hxxp://youtube[.]com

Analysis

user interaction
yes
max time kernel
90s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/05/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube.com
Sample260501-txxtmsdv4l

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\pa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\eu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\sq\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\sk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\id\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\te\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\offscreendocument_main.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\be\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ne\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\gl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ar\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\af\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_145773782\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\lv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\hr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\is\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_145773782\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_145773782\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\cs\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\et\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\de\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4412_130243496\page_embed_script.js	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134221264360022258"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-643422742-1162610606-620613169-1000\{E6CE2AB9-D5B1-4C32-89CE-24A38C031B20}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-643422742-1162610606-620613169-1000\{3FB45ED0-EF4C-4C9B-8A92-ECF120FFDF96}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 4520	4412	msedge.exe	84
PID 4412 wrote to memory of 5740	4412	msedge.exe	85
PID 4412 wrote to memory of 3568	4412	msedge.exe	86
PID 4412 wrote to memory of 5740	4412	msedge.exe	85
PID 4412 wrote to memory of 5740	4412	msedge.exe	85
PID 4412 wrote to memory of 3468	4412	msedge.exe	87
PID 4412 wrote to memory of 3468	4412	msedge.exe	87
PID 4412 wrote to memory of 5860	4412	msedge.exe	88
PID 4412 wrote to memory of 2408	4412	msedge.exe	89
PID 4412 wrote to memory of 5860	4412	msedge.exe	88
PID 4412 wrote to memory of 5860	4412	msedge.exe	88
PID 4412 wrote to memory of 2408	4412	msedge.exe	89
PID 4412 wrote to memory of 2408	4412	msedge.exe	89
PID 4412 wrote to memory of 5576	4412	msedge.exe	93
PID 4412 wrote to memory of 5576	4412	msedge.exe	93
PID 4412 wrote to memory of 5576	4412	msedge.exe	93
PID 4412 wrote to memory of 4168	4412	msedge.exe	94
PID 4412 wrote to memory of 4168	4412	msedge.exe	94
PID 4412 wrote to memory of 4168	4412	msedge.exe	94
PID 4412 wrote to memory of 456	4412	msedge.exe	95
PID 4412 wrote to memory of 456	4412	msedge.exe	95
PID 4412 wrote to memory of 448	4412	msedge.exe	96
PID 4412 wrote to memory of 712	4412	msedge.exe	97
PID 4412 wrote to memory of 712	4412	msedge.exe	97
PID 4412 wrote to memory of 3360	4412	msedge.exe	98
PID 4412 wrote to memory of 3920	4412	msedge.exe	99
PID 4412 wrote to memory of 3360	4412	msedge.exe	98
PID 4412 wrote to memory of 3920	4412	msedge.exe	99
PID 4412 wrote to memory of 5088	4412	msedge.exe	101
PID 4412 wrote to memory of 1508	4412	msedge.exe	112
PID 4412 wrote to memory of 4276	4412	msedge.exe	113
PID 4412 wrote to memory of 5936	4412	msedge.exe	114
PID 4412 wrote to memory of 684	4412	msedge.exe	115
PID 4412 wrote to memory of 684	4412	msedge.exe	115
PID 4412 wrote to memory of 3248	4412	msedge.exe	116
PID 4412 wrote to memory of 3248	4412	msedge.exe	116
PID 4412 wrote to memory of 1980	4412	msedge.exe	118
PID 4412 wrote to memory of 1980	4412	msedge.exe	118
PID 4412 wrote to memory of 5092	4412	msedge.exe	120
PID 4412 wrote to memory of 5092	4412	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffad119c188,0x7ffad119c194,0x7ffad119c1a0
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,5322164696455818103,13127260314240996805,262144 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,12592132226026310209,15570883693597847260,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,2814683127625405702,3295559440883976127,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,2268712756775597288,11572043428808464966,2097152 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,810054582017437225,16087623156336257949,2097152 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4920,i,2869715144882808280,9693114836242931463,2097152 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4736,i,2174260692692801389,4402213893252657964,2097152 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,15897815153776193943,15244831200393821427,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,3586643571776346904,4151568720284983106,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  - Modifies registry class
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,3496137736272128438,8450772127149138205,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,18029017407960748524,1203065371460329763,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,4868146681768974360,13751816494582315165,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,7121650264859933956,1092847023660652847,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,7121650264859933956,1092847023660652847,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,17660186730809657342,15315929078086737715,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,15011174692137649849,16732582831863066909,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,8833952835965532201,1820270192108746063,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,14167878372251754673,5666552509491242797,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,1120634955249511261,2203923177823525547,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,13599526266695279185,16804341225965404871,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,6602491202902948005,13921151762932712895,524288 --field-trial-handle=2684,i,6875860263505049852,11427125714784007250,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4412_145773782\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4412_145773782\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 924e96ec20750cb6a5239ec6615014ae8ebb3de4d3c60595d6c95e7ccd197fe9
MD5 9b2430d85ce0b6612f557c45f7f3cbcc
SHA1 0a1e10f745cd18a847854cf92a1d4154f1e53a18
SHA512 187d6a5fac24a44192cd7964a293cf55a01134f6bd0ced9759bf4dee1fbc0273c5e118208cf3606ca4853d0f0f145448fc8342dac94a0745638e99f4acafd46e
TLSH
T1FED0801C1275BC31D4BA8575544537092D1DED675543533B5433557C0D87E1085971C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ce180cf0fce9a4a96685bbb0c58efb5750080d37ce961b69a74ae38b49eb68c9
MD5 2abcf056d353616a5983a10f17185a31
SHA1 40d71f06b42cf03d05e8dba44f76231dd24d9fd9
SHA512 5bff16b6683201694139145fd708bf7d834e97a5792e68cfb43b011e13c0e993e1cfb6a8c6f450aa2437fe486fb6f3ff1af62a05b918ee73bc195ec5cb0b3e02
TLSH
T1D7D080181275AC31D4A68575548537093E2DED675543533B5473557C0DC7E1085971C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8229dccc5f88a6f75861bb43043ca474012710a08f2a76731005b85885e9b1b7
MD5 544f3bc4eb95a9d2b8f1c1d23c6bf47f
SHA1 dbe9a715284a4fd6cefc0522f3b1cdb0558fb9e6
SHA512 178255d8df8f414a291631e6a8898a77c4368d2aa698a6d5b2cf8c87acc329733d694239d82ca79877661ae29ecbdd3ac3f9c33cef55f0d23a76d27aa4bf7635
TLSH
T1D1E022AAC825EC271CFC175A74504B4AE76113562B84899F3B3CD21C8FB663E4286C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 268KB
SHA256 545649fca300d448505d9ce4cc746b828e46252990df021947975703808acc03
MD5 511cae6542583c450f62abc08001144f
SHA1 d47bfb4dd9e4169715fa9d84dee7db2c079ff647
SHA512 6cc227990b6a2ef72817e28f942bc717b921cd2558d9855d103040a3050ccfa8bc4450b7738fdae420ebf1a9a66816a66c926eff6adbb7c296d892f36681bcca
SSDEEP 6144:0Axotnki8rNwGkWPP22ZlXIEdAHUy54cKwzHU0TH5YYoBUr5W9DWM:0nnkiINmWPRkDS0LU075IEk
TLSH
T1E04413E989BA71B36622C83CDE5612B816F2E537111BE5054C8686533AD93A30D8FCDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 eeb90701cb28ca0638ac8c3edef5849191eb62ac53a8b955333c35988093a752
MD5 37065e7bba832413193849f5df69d476
SHA1 908641bf369924100117b3b7961406acca2d7102
SHA512 25f548dc97f3441b009d34c6fd4a9c51bce1354c7d71d3548bc610f98939ffafd713b8008b1ea149e05c8be7fb3ac0462bc356cbffe2fc29b493f7aa87db5286
SSDEEP 48:AADyZ6Wnq/OTttw7QLgA9dlOth8yugM9xrZjbq+09+xf/XeBn:AAwaOTttN5bOtbr44l9+xf/Ot
TLSH
T1BF811B4CBB86AE6FEFE08176A6F3C452F2308564B047EE0901F3043C4935B63D6657A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58bca4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bca4.TMP
Size 3KB
SHA256 6129985eac6164fc59588f9670ce075cbf1dfad2e671f3d5e845e860bb64239c
MD5 62bfdf5ffb7cf5458f4428171320bd61
SHA1 d5862b8a5033ff25ccf8bff6a26713f0b88739cd
SHA512 0b72ed2533eb1a9d7c2cb786191012eeb1902ee835a67bd4f8b60e1ab05fd9cacd5560a7b6c7cf9627df1bcc3a30511db2430bf724e5f4a26748f91a901f9349
TLSH
T1B1611A54B38B6C2FEFE0007896F7C491723085587147EE0E05F3143D4A16B52D3B8BAA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 108KB
SHA256 f3aaa0d92cf3f837b8a4ed3a3febbdbe368d60e1c1c1f214e8d287cc943456b0
MD5 14a6f92ebb56217f5e902b4fe529525b
SHA1 d2c33d117e7e30d826774a000df38ea05df49546
SHA512 fa2b34607ac1ce2710087ff27d442c4b8a2d537722ff00a4f48365a7b762c9386ff70d85e70f04dad94de3eae159148c582979ee7e1a4a327449ba799be47203
SSDEEP 768:7kE2/gugiYe44flEEk8MMs8XUCc9h4Gx212wu8uBNIdqT0PmHkHxNY76v5apmoHK:7kE2jeGLjc2qEhHNlltNOoQupytBHkP
TLSH
T133B3A75A96D476DBC20882B10811896957F92E0D14CD70EFB8C17A6DA5BBFD23378E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 16KB
SHA256 c05684fdb06d5f42b70ddf1e0db0421ec54a1df025f2115f7bd42503c8d48dfe
MD5 ebcf198090b52e06de25a6799aa616fc
SHA1 e8a50b5b7f91c6e1c9bbbdedd2a715046923255e
SHA512 e96711cc94de3b44bb052189949ae9f27efe46c30e05a5b523a321b19efac5ab144c7c030efb0ed29a0cfb27e5fccad44126aa59dbcc0c7e6b89ded148b5c6e3
SSDEEP 384:+1K3hwIZdni7YlFxQeiaLbS8JeOI3oSHeP:+ATnaYrxQy28Je/Y1P
TLSH
T1E172AEF32AD4405AC576A376E4FD035DAF32B84B3145B4ECA7C1311D1826AE7686DF06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000012.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000012.log
Size 75KB
SHA256 738ec416b8245c3fa99368597a2ad788c2676dfbc5b5a12c8c8bb34844ba45e7
MD5 0b3a5097486dbbd16433a80f83116fb2
SHA1 9a8f35f647b83ef8cb05508618318afc247245c7
SHA512 2748202a2180c3657f17c8b3d0702aa4bf0479b272c69f9208d144e2d8b0dc6edbcb9721829964c2eb6f56aafe47303064ff015fe7d8ac03dfb56e1769d3b8a7
SSDEEP 1536:LncWIWJy0yNrHm4Plw8bpHocVLljts5XRi6qWc74gNtCStcC:LncjWJy0yNrHm4PZbicVLljts5XRi67W
TLSH
T1BE73D32F41E44ADBC695C2F109290F958F7A1E0528DCA0EFF08A376EF477B941661E1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 11KB
SHA256 da74986877c8f4ac60d65635437b434e6be713498d2c596b0d2f66aa5e08a0f5
MD5 1d0cc44a887c7c012d38eb51f8deb4e4
SHA1 0dd60c579545debbfab5f7371bc77c1380f1f273
SHA512 e18f0323a856da159795101a7267027bb345083d91ca3269d40a0be7e7e9e2223fbb1ce1714b4342e82f766e71bff49e4292a4997a278a2307bc5d54d6455053
SSDEEP 192:pLofU1ajGYq127YxdoWkkVC2dr9YvZFgf686L4wyle9wfwbtJeOSJSLqLG0E7SKN:pLofU8jGmRxySLbS8JeOI3oSs4igiJ
TLSH
T17242C0567DE5C49BD6B2A336B4F9138C9D22B58F3109D69D6747011C0832ABF28ACF13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 4KB
SHA256 f653002d7b0e6049b6deaf64a96c818b433ea4073b4af04e3b89e52eb579a1d9
MD5 4b5b31249e193b360ed3342c7920e347
SHA1 0f77e4ed387abbc27141b0ac3e2f876aa3644dc7
SHA512 791f92eb3dc42479ac8c6d16bd74ee4269cbfa08119500345f9a36c2c6db7ec65d75b8d0aeefb687d9f08f3630d87a48e099edd3feafb6bf640f3442335679bc
SSDEEP 96:4mKnmKC2GE6qE5X3r1ivaHovwYxGXlUmdA0OmumHvWWVr:r2d6xtb3HuJmdA2/PWWVr
TLSH
T1E5A15EC7560A48A84046D0F2CB69F24BCDDCA513775C5FF4695EF38F07E2406989E6B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 35b006d1f7a75ef61544a782bec8d1e8534ca030aa8f30d41fc792cccbc78ad3
MD5 9cf7518a6074054a60c296d284827184
SHA1 9c71e0370548ece9d11784c0b1b1744620734209
SHA512 f8e7146b4088d0f8107f93be322f91f81ac1acd2ec7839c352fed38d42dae1c5961d3521f1def076e4a3422e6fd2d094729849b2699244a14e1a5b0ba25a7c4e
TLSH
T1E6E0206884CAC16F615465D715347B0FD5EBB51FE7CCBED54F05D804B047048D46D251
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 798B
SHA256 d1805d9953fd4bba673c7ebe802ee2864367ad7cf98fd93c55724ebea37db283
MD5 887fe3efd8e00658afdd831e4b599755
SHA1 df75821aa6df6fdc20226155eadfb02817578f6b
SHA512 211dda66fc0cdd6c0b93b10ce191757a7bd203b612a31bb4ca76e3b179ed139926c56959dd402d566be45e555780598067aad542cde0eda74391d8537e15fc1c
TLSH
T15F01C061D7E89490F5740E3001BE625AE79734491E1BCD5F170120BE24B3B40DE3293E
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

5b59397f-147b-4766-9ab8-824ad65c8e63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5b59397f-147b-4766-9ab8-824ad65c8e63.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 97b8a93353311566f48712807cc459bfc053220b23220255777a21e2c8028410
MD5 85639665f38f8ee709382ca915e3a4d4
SHA1 66389c5d69947bb7210bb1b140077399c8f7c246
SHA512 b21e1c037ba064a51512ea7d5e6afaf7f305a5d35f5b811f1bcf30d5a504cc95ce770f783265c27f885d37299a75ecc395e06fd948fe8d5f3c17fa9f9b31e86c
SSDEEP 192:D1i8lJMHKnYKQe7EeWpggwYHBYA3VE2vfCzAGj6kgBrGRWy2rDW5Fu2hDIPKGork:D1i8lJMHKnYKQe7EeWpggwYHBYA3VE2X
TLSH
T18B3291E3C3D8822DD82216F4D7583D2FDE6D0E6887683C29D9E5AF4B53E9031D251A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 aae10f170482f8773bb00a94ceffbd24f7b9dd1353eb2a27270a280256977058
MD5 17556e01440ad18395e950087d342d51
SHA1 5260f05b8440e2ae48c07e45102cb4857f9bac1a
SHA512 3bd0a8d838c862d1ff2ebca639d647867d4a8fcc0311c53d041d8ff2b7165e163e78a65c08f96aefaafce1efd62aae19a7eae461c17f64a9c8cb3f0504eedaaf
SSDEEP 192:sxZEReyMqZ/K1Ml8Mkc/f2sCzTOTmt9IgzodpiYAxjH+h6+WNnQs/BEvJG3FVV/7:sxZETMc/f2sCzTse9IDyHfD/4edjv
TLSH
T19872FA166A38997B8CC7D219FA41BF53D6F95433D1814E589AFCCA0C04DABED620382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 8855f71fb5b9a4fa029dbbeb84e299b7c51ffeff8bcdce943fb8b6930042ee1d
MD5 367bb8c3de3bcfbcac9c28cc5687aa1e
SHA1 e1bf1a2082afe16115226865ebc904ae313e38a2
SHA512 728f2d61a77c335af47a36691797b8eb3355812e6cc6784cb226067bcdeb5b8b6c7975c651e6b0404f979945f46f968a50cb8e4b35568065ceeb52c6f7215b62
SSDEEP 768:KJ4Z0+27pLuL/8MWv80Xo8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEYsLLlXZUJRroG:KJ4Z0+WE/8MWv80Xou1japYsLLxyJqZc
TLSH
T188F21C3B6C4CCB7E4F804E9CEC26BE8E6DE8028F9698885447F9844C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bb972d1c-6610-41e9-b039-38d208351aef\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bb972d1c-6610-41e9-b039-38d208351aef\index-dir\the-real-index
Size 576B
SHA256 19f86d3e399a4a82504239703aebec21b585db8ce48f52744f1d023996d70e90
MD5 ca993b42a5b211ebe32267a22a20e14f
SHA1 66f349d8143aa04c9407c040b7a219068319ae06
SHA512 eb1ca9096be7a9269fc9b8fb7f3104c29fa4a424638786bcbdbbd4969e5831d40fce25067c3e48bf9c4e3169b06e1789d501a0379cd3a2df42e92f7d6df476a3
TLSH
T122F0F1A6FCC1892ACF917FBC06A70A116278C4B055083E2BCA7A8516E50F10147D1248
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c1a5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\bb972d1c-6610-41e9-b039-38d208351aef\index-dir\the-real-index~RFe58c1a5.TMP
Size 48B
SHA256 e04b6afc09c2ff577e1610c734679ff59b7d89774a18416e5727d135e61946df
MD5 e6dad96f88b54ef7c4d90e522b0170dd
SHA1 f8088c2bd2ff27aa43ed632e180d8dfe7eede6a7
SHA512 270ecb868743c18cc053699a41ef9de28994c2be23b4658c862d83bc58f1cb5a7b5c04ad5553196ad935d6777483eaf3377758d7562c3f7a53dadc4f9043bd24
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8006d86-6cf1-4eaa-9f95-37cb7eb7580d\index-dir\the-real-index
Size 2KB
SHA256 8f3ac5ced35ba02d9f0a2e828b8a50bbaae0ff5ad1e3808e09fa9cbab07a92ae
MD5 99ca49b6d9a8bed6e3f5dc921d4d2f18
SHA1 dcce0399d39cd832f7e3229bae03273065a1187c
SHA512 6054d445a9416b5dd2adf267bdac0cef1bd9228c65b8e4569ee6b0ae6f630885bc179e2007f8e47d65f28a94d5f3617a91054c10b4ebb94ad488fa44ff4a886f
TLSH
T15A51954DCC8097ADEC7191BA2D9428B563712D38FC48C7929069B1B17853A681B476FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8006d86-6cf1-4eaa-9f95-37cb7eb7580d\index-dir\the-real-index
Size 2KB
SHA256 1afd6d37b2e8cfb5972272b8d224184466611fc73289249baa37403465702de1
MD5 ae83f67be68d7d3b322bb35355702150
SHA1 20d840243e0758b49805eb597d8a324d3912d3c2
SHA512 67d42a92be97dfb8cd3b809fb9435da5ab29fc7c8682a9cbbd427e0d582fd2fbc6038ce11f1ae5fa62db1cec2762337fa777b3b623b8b41a5f8611a431897eab
TLSH
T18241868DCCC05BAEEC7551BE2DA824B653751C38FC58C752506471A134139681B476FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586608.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8006d86-6cf1-4eaa-9f95-37cb7eb7580d\index-dir\the-real-index~RFe586608.TMP
Size 48B
SHA256 7323102bc6918bada6c8d33f5932b4db1536ded36e8db1000fa4411bfcd266bd
MD5 3c1c6b6ed39a204b1d3480303b885b1a
SHA1 0f228cc7c0c91ae1680913c9554e30d7690361fa
SHA512 660c9e4915d24a9d6410e1d53f3a25b3ab8a7b5b5433c9d3003361f98aa07fe18a00054bfafe4e3efa14912650c16c0af203e58dac90bb368c348d01b9c39dbe
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 e6bb108b8d3d18b49529299de64f6f73eff3480780dea8932e8f2ce3e0d5fcff
MD5 2ca8404da41a920e0187c620a9ef24a3
SHA1 1416080a2021b00ba3fd5fa762cdd686f4aa3bad
SHA512 6d47cd6b1a1fe62ca83c75cec0edab42ac579f07b35754f78a9e070087bf907e8c00d33f83d94f8f6118c76dc5bc768a08fc66e0c0deee7d4b301507d820d4e0
TLSH
T186D0A7E60431864676249A856138261D441E5C8CD941C8A8A84CF0A7207C613C409931
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 7d42c5efc74c1ebdcc48eb2d9e23a6367192c354385a46b5bdff5e048663ba4d
MD5 eda4b53543054075c007d3a562e6a34e
SHA1 91169e5627dab464e05f42b0526674f74c0e7662
SHA512 6f7e111c966d59fa75eda5012886a1592873ebe1f3cc438efc5abdeae2128bbd0d272200f6b1bcbadd9326881617e20dd4d48d01db2eba6058912ef41e8bfe47
TLSH
T10BD023A70031994B373095C5303C371D841EDD99C9C2CCD46C18F133A17C603C019576
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 f11d876b3d9d5747c79faf6d48e6082eaf131bbbd3cdd39fa421ba2139aa3dd7
MD5 7e31a429c9f4f0400ceffb7cf2bd6cfc
SHA1 172f8775e88b232419fe8422f69bd5e97ad5f006
SHA512 0eb86e4d5d604143042594573137f391bb59fa710ed27b65272564851fc0c5df6deac0b9e75cb2f2786039a0822c57f529cab9ba822b7d79115e68176be06121
TLSH
T173E061527A710459F8335FD3783677AF861E5C944800DC545A5A711662B970AD011D3F
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 9f074571c8f907a891c759c04c83ba69d31723958f2b0b71c45bf8baf406ef5c
MD5 a59e74f6879e799c421fbf4c117dc067
SHA1 22254fbe01b9cf546b28fe000396426a3f0f0f65
SHA512 109518a79c90afe9a0dfecc197f4bd982fd403512e9e283b4b75e1c5eb3c14c97a96fcdfab4875ccfac8d5dca4469a1c683db1881827c058dd2c18dcb93e176a
TLSH
T118C09BF31411868B2A749AC9303C672DD51F455CC4C1CCE4B45CA017203C9538405975
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 20a82ec75a43943239695f3187c027b9cafcb1dc71e93898278b22fee5ab7ddb
MD5 71b101e5cb2a92aac3460238a5e49cef
SHA1 3abafe155b07c1a39a2fa25fa553b5467c672a6e
SHA512 39d7c01c69196b154320132a562965662a44cd3799595c0265ece4cfd4969f1062dc328ece97ff9c2733b389484d2ab6bea23ec5e3fd097fb759102b035596ce
TLSH
T1AAC04CA31411868B2A7096C93039672D951F4598C4C1CCE4AC5CA017227C9538415965
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 81d5e3e1093a2c86e18119c5df3561ea9cff6999a2bd84a298af9c8bbd0d78b2
MD5 6236da83bbc9ce3dd8a0c74e5eeaebef
SHA1 ebf324485cca197167ca9e5bbc18bd8f3ef6142e
SHA512 75c0588e00312664f6d25d539941846b9ab710994380565f9d6af27988bb9dce488c843e601eeefcd524016f065bf3ed38b72f9fa2f03c7fd47f1549ced76fa9
TLSH
T1C2E06862BA710459F8739FD2783777AF8A1E54948804DCA88A5A602A617A70A9011D3F
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 243B
SHA256 bbb2d9a81ae155702f2b1b44cfaa2fa51f17ab4869d6d627cd65c980bc0d157c
MD5 305f6d944d15a0c475f55ae94273584e
SHA1 04b27cf2c67bf8f6e14fd30a2644376979f67424
SHA512 b9bab157fcf86b7429ffad3340ce2a4aa42125def97698cacc3b883f4e6730bd8bda859d723eb2802697139b750f709b9f2ceeac0ed146f0523c3464b7817fd3
TLSH
T1E3D0A7A33961418AA6304BCA703877AE851F5C88CC81CCE85A6DB117737C917C064939
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58500f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58500f.TMP
Size 137B
SHA256 e90066065800d7dd23dfd3d387cc6fc8df31124c01c5057b5232c1001020f4c0
MD5 fe9e8c35f62b6ba0da79269b9f369ec5
SHA1 77e89369563914aaf20ef25130236c57e1bf6850
SHA512 61c2f866484dcddd80ab90471305af5135acc0d62a5e3c1f8acb05377a1c20315ac77ae9e92b184dc25650b3b92caa8e584f42a25742f050857ab48f07dff931
TLSH
T162C09BF31421468B2B7055C5703C675DD51F4C5CC8C1CCE4B45DB017303C953C449A75
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 9da1fcd54e3781e96d92467b81779599bbd181cc9baf73d95634d404ff33f9f1
MD5 8d85d403bb171b95bbc847f4bbd64646
SHA1 da6979b38957a0dd194b325ee27ffe86894fe50b
SHA512 2f8f0c40fc60e916f313eeeaf332cc7bc8baadcfc46c20f1539a433fbadd74c93cbc20eae217e6def4f3e7fd3ee9a7ccc53cf8f80b3382663717bb7a3e7580e9
TLSH
T115B024F74C141043C03C03FD0443C0D4773C0C505733034550F401104435D04C010343
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58baee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58baee.TMP
Size 48B
SHA256 be28b6ffa400f0ef9639517f7843e8e973f7eae2cf85c31dff4f109bfe063129
MD5 2c2ce27d9d882fbf144095077acee01d
SHA1 7d85620859478d72c895cd3646a8521c9b978d59
SHA512 303dabb61b3d3b84b8d53ceaa554a2d5ffc0fbaa1bd4cebceb8c97a9e70066c6f9eb23ba0b9c420b5485da8dcb31836e9c8cf3cbfe5ba8db9aaea13498e064f7
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 b62d54bca015e4171624d0c4ee586a49e7f01d1e76a2ae4cfc12e65b72615e82
MD5 cd3dc9aa90973dbd20ba837d30f643d2
SHA1 d00ab9bee68d2900ed7d96254669def2812699b6
SHA512 f3de40a5b33122cf09d1ae1ea05bd1cb372e209a3cca0ba4e8e33039572aaa93d9d6fc3b0793957c46c247c24bf284bcba1aeea40e93141a0408870c37ef8bc4
SSDEEP 96:K4n+K0cCmHyKcI3IgKdG62fGKssvAAKdKi+1OKew/Em/mK4omaQwKBySr6KYY7OE:ANtDrpn3F2E9FHwgRBL3WDfSZXuWnC5g
TLSH
T100B22A11717B02853E7E298E8595F46F62C230633198B52B7BF804A64F6BE20DDFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6738635faafc931e0055c9f60363676dc93f20f7338d33f82c282d79e4e1050b
MD5 c2e457ba379982f3361127a48a8362be
SHA1 76e48781714eb4999e447d96875e0b27c40935f0
SHA512 d3b8863eef9a67d99e8c560bec497d54ad3ad83c22467ea3c3aa6dddf57cf6002d9549b6da7452cb98bd80c333ce15b513ce34e98ee737f1c8bc2e8881fafc24
SSDEEP 384:nHiFrcXqni3sN18TUNTUlI4CTJvuxO86kZYvfuig8VjbPnqFvvdw6vTrN1k+5vIG:CFzi3cwgxmx9PzyHPnqVd9vnh
TLSH
T13CC25A36E8A8D9ABADE74FC5A75A7743AFE011A7858C49D4CAC84E0C00C76DD134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 be19d316a97205c85feafe0d15b202b6df73123d668c4e2e69911ca6ec2dc7df
MD5 b880e1c8e5bc0de9858359e0d66c0e48
SHA1 2878ff846c6388b0d1d43463e228fd93cf186689
SHA512 50c1721349c364040bdb96534f6d2af25fb9ac7166a35ef6cd347c8ef27aa3cbfc48a42f130702d21f265e50bd692efbafb3d01ebd20d7cb5bc22c53aa1d6724
SSDEEP 384:nAiFavqMH3sN18TUNTUlI4mTJvuxOz6kZYvfuig8VjbtnjrN1k+5vI+F:bFayg3cwgVmx0PzyHtnXx
TLSH
T1FEB22975E898DAABEDE78FC6A7197603EEE001A785CD4AD4DAD84D0E00C72DD134BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 f3b1a4ab39d5bcd0c7d0c6447c7055619e7169ea4649640fe5130a90fc89ce66
MD5 c1f0beb6bea1f16ef61cf2e8a4982c11
SHA1 d6ff385fcf944e6d7cbdf9bf8905146461d6ad20
SHA512 28a9d8ce805fa156aaa9fe17a34b041ce88cc92e84922866e701e5a6221fcbfceb372f110a41330469fa1b8e479a9584bca7296c4cd162157cb17ccaf844791e
SSDEEP 384:nFiFavqMg3sNK8TUNTUlIm2TJvuxOiTCNLYvfuig8VE83Ra4FQrN1k+5vI+T:MFayv3vwgzmxqrzyE83Ra73
TLSH
T1E9C24A35E899DABBADE64FCAA7497703EEE001A7858C4AD4DAD81D0E00C75DD134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 da1b92c5717c592bce9a067fbabf7baac6cf8503eded8f85be038e13df5cd3dc
MD5 980045f6244e1960ce31116e396e29e5
SHA1 900af264aceb29818f43c6267b52fb6287333a6b
SHA512 fca738e197334c33676f9dad4e601b3b0ba0dc079928b666d9c811b7d41729173cf1114e2e82fecb4e4210605ce41fe50270deaa6808620f2226d7aa754c4785
SSDEEP 384:nNiFavqMg3sNJ8TUNTUlIm2TJvuxOYxdKYvfuig8VjbGn3Ra4FQrN1k+5vI+T:EFayv3swgzmxhuzyHGn3Ra73
TLSH
T18AC24B35E898EAABADE64FCAA7497703EFE001A7858C4ED4DAD81D0E00C75DD134BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ad5f9b35498c163eaa81e5eb927df482872d6a4062b30a158c199080b9722399
MD5 a99ac9378fd9d2aaf27642ae208a117b
SHA1 5cf13cb701e22b03b853739dc9b00ad7968da553
SHA512 515eac7903e94381786e3ec059dd9b5638c35621671437c639a03d7c8f72ba56e8b61fec18a63678ee20b808e890d3d03625404c4762ad4c9a94b38ec3ba5704
SSDEEP 384:nWiFrcXqnY3sN18TUNTUlI4CTJvuxO86kZYvfuig8VjbhnqFvvdw6vTrN1k+5vIG:9FzY3cwgxmx9PzyHhnqVd9vnh
TLSH
T149C25A35E8A8DAABADE74FC5A35A7743AFE011A7858C09D4CAC85E0C00C76DD134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ddb5a9b95b18a0a927a531d5d9d2ab2c836632cd79ebd18c08f9f89f958fd6e3
MD5 9fca7ef4d5eea9910d87b0b606047c5e
SHA1 38b99e538c10e3ce65ecdc01b7763a2d4940a4f3
SHA512 c1e718771b99d8e4d9e57a13f9424581554a3307ce3b42a9de4166ba0e8831a92fceae752eaa52ade7fde399754bd5e27210f2ad061b1f785d187a7c19b175a7
SSDEEP 384:nAiFrcXqnY3sN18TUNTUlI4CTJvuxO86kZYvfuig8VjbhnqFvvdw6vTrN1k+5vIG:bFzY3cwgxmx9PzyHhnqVd9vnh
TLSH
T173C25A35E8A8DAABADE74FC5A35A7743AFE011A785CC49D4CAC84E0C00C76DD134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 8aa7822750fd8d768439e006bce399fcffde523ea759200a08ce077ede6885af
MD5 9b9e95b9ca234a4ed37bcc5ff7d76eb7
SHA1 d800140167c29a27e022818c5decc35c12e47cce
SHA512 1e4eadf236d4ce4c88083c8decef95fb9fd2e6ef9ec2373cf21a25f1a4d6f982651736cb9fb4031ecc03f6edfab9f638e49ee67a33526cef2933a06372398539
TLSH
T122311EE2883D26D1C8FD0E2EA05B78FC85D9C32AF5B875BE5834EE444239A1F600142F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f2eaff03b624c184d0f07da8613b2736ff7203fa00677950626db6ea75e0fe55
MD5 e29793d34a2da8c94a567b44f896f06a
SHA1 8e63375cebd2121226fd9b47d4fcaf41449fd1b0
SHA512 6fbed7ef8da6910d561d3ce7e0a8004045b6b119e019ba97d70e88934b4fee8f00d0683cc50d705c5676a45de3784ed7b06fce0e7fb238841cdbf8c129af5c4a
TLSH
T12741F858B6E91149B3B77F1A9BF6686D487E7C372F47D49D10010E4E0A72A40D8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5088-706-0x000001C6B7BB0000-0x000001C6B7BE0000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads