hxxps://www[.]youtube[.]com/watch?v=oc53IWv9nK8

Resubmissions

11/05/2026, 18:15

260511-wv78psbx9j

11/05/2026, 18:12

260511-wtmklsgs4y4

11/05/2026, 18:10

260511-wsfexaf19s4

Analysis

user interaction
yes
max time kernel
93s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 18:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.youtube.com/watch?v=oc53IWv9nK8
Sample260511-wsfexaf19s

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\en_GB\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_51541242\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\eu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\en\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\af\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\id\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\bg\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\lt\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\sr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_51541242\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\lv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\or\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\sq\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\gl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\sv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\sk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ar\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_4672_1809306223\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\hr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\iw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\is\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\en_US\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ne\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4672_2056460130\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5876	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134229966874685581"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{E0EEB8E7-2427-440D-BD62-947943E8EE2C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{1119B399-AA3E-4318-84A2-9243A8D60B58}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 4672 wrote to memory of 4812	4672	msedge.exe	85
PID 4672 wrote to memory of 5876	4672	msedge.exe	86
PID 4672 wrote to memory of 4592	4672	msedge.exe	87
PID 4672 wrote to memory of 4592	4672	msedge.exe	87
PID 4672 wrote to memory of 4592	4672	msedge.exe	87
PID 4672 wrote to memory of 4748	4672	msedge.exe	88
PID 4672 wrote to memory of 4748	4672	msedge.exe	88
PID 4672 wrote to memory of 3160	4672	msedge.exe	89
PID 4672 wrote to memory of 3400	4672	msedge.exe	90
PID 4672 wrote to memory of 3160	4672	msedge.exe	89
PID 4672 wrote to memory of 3160	4672	msedge.exe	89
PID 4672 wrote to memory of 3400	4672	msedge.exe	90
PID 4672 wrote to memory of 3400	4672	msedge.exe	90
PID 4672 wrote to memory of 5508	4672	msedge.exe	94
PID 4672 wrote to memory of 5508	4672	msedge.exe	94
PID 4672 wrote to memory of 5508	4672	msedge.exe	94
PID 4672 wrote to memory of 4804	4672	msedge.exe	95
PID 4672 wrote to memory of 4804	4672	msedge.exe	95
PID 4672 wrote to memory of 4804	4672	msedge.exe	95
PID 4672 wrote to memory of 4944	4672	msedge.exe	96
PID 4672 wrote to memory of 4944	4672	msedge.exe	96
PID 4672 wrote to memory of 5544	4672	msedge.exe	97
PID 4672 wrote to memory of 5192	4672	msedge.exe	99
PID 4672 wrote to memory of 5192	4672	msedge.exe	99
PID 4672 wrote to memory of 5192	4672	msedge.exe	99
PID 4672 wrote to memory of 5100	4672	msedge.exe	100
PID 4672 wrote to memory of 3668	4672	msedge.exe	101
PID 4672 wrote to memory of 5100	4672	msedge.exe	100
PID 4672 wrote to memory of 3668	4672	msedge.exe	101
PID 4672 wrote to memory of 3148	4672	msedge.exe	103
PID 4672 wrote to memory of 3276	4672	msedge.exe	110
PID 4672 wrote to memory of 3276	4672	msedge.exe	110
PID 4672 wrote to memory of 5416	4672	msedge.exe	112
PID 4672 wrote to memory of 1960	4672	msedge.exe	113
PID 4672 wrote to memory of 5912	4672	msedge.exe	114
PID 4672 wrote to memory of 3644	4672	msedge.exe	115
PID 4672 wrote to memory of 3644	4672	msedge.exe	115
PID 4672 wrote to memory of 568	4672	msedge.exe	117
PID 4672 wrote to memory of 568	4672	msedge.exe	117
PID 4672 wrote to memory of 2660	4672	msedge.exe	121
PID 4672 wrote to memory of 2660	4672	msedge.exe	121
PID 4672 wrote to memory of 5656	4672	msedge.exe	123
PID 4672 wrote to memory of 5656	4672	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.youtube.com/watch?v=oc53IWv9nK8
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffd57f5c188,0x7ffd57f5c194,0x7ffd57f5c1a0
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,6028540222020401407,288390946537238071,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,15681834545423269477,14293168037829129231,262144 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2188,i,3207339295605325028,795872025939106615,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,2681468756555242695,10970510716605921206,2097152 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,11679249409890738384,15454432593852351626,2097152 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4916,i,8120301325049083991,896528239573537263,2097152 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5088,i,2370775140538166029,435623001231019256,2097152 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,2453693965836211054,1776289059839065866,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,1726677664431765015,6853421096986497529,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6108,i,11217363986120143770,585398246234422213,2097152 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,2918454373844833866,7951098933527042532,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,4384717814876470867,2441459220799057819,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6740,i,10320773218463456161,15902510244597520956,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6740,i,10320773218463456161,15902510244597520956,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,16167941670810410639,4647163777369098438,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,414641659925484536,6840602714151335359,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:8
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6928,i,1806284514666773864,18299532231364941636,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,8815422442502232981,8759799641332413398,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:8
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6928,i,6709358270278885567,261129299226422598,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7124,i,8710534755057768644,14714718287930816118,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:8
  2⤵
  PID:568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6984,i,5276273095381730704,6132402758706270199,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,3675079048349658900,11920491139574957403,524288 --field-trial-handle=2276,i,14298576648742752927,900680938919244990,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:5656

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_51541242\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_51541242\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 030978901609c12837a9b1afdcd1ee9f12ef19339fd94725f17a7cdb1e945f36
MD5 35e76198d1c2c61d3c2a49119ba65747
SHA1 a5ae8329c9e762bed0a3d6bc5584e8faf6d26a77
SHA512 8b21ab6c5e29ab0ea7652b7adadb04a05eb734a52faa779252fbec4acd45079c7ad3f83f36227a419f0a59fc94eb1cf408bcd782459cf4691b6eb727be746fd3
TLSH
T136D0800925B7DC74D059847018977B4D7555CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 827caedd6ba67a465e2378da508ebf9f7e5dc38b9ff3d1086fe8a0b10ad23634
MD5 6a7649ad8529021b8a0bf012adb69564
SHA1 bc6cb8e64c0f5c84a887a19005280de2e2ff95dd
SHA512 316ecd29696eeae0002f91778818c1c4166e5bbf8440eddea3560a6ea0fb49f25e4e33c48c2d7c73eb08507c015f5aa7eb4187e6558ebdc4cd44c5bd980d8c3a
TLSH
T133D0800529B3DC74D055847018D77B4D7665CD6B4D4657163473283D1C4B4504D911DB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 18a1d15252d7941e2116d05010188187b6530a49aef16783ec2768fe0aa9b81a
MD5 595eac8a03ddec3960b385a136c27f60
SHA1 2323c011cd9a1f2f29d56cd380cfe459ebf5b236
SHA512 27853c562a98c278ebab47238832531ae0f6a4a84266a68048bc4d720a6e335440783a9c36c4e97a81a6bda2915beb858196b3c176b249bbe01618c74a4551c6
TLSH
T1E3E02BAAC872AC3708FD171850606686E74413477781C85B3A3C83088FB293B459AC9C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 57KB
SHA256 a9685a298004f8569d1c98e6d75222294654a0c51ce1d8b822642cf7100353d4
MD5 f3e91a35437da22d4698cf769f32821b
SHA1 de0aab35d521d670b90a1a782539550909e2e711
SHA512 611c6e81fd94f8781f2b442a927257f28df99f086a16b90ad4f7633f488b977ba3a3f51b86c80a95d0d3b6d263d0c4131d38c6e03aba5792795da05f9bc5b294
SSDEEP 1536:ojrp6la5grbVy7FXp7usm8QgiV0QcqsmTuFZ3y3cCvJi30n:Irp6layXVoXEYtZmTuFZ3HwJiEn
TLSH
T1ED43F22FF55EC70DECB5102C45869E8325CC7C1D5B11A037F5BB2487A236EAA695F832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 269KB
SHA256 2deaf389933e40b57388906de9c202cc9c18ea6e288f434e49da9b769a70b8f1
MD5 6fd31d5409d1e132ed7fcaf500169cfe
SHA1 4239edddb80a088f946a15296a5e662ee5963d34
SHA512 1074b63d654c9a62e96ec8f9ff7d4bca4d9e91478158fa2fb54854d58f62656724304f0a99ddbc5b3985800d7c19adf2011e8949a723336d6a1c5df52eedce5a
SSDEEP 6144:bzdUUVOhA2DUUw8v6HKktC1ZpqaA2rRlkRwJFoieoETehHR:fDQhA2DUUZvz/5RrqWhx
TLSH
T1F4442338E3AEB49FDB0CCA8D1D8DA740A42599CC4482E0CFDD79415DC47A678C6B97C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 363KB
SHA256 987520c161d9a0a6b78a6a2e9ac48fff7df21258a76f765ec62e3d7d872330bd
MD5 b889c4491374b48bd54967089c47b24f
SHA1 a4a0dc062539561c1cf4db1f4eeead5182d86e6b
SHA512 daaf9a7078b7ee13a69823aac7ad50c7dc417d5287bd53b838b11ee99c290a9d8f7cad868703041478e1acd000c7a2e2a97b8d742acce7ba3d933cfae4fba1ab
SSDEEP 6144:Md5+VYpEzQqG1X55Ay0K4P1ucWp6qD//wwgVfDhyeGHBdmtPWVkjOQV3u3:c+VfQq8DITWpNwxdhjGHBUZWCjOQto
TLSH
T1FF84233119E1CC63AC01838B0E0DB54FDA677D697BAC153E1042A8E7D1726BE5CB25B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 864a79be056fe037a4bf6ac18e0963991975e624fb938aca95df6f95ef08af79
MD5 3780acd0eeedb1c9319b249bf5029409
SHA1 bce41511a692c760395b8f9e198e4588563be852
SHA512 6651c43e3cb0396a2b862d17338fba09e8c79710bc77f0a7065f99460894c8d0b70f0062e393b4ba2bbba206e19c5e568502280f6f83fe81377e64e9dc30e6db
SSDEEP 96:5FKRKeWqM/1HudtoC5BeR1l4fNlarJ4nGLA+:/mWJludtoC5BeR1lwNlarJaGLD
TLSH
T1D281601471C18266FBE243B089A60445363473481FA7BEA6F0F6907C8EF6F52CF58D24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000005.ldb
Size 35KB
SHA256 813c123a41a2efd447a9a3c914816153e624b027b5675d6a7299f77b851eb546
MD5 2a81b5964de9e0c092ba6713d45b29a3
SHA1 765b030de8235ce91955fb91ce2fa5ff77624ac7
SHA512 b2a6ddebfa0ee78b8a08687c1f2ec9544b041b0b7c1e557570ffcc029f6d6220ff80212fa908fb45f9cc306a433c19f9d0611c12307aa19118ed305e70053c63
SSDEEP 768:+3yljC1IPlYZc6Fmoi2voDSvm8BtamANwY:+ClQKYyV8vmNX
TLSH
T1E0F2AF765BFC8455C17A4B3799BE09CE97FAB10D35A4A4ED7BC0330B682B2575884B02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000006.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000006.log
Size 23KB
SHA256 c1c39586bc37add7969224c6e4ef6b293effa77866371492d19efa40e980d314
MD5 cf5c91805d83989ca50ea556629af20a
SHA1 81214e029f404fb957415d7faded4d3d4cb53efe
SHA512 08754d4f524a0f137b70ea769f313d8df57eaffdafcfc4947a0d7d7c94f54dd21715cd6f51058d58e21c31751b78e526fbcb9b00aea5813998c40f1ed326ecb5
SSDEEP 384:yNu42PLlZTionIwGAnGAntXfXUM6fBfXUM6f7v:yNu42PLawDnDntXfofBfof7v
TLSH
T188B2012F81D595DAC701C5F188590B5A8F3D1C4628F960FEF48A7F0EF53B2601BA5E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000007.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000007.ldb
Size 22KB
SHA256 2551867aa77d4424d31de6fcac7882f999a93a1312a4c3c89fc802aa443a3e07
MD5 1275721504265dedf5a8677fd01e0c2e
SHA1 80992b1faf53741b69ba48c2ff7e889ff9c87052
SHA512 d4180c1b562552b4a2bcbc58c12ac383b5b02809f647ced9ba88f1c80ae62fdfc56aaa32d142b3b6483253f780a2fb5c9079a0e9ab530e0d174820dd68185757
SSDEEP 384:CyTsaKJnkfBdfZ4OR/0GwjHAAdxEuQtpfjdRJb3YwMlJeMM+b4xwzs:CyTsbJnkBd5RMwpxpf/JDNuJetQs
TLSH
T10FA29F671FECE455E4768776D4FE14CD6FF1FD0A2A45E4AE318033184822F9718A7A12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
Size 17KB
SHA256 aa8e1d2fdc5b08ee7fbd47bbfa62a1430cfd7819855c77598e85226d990d9061
MD5 f7faeeca7ab831eaf5d3d65c8763e715
SHA1 c890a18c09e2ad1e9f6f34cfcac263f4695ca228
SHA512 eb7acbb4f9618a600bdef70789b1c32a923fe598a2d8da486d2a8e9f5c22dfa5cedda80cfefd768d9afe3752d4256f1b72ac1f993c0344ddec4ad74b6a80ef57
SSDEEP 384:JUjjBk1GbTvW0t5xHvcDkmbKyfjdRGWs8YwMlJeMM+b3U:KHBR75RvpNyf/G0NuJeMU
TLSH
T16C72AF775E9888C5C57FD736E4FD468ABE32FC052564E4FEA280301C4923AF22D4DA15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 3KB
SHA256 7c2e1e207d744ee474e1335287bce7a9e6962a07e3c32274769b23d2b10dc75e
MD5 f9e743cd690e44c1fb4186efa53fb44d
SHA1 97ddb97de8407873ef1eabbc886a1af6e2be41f0
SHA512 14c4ff95db4e729d0ef648135e08769d33d346cd051e57eaae4f784c6ca1381387acdb5dd9874b322d829c240556a49db09912c26c7bf6dab9e8c085f2ed8f61
TLSH
T1836167CB860948AC50C2D1A2C63CB658CD9D9114974D6F24AAA8E7CF07F041BF75E3BA
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 434B
SHA256 c1111d29bfa96439f454dc03a9ef62c499a7b19a903f30654224e74d3d3e95fc
MD5 297a6f7f956f59273fbad1b3f20cdd31
SHA1 e8f1557e6de8448676e9adb006bc401b3edaf52b
SHA512 c097b9bd68f4663edd78bd162a2232fc3f76124e8f78aa2804bf9a9b402827bbf5b66d8c55b8c7107cb7b242f4f067b2079e90ff858dd624cdf3e47c2135cd8b
TLSH
T14FE0EDA1FFE00A81ECF68AFBAC3728813A3668C91A23D10F1828000B40BB94A0D7531D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 de8f52cd41d596d48c9d1ef3c19708f594aacd3662e46c82623f99becb4951ef
MD5 b45a85bec557400c12fae95455938423
SHA1 64c44e7f5bab5980942a958c2a730f299bd5d2af
SHA512 66184a89b154c9b8dcac4758ff833939a91d3afee6839fcb7dda636d3f2733e95538bfd3dda41d2659137b3988161a38783be0abc46be89a2e2e9e0e7d99ea5f
SSDEEP 384:D1RpoFe/f3PTRW/B0GeY1SMPBcdlfoUlwaaK2rpBlCGz5JnlbMXkQ7C+BGGWWXSl:gPCFM
TLSH
T18552B2F3C3D8866DDD2156F1A6243D1FCE2D0E2483683C6AD9E5AF4B97D5071E20068E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 27ab9dbb4ffc9eba69a0d85ea2512f500fb03e394e2c3de7b3ae7bb4739eb313
MD5 a590c626061cbf6307e832ce70d19a0c
SHA1 433c84ab940d514b596350369f9c36b7c8d9396a
SHA512 f8e55be59a962c09a287b65faaa5ab4f1eab06715a78ed729a4f5cbd61b10bd5b412ad3b2884ea671f57ea38198c24c37794e04a826dbf535f636ca50da4cbb5
SSDEEP 192:sxZq6R3yMqZ/K1Ml8M98/f0s4K6nF/KU9qrjFPzodpCJDNzHHW6+WNn2O/B8gCAQ:sxZjQ18/f0s4KMFSU9iCGHbz/elmgvj
TLSH
T1CA82E9566A34997BCDD7D61AF555BB57D7F90123A2804E44AAFCCA0C00EBBED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 bf03061cf6ffd2f0e6cf1f16cb158361e159e25a363af2cc75ef86c2a777147f
MD5 9a1535cf5090db2800b58adb7b81532d
SHA1 d82b28999c76ec5fefefe253f9699d68c6a764d5
SHA512 3eeda58d03f2a740e785a02b0d6cda5bc1d6228bcfee43e565ed713fbe0f22a1554ff5c71d4ea999c41865da673dd881d1bd5765019587d1919ec3e1e08c5931
SSDEEP 192:sxZzR3yMqZ/K1Ml8Mk8/f0s8ZkvqrjSPzodpiDNHHW6+WNn2O/B+K+km+nSGIgjV:sxZzQM8/f0s8Zai3QHbz//mgjV
TLSH
T14E72F9166A38997BCCDBD619F5457B57D7F90523E2804E44AAFCCA0C00E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 7dbe722eb7927d50f599fc94de79c174497641de2d1480ff4ec17d1d359f500b
MD5 7247c5471e509ca63a8f350489bb0e0a
SHA1 d833003b63f405df32d07b3cd53db8bdb9a00824
SHA512 9e9fead8b80f717c33a3db365ea33f276982cfc1204c3f52f0e20d680ca8873214197ea83b4444d37f42d28a87cc86ac23296033721ca58b1ad63e2a1f4d69e9
SSDEEP 768:DXgLiAo7pLuL/aeWvaShq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVSMKJLlhzCpUroW:DXgLiAUE/aeWvaShqu1jaHMKJLDOp/W
TLSH
T14EF20C3B2C0CCB7E4F844E9CED2ABE8E6DE402CB9698895447FA444C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 6bf261144bdde010ba522256e61e6a0cba4fa46a646ffc143f1c404b11e7c1b9
MD5 2a7f38435bbaa40bbf073453d6d68f0d
SHA1 96a5785e000fae9bcb8495e51ae1440f1fc0a50b
SHA512 2120f81b641fee1dc5a1a4cb35a487b8b383c30ecd495be0f16a08e01ac816186655bbdaafd0ec85a156ce601f269782dc8d27ef7c67eeb8502b5abe1e04c4b7
SSDEEP 768:DcgLiUF7pLuLn9eWvaShq8F1+UoAYDCx9Tuqh0VfUC9xbog/OVzMKJLlhzCpUro2:DcgLiUTEn9eWvaShqu1jaqMKJLDOp/1I
TLSH
T177F20C3B6C0CCB7E4F844E9CEC2A7E8E6DE8028B9698895447FA444C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\03a83f8d-1d3e-4aba-b8c2-240e41790d86\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\03a83f8d-1d3e-4aba-b8c2-240e41790d86\index-dir\the-real-index
Size 576B
SHA256 4f8e01e2d0b55697e4a176959472c082a0346b547a32ad655e55c874dbf2865b
MD5 33a863db2b3c17975b3e639688b93cbd
SHA1 0e74e10152593c24eaf4ac2f8612e2a07b7f256f
SHA512 8c4b5955daceec3cf7d4ea7f6d2ea3d047f6ccce0960e558b1ada9cf73e71e8fcf2bbeafa8b4da7dea7a95f8071762f4f831ecae93fe7e9c9908bb69cdc5b06e
TLSH
T1DCF0F1348EB8C49FDF1058B50272286C337C782A1E6D72C32024215BABDF2338E02742
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c61a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\03a83f8d-1d3e-4aba-b8c2-240e41790d86\index-dir\the-real-index~RFe58c61a.TMP
Size 48B
SHA256 f35fa2d2a5ff1a1afaedc1344ec84a4651b2681e7600f3214129e6a932a2d005
MD5 783f4c9aae4ae7ce4c7eb4057112856c
SHA1 e60175857a6d9e438059ac438382cccdd009b1e1
SHA512 b8ad2e78dae7a504cc440af34a9ce3aee3e3d9c61bd886b7c10647a6a86fc3594996f2640eab5d24a2dedef1c664280ec50bb2ff79185ddb83147fcda6bfe22e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c2e58d51-f2ed-4b14-b23d-af861ec27d3a\index-dir\the-real-index
Size 2KB
SHA256 f5f42bce78dc4954eb65a6f2f3da53c8404b239bec9cc48fa72f55ebe77683c9
MD5 0b55d8c6830d24b7578049069ddb066e
SHA1 106439796a1d4b7301ad1ff1a9cee8001e486cb0
SHA512 c5751e97432f05ecaab612953a96bcadaa2cbf5ae8f804a678081a3c4287ebed71fc23cd85592bbfa6c2766c1e9efb82573845d944d5d4ea6637393b9d8a07d5
TLSH
T13D51624CCD84ABAEEC7561BD2DA418B243762C28FC59C3A18594B2B53053A68078B8FD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c2e58d51-f2ed-4b14-b23d-af861ec27d3a\index-dir\the-real-index
Size 2KB
SHA256 fc4a2c2332f6b3ade71cdec98e271f18719875716c1fc5365477af9400b18658
MD5 ca879da15e8295c24cd71bc66b7cfb59
SHA1 aed11da4fa6924706d16d55d217b069524e25977
SHA512 91d3614a05a58b8576ced34fbe8cec946881c82b96cf9d9e0183fb9251e50619ab9f69ae969a4d427d2734d2f7f364198027e799386761ca6129335690146446
TLSH
T12B41620CC990ABAEDC7561FD2DA414F283752C28FC58C3A18454B2B13413A681B879FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586404.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c2e58d51-f2ed-4b14-b23d-af861ec27d3a\index-dir\the-real-index~RFe586404.TMP
Size 48B
SHA256 f352ec73c9cd094ebe85fda3607b2d54053f266b21177312fc01006c153ceea0
MD5 200b5f45d4f75ada70eec0a3136c6b36
SHA1 8cdaeaa1bec737ce82b210d110a8789451e97083
SHA512 9b2e93b3b834b816b4805a3ef05ab573b7affcd02d0cee258552d752e1e7935e84db76eb8d544f3dab127a554fc4832e430041a860451e590b55b5466c6b7942
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 8cc716602b4a20416053463b523f1694b18f6cfa6bd9519abe2b72c626ecab26
MD5 4c5d69c0faab8168a65ab9240247ddb8
SHA1 e4821e64be8effa29fb86f1e474a12ed671dcc11
SHA512 472cb91366ff76fdda71a23ee30c565ca6986545e9daca9fbee67f7bbfd1feb2992d5da0c14ed63303ff081528085222f5977fe9926b50ef6c755b2966cee3bb
TLSH
T1B8D023E78231CDD11778FEC02434124D45DBCD1BC884DCD8C940B153307D902C505D25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 a6b4c24f9887e0b554ec42e7a6fa76bf7c4fb7d3a1614f7f0f38900dbc2ada4e
MD5 a26211322e737aefc712e7ccc2966403
SHA1 e4e1cc23ec1239622023fe051e73038c68bb75dd
SHA512 c212950fbbbcfee484e6bcc71322837328d89b55a1c0a9773f1f81d4622e2402768ac23827716ebaefdad5673ce84a0e7ae04db1d2efde96c7c42ab45a2fa5fc
TLSH
T14FD022E75AB38E832730BBC02434235E926F8C058888C8E8D984B5B335B8B03C705A72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 0dba6689ea88cc57614973f7645692d88e7e3e6a6158fbcabf1882984b2b0b19
MD5 d2e02a504eef263d319d5dad4d20ae25
SHA1 9a185b20b5853292c17dc58082f510ef52964f1b
SHA512 7e9d51c736fea3a53a3b15b12288eaa6621ab35f4a84598f7e9b680a8a492854712fe1ff5aeca4730231a88f8c229282ddc12a4f30404cf52d62b64c4e847c17
TLSH
T170C09BF75D51CEC60A34FBC52434672DD65F804988C4CCF4948450576275D17C741A65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 579c998ba430831bad3d7221558353a6d94f3660b0792f582771f7d56fa3367e
MD5 457de359525eba3c11aa37f1b12fb17e
SHA1 391ff898bb578dff9e9fce41c52699924901206c
SHA512 b80fc8c9a4f3b86ca00259bf903abb20e29cb4aa1e48c02c3f17016b7faa92c530232c216a254c01895a752da9ba6d75776ad2014d53990ec09f809d8d639822
TLSH
T1A4D097AB2A63458216365EC12830A27C928FAC4C8C80CCE8008030237274817CA50E60
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 a3cd09ef83be90fbc079b8b6521da3ed21aab5596ccbfebfd974fd9a85c1b04d
MD5 d9e8b84f3e1998c4815776cda7d689fd
SHA1 5cee845aa6e96a3b73e086ad69692deabcea8121
SHA512 b7e10cb5cf4fdba97770fc3604cd0dd76c8b67b4ea98a1f2aacfc6a458baa8f4ecc6a534d1300b23d3cbeaa30a1961d57e09ccab6543681028e4491f45db9e96
TLSH
T1F3C09BF75511CEC60A38FFC41474631D965F814988C4CCE8904450536079D178641A25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 ad851f51ec332e4e3356edca17f648da1e45260a3ec769c4d22b2ee74cdbe5be
MD5 445321829d646ba329294fd740133a9e
SHA1 3033e2d3b9c6ad1f721354e702188af8012e7950
SHA512 1a0db8ac1b6ace1561a5c9c49beaacb792acc715f1bda4e28fcd9a50bf17b8813262c7108f3cb1b4a6b2005ec3d5aa556096ed3683368555c30b67c996821868
TLSH
T184D097AB2F1349424536AFC02830723D928FA44CCC50CCE841801023B130917C961E34
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe585714.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe585714.TMP
Size 137B
SHA256 aac8a9b450cdb5a3b897d135af87f96b6284a5ab496cd35745f53e4f920f4452
MD5 95aae958ce7cff9aea6763f91db40414
SHA1 41c601f25a3799c4c1ed86fb8c035fa15e5e2264
SHA512 3ec7145134d328dea6d6a877295a4610b060c1cc2e71c046d9201cdc3c6637c4b387f3d14b2ac198271e882f5ee3a6041ca8901dc6a2919c8877367114485a2e
TLSH
T1DCC09BF755228EC60B75BAC51434635E965FCC498CC4CCE4D08570537075E17CA45A25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 ae1a0c428ce66925fce5f667e29b093f8a0708eef7f1d9ffe7fd82b264bbe466
MD5 e6308d1e75838a52cd769acd6ff1bf05
SHA1 1cf670734d7298bbb22f9c768b6ff39ab1827b32
SHA512 f7bb6c497deed40a85b3efbc34978a1b5b2bf5fe236f7034dcf828902bdf80ab160bb3450e350fa860e3b179a318bdbb2613192801ceea91ee06e1c11436371b
TLSH
T198B004D11C5DC1D5C514137D544557C471757D11573D375150FD00744C35755435D555
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bacf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bacf.TMP
Size 48B
SHA256 323a21a75cc9610c2df716b3fb39219ee2036fee22ce248f145309a68fe5f43b
MD5 a28198abc8b5b887dacc4a537ddeef58
SHA1 9074dfac385fa1c2f8a02deb6cb3703ce27863d3
SHA512 11fcb76b619ea30d0135e11ab1a57c5f8c43d9ed6607c6b2b8f37494881e48aebbeccf4080d2968b496973c8e8337be2f53e6d27165e05bdbd8fe120554a03fd
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 fa8724edc1e3ab5b2831ef11dd3dc495cfa2044bd31728d20a64c18d6832070e
MD5 eb41dd0e66dde3fd9f9dcaa2ddd25198
SHA1 9c6e29f832728c71df615745b2d9e3998ddb0e10
SHA512 ee1cbbc27f332310f5e67af3387a3422192af5efe2b46ce88fe1f88a63073a0852e475a0156e332f54726541f1eb148ad1d03207b238102d2df04f1c8408d845
SSDEEP 192:kBhNHfIVfhRXF4B6W4KqV2j6Ok4pYLQobOyzcp/KLNz3Btrfh:krN/INhx+kcxKBzxtjh
TLSH
T1E1B25D11717A02813A7E399A85D4B42F66C2306370D8B93B7BB914A64F6BE20DDFD4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 b31a92fb3fd86bf1c6e63f52566a27e2a40c6b3041f9ee7f615102c16d762fac
MD5 106e66f11936bfa6310580f9155c6989
SHA1 83b0de80e1ade756d423ab52f31cfe7a2cc7339e
SHA512 b70a69a854f5ac87b479bd48906bc16b9231b8f284848b9c0985ecabe63a4be0da829540fa6bc60a8fb9b328d255cf4aabdbe5d058eb33366217a123786f6b41
SSDEEP 384:n/iFavqMg3sNU8TUNTUlIm2ZTPENi6O+fjYn8JbmA71fNvRYV/Vw1mROdUArN1kG:KFayv3JwgHpkYw62tdRYk1mwhL
TLSH
T142C22939E894DABBEDE68F89E7097A03DEE0016BD59C49D4DAD41E1E00C719E130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 4063b286f1bf6b3bb2b31a11e76414bb48a5294b35968d8616dd22171c8514b5
MD5 4bc66b96d9d876ddd082a07bca3177f0
SHA1 ec0314a6887e435d52e59a0dbd2a6df657b0e804
SHA512 5a252178e4fcfb6bfc42fc18b851146cdd7b96c31cdce7d9092f913b67b437c2e0cb12c3239a3245f1cfd7727199075c423f948f943ec75590c39b1e18448739
SSDEEP 384:nYiFavqMg3sN58TUNTUlI4pRtZTPt82O+fjYn8JbmA715Z4xxrN1k+5vI+4:jFayv3YwguRXG4Yw62h4xFk
TLSH
T174B22975E894DAA7EDE78F86B70A7A03DFE012A7D58C4AD4DAD81D1E008719E130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d75689998225a266f299308318a61ffd640bdd77a493f52f5664222c622439fe
MD5 db917a842a720a36f2a9447fefb7528e
SHA1 c6a644e70acd0426546e914ad1179ccc432c0042
SHA512 1fc0c60f481732eb7e4bfc5746f6d02bf49f9a86b4698aaa7e1c687d3587da8e2251c21196cdf188f5efc2a0d5011afb1620010c926583363872e61708c260d9
SSDEEP 384:nhiF9CcmyWCr3sN58TUNTUlI46RtZTPjL32O+fjYn8JbmA715t4hkP+lFYS/cqrx:IFccpr3Ywg7RXj34Yw62l4hkoFYS/cWx
TLSH
T197C25B35E898DAA7EDEA8FC6F70A7A43DEE001A7C58849D4DAC81E1D00C71DE130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ef5e10e78915cb72544ae10ab8e6abe7abccd22ae0f0b581fd8c7b876a332867
MD5 397e691d832afcd9bef99933fde59ce4
SHA1 17575242024f10384053cb7b8a3bcf2182d6357a
SHA512 e6e268de6ea9212c0e4027317adc96dcc9cac43bba1000e25b5d257cd9e8ea1845f87a023c8488b5ca3d65b3dcf4a1926ea74dca53a9273438e1f2123668d38f
SSDEEP 384:nYiF9CcmyWCr3sN58TUNTUlI46RtZTPtL32O+fjYn8JbmA715Z4hkP+lFYS/cqrx:jFccpr3Ywg7RXl34Yw62h4hkoFYS/cWx
TLSH
T167C25B35E898DAA7EDEA8FC6F70A7A43DEE00167C58849D4DAC91E1D00C71DE130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5b529ba1ae0242236651679390d2b064eaa982df2dc6d69dbb4dcf9a8fa1ce1a
MD5 88cd5e778994481e8ef4e94847ea107e
SHA1 1a57352c0dc94f55d3b7d14c2aae80e3fa684000
SHA512 f91fdf0e3ecdfa7ef2512d9a35128a609f5a40b0d7ee4e845842813b328752193f61d61a226a3b3dadc2d34b7cbda81922aab99994622804fed574dc8d80ae63
SSDEEP 384:n6iFavqMg3sNV8TUNTUlIm2ZTPQ+3O+fjYn8JbmA715R4RYV/Vw1mROdUArN1k+B:xFayv3owgHPJYw6254RYk1mwhL
TLSH
T16FC23A75E894DAABEDE68FD9E7097A03DFE001ABD58C49D4DAD41E1E00C719E130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bf1a42f971829df4ef540cbc9f71e164bf19264c8b6f517eeb22d88027a37fc0
MD5 7898ede6937ed93c02d738639022b984
SHA1 45c67231928c082fb31c599251ee9c1f59c62729
SHA512 7fa92d1866cde06595eff4185e69bb0d7f8104937c5651091d5afc1dc2c8bb02e74f4c3c57e2c1761bd8115ea32b8a64684d0c5dca2155e2a38350c4899d80e8
SSDEEP 384:nTiF9CcmyWCh3sN58TUNTUlI46RtZTPjL32O+fjYn8JbmA715Q4hkP+lFYS/cqrx:+Fccph3Ywg7RXj34Yw6244hkoFYS/cWx
TLSH
T13FC24A35E8A8DAA7EDE68FD6F70A7A43DEE401A7C58849D4DAC81E5D00C71DE130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 65f5cbf1be31936b1103e00122a60bb3ba7462d8832ac1f484dd6865116eeb10
MD5 73353cb8e2d08b76399542576119f518
SHA1 060bb58768be184f66fe1a67a40bcd57bf6c2e51
SHA512 f8841762eac69fdee0ae9b2af68c4c4bfbd49e42f1a1582803d4902395bb667530ae114dd66a05cd72a8668e02be7481d31c4a9624106db3d3e30f9d1d26bf79
TLSH
T1333144D19C7D2AD1C4FD0E6FA04B79FC44C8D226F16871BD5868ED98463D85E640143F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 76d7a93973581afd00f70582ff765920fd67da436b89efd68e1db04654d51f63
MD5 bb83568b0c89f9b5f52c70dbe38cc564
SHA1 e13a746a4c0e6cd5cd38871f864980f5fc255f54
SHA512 e7d13e545fb7dd9fbeb5e68b5a948f7aacdfc4b7237ceb91c697211689e52cba01c525643bdef8ffa5c02c92403a3e1a8353ec1b7bce4df395de365fa299bec1
TLSH
T10441299CA6F91158B3B77F5A6BF2686D847FB8772E16D45E00110D4F0A22A40C8B2B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5696-32-0x00000245B5C00000-0x00000245B5DA1000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads