4b50-a467-4c221fe7d226.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b8bab5ba-0172-4b50-a467-4c221fe7d226.tmp
                                              • Size 27KB
                                              • SHA256 0eb6a868d9a4076c78af6b5a6a47b0e99c4417812185a61bbc2f724637bd938d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dfeb153d-84a3-4763-8e2d-484d1eeac8bf.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfeb153d-84a3-4763-8e2d-484d1eeac8bf.tmp
                                              • Size 27KB
                                              • SHA256 d60423133f059d7833d2feb14902473a283bb5a042c5ab5316a6b146feac7c6a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              ef839be2-d118-4863-b165-3c68dd69e2aa.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef839be2-d118-4863-b165-3c68dd69e2aa.tmp
                                              • Size 25KB
                                              • SHA256 801a59f2e2c3ca2968d6af649c2bec3f01d2f1a0cf4167938324295393864c61
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              fb4e5fd2-e35c-4994-87e0-25cafb1de38b.tmp

                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fb4e5fd2-e35c-4994-87e0-25cafb1de38b.tmp
                                              • Size 26KB
                                              • SHA256 b7cd94abc13bb519dfc3d91f46e0b51b495c0d5d06b7bf734dc51ec0ec4f4519
                                              • MD5 SHA1 SHA512 SSDEEP TLSH