hxxps://www[.]youtube[.]com/watch?v=XwrqNSx7DzQ

Resubmissions

21/06/2026, 03:55

260621-egwjbact6v10

21/06/2026, 03:51

260621-eetlyabs6m3

Analysis

user interaction
yes
max time kernel
61s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/06/2026, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.youtube.com/watch?v=XwrqNSx7DzQ
Sample260621-eetlyabs6m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4844	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264875459030011"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{94057C17-16CF-4AF9-9D52-DB77AB24ABB2}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{2CF47FFE-4E5B-48F0-82D8-A0ABD3C4D46D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of FindShellTrayWindow 46 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1200 wrote to memory of 2536	1200	msedge.exe	88
PID 1200 wrote to memory of 740	1200	msedge.exe	89
PID 1200 wrote to memory of 4844	1200	msedge.exe	90
PID 1200 wrote to memory of 740	1200	msedge.exe	89
PID 1200 wrote to memory of 740	1200	msedge.exe	89
PID 1200 wrote to memory of 1040	1200	msedge.exe	92
PID 1200 wrote to memory of 1040	1200	msedge.exe	92
PID 1200 wrote to memory of 2684	1200	msedge.exe	94
PID 1200 wrote to memory of 2684	1200	msedge.exe	94
PID 1200 wrote to memory of 2684	1200	msedge.exe	94
PID 1200 wrote to memory of 3544	1200	msedge.exe	93
PID 1200 wrote to memory of 3544	1200	msedge.exe	93
PID 1200 wrote to memory of 3544	1200	msedge.exe	93
PID 1200 wrote to memory of 3716	1200	msedge.exe	95
PID 1200 wrote to memory of 4708	1200	msedge.exe	96
PID 1200 wrote to memory of 3716	1200	msedge.exe	95
PID 1200 wrote to memory of 3716	1200	msedge.exe	95
PID 1200 wrote to memory of 4708	1200	msedge.exe	96
PID 1200 wrote to memory of 4708	1200	msedge.exe	96
PID 1200 wrote to memory of 3996	1200	msedge.exe	98
PID 1200 wrote to memory of 3996	1200	msedge.exe	98
PID 1200 wrote to memory of 3996	1200	msedge.exe	98
PID 1200 wrote to memory of 2896	1200	msedge.exe	100
PID 1200 wrote to memory of 2896	1200	msedge.exe	100
PID 1200 wrote to memory of 2896	1200	msedge.exe	100
PID 1200 wrote to memory of 3724	1200	msedge.exe	102
PID 1200 wrote to memory of 3724	1200	msedge.exe	102
PID 1200 wrote to memory of 4508	1200	msedge.exe	101
PID 1200 wrote to memory of 4508	1200	msedge.exe	101
PID 1200 wrote to memory of 556	1200	msedge.exe	103
PID 1200 wrote to memory of 556	1200	msedge.exe	103
PID 1200 wrote to memory of 4564	1200	msedge.exe	104
PID 1200 wrote to memory of 3128	1200	msedge.exe	107
PID 1200 wrote to memory of 5440	1200	msedge.exe	115
PID 1200 wrote to memory of 5440	1200	msedge.exe	115
PID 1200 wrote to memory of 5440	1200	msedge.exe	115
PID 1200 wrote to memory of 5760	1200	msedge.exe	117
PID 1200 wrote to memory of 5760	1200	msedge.exe	117
PID 1200 wrote to memory of 5760	1200	msedge.exe	117
PID 1200 wrote to memory of 6000	1200	msedge.exe	120
PID 1200 wrote to memory of 6000	1200	msedge.exe	120
PID 1200 wrote to memory of 6000	1200	msedge.exe	120
PID 1200 wrote to memory of 6028	1200	msedge.exe	121
PID 1200 wrote to memory of 6028	1200	msedge.exe	121
PID 1200 wrote to memory of 6028	1200	msedge.exe	121
PID 1200 wrote to memory of 5232	1200	msedge.exe	122
PID 1200 wrote to memory of 5232	1200	msedge.exe	122
PID 1200 wrote to memory of 5232	1200	msedge.exe	122
PID 1200 wrote to memory of 5940	1200	msedge.exe	123
PID 1200 wrote to memory of 5940	1200	msedge.exe	123
PID 1200 wrote to memory of 5940	1200	msedge.exe	123
PID 1200 wrote to memory of 5988	1200	msedge.exe	124
PID 1200 wrote to memory of 5988	1200	msedge.exe	124
PID 1200 wrote to memory of 5988	1200	msedge.exe	124
PID 1200 wrote to memory of 6120	1200	msedge.exe	125
PID 1200 wrote to memory of 6120	1200	msedge.exe	125
PID 1200 wrote to memory of 6120	1200	msedge.exe	125
PID 1200 wrote to memory of 1068	1200	msedge.exe	126
PID 1200 wrote to memory of 1068	1200	msedge.exe	126
PID 1200 wrote to memory of 1068	1200	msedge.exe	126
PID 1200 wrote to memory of 4472	1200	msedge.exe	127
PID 1200 wrote to memory of 4472	1200	msedge.exe	127
PID 1200 wrote to memory of 4472	1200	msedge.exe	127
PID 1200 wrote to memory of 5372	1200	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.youtube.com/watch?v=XwrqNSx7DzQ
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8ba59c188,0x7ff8ba59c194,0x7ff8ba59c1a0
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,15464399299807372547,13133956768973576989,262144 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,16653278087369440318,16373517113858203831,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,6915675684800493135,5176731205515661803,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,8929845525049441609,13796600662836387355,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,3236604653019879999,7669446724212744953,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4116,i,17580796228416375469,1991584572768936430,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,10162613405391484417,11594104134060010304,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3924,i,15980552659539595247,5540415920075235085,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=3928 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5280,i,17334010675691246841,832384888233556746,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,13496841163491827429,15480396340209849100,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,13483262898673783959,7686989395256058260,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,3677608650936867513,17994441851520783131,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,699805708549078782,2178480926665444355,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,14200800420319281950,16454380532992105783,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,14200800420319281950,16454380532992105783,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6612,i,7261945466233440380,12397378183007808804,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=3484,i,8178390153176975036,7964602721881945017,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6996,i,14873878711636685375,9951950049467791276,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7128,i,3213604298613538756,16875656950426980721,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7248,i,11585712803277862878,1711598351817018581,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7124,i,12097689088851242346,13744271249464869691,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7080,i,14259515312257194647,11616563057521228980,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6860,i,12509095009696547979,12417629515603491380,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7784,i,18038658869401104684,16789616140276823287,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7808,i,10797269263190142586,11398362930758646955,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8100,i,9895659188407558725,9366728166708406904,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=8072 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8148,i,851541820867124110,5205814764053672179,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=8168 /prefetch:8
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8160,i,8392715104904911186,10065970798945385059,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=8128 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,10274079028179766494,15444326015918390852,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=8560 /prefetch:8
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8580,i,916115389699087333,126743058041609784,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=8628 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8608,i,126011577009088011,1402861576765570805,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=8704 /prefetch:8
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8080,i,9621588436589985631,12007382420876844698,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,15721391104176798147,11176145371785871580,524288 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=1204,i,10178797446954208511,11980834647720053786,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:1
  2⤵
  PID:5400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8216,i,17528576775203585406,17920744633262539223,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=8384 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7772,i,3259844397622056489,4781023906461321466,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5744,i,7240519774150553057,5259267389574502872,262144 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=5520,i,17589019250595280621,15130527855163306328,2097152 --field-trial-handle=2268,i,7635478124412724515,1454410004203266849,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:1936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 38cbf5b6a486ee67c58f888162c4b1efc73934f894d8c8462a1c1a39d1b30632
MD5 66a0f3aa6408ea757521465ce118ccdf
SHA1 fb52b5c1b41c3d2d991460584025a99538470d98
SHA512 05d2f868c0717a99c0517d94ee0fc4d82c92c243f52729cb715cc5e34e940e5ac2bf3b72d8d96667282a3e5da4563755f5768150c86f290b4409047310f4fb8e
TLSH
T1EBD097303559BCD1C038007084210220AD99864B22A2820B3000840AC8A62C0B2C68A3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 861f89a9a7ad88ecab8c4bda74822fe31de61f176f2ffb8a14cce9b6ddbdf228
MD5 e5f2307251727765e5b0717e2ee3a7ed
SHA1 c460ad360b4a7d4209e6472ac22e2cfb84be72ee
SHA512 eb972d489c5510cf8c31b1a22f4717d50a5e03f04a745f0dfe444aa7da18b0dd6be2caa9c8e9e63fbd31f3115202b8ea951de225c895c75a4c897ef0d0167f9b
SSDEEP 96:0GtMBxZwPiUJS+V5dKnbAiA+1IWhnjKKP2hNgggp6p8/BbVuTFavBSInkvdFMguv:0G6HZwbJS+DdgbAiA+1IWhnjrP2Lggux
TLSH
T1AAC1F95591B72316E7A13A7ED0D24816FB32039844F38E3B0144D7FDA13EF9197A1A6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 ad5273552cd31d4dabb55acdcb40e629c098340b181106cf8fdc7bbabf9f8f1e
MD5 1ebb057a7d98060c5ba06158884ae692
SHA1 6d656994739c5a2021983c15b6fed246efa37e24
SHA512 fd561f21a79e650c9236dd09abd3cf035c91de30e4e057bbe6728629011c8b4d661fea70cf71cc8d0c8b3dc4ef7d24f74440dcdaad39441de24ee65fc8bb626d
SSDEEP 192:4G6HZwbJS+DdgbAiA+1IWhngRrP2FXgf76Gp5gFaHeBSInkvdCguWvy/8uXuEeCC:z6HZwbJ3dgbAiA+1IWhngRihgfWGp5gA
TLSH
T1D5D1F85591B72326E7A13A3DD0E24816FB32139844F78E3B0144D7FDA53EF918BA1A6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59f5ff.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59f5ff.TMP
Size 3KB
SHA256 54147095288a23cfbc1846ed24015c870e7154ae9e68a2cf754af0b2c16ac2ae
MD5 d648658e28b051bae8a1190ca337efae
SHA1 77a4268f6b098d61af7460725568cc04fb11f8a7
SHA512 00414c06d7ebfc02d962b29be4635f194d5d714f1cb47556a8ae520a6130bfb471ef07244a4e4a46db461ee3fc54d7fe14b0933e62ceefc955d0f2e8bb92e0c4
TLSH
T11661D62A02B35797F322363CD4E30A13F3338488197B8D77464445FD7A38B12972566C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 259KB
SHA256 26876eee35e7a319fea3361b820ef2d0033c42929e36f26bb88b16fd384629e0
MD5 ecf5cf94e33eba8814d76a298f898406
SHA1 4e00398becbe0a0ea2f7e2720a4a2de4906d21fb
SHA512 82852336abd20ed80c0b6e0ea9bfb5125b2fe86cb6c8b9496aff9c65f1826a2d3e7e95f8c425d64ba518235fa6d0ff63b89ba8bef7bb560c1614b58b9cd78e76
SSDEEP 3072:7e7EPzPZFB/SLF8XRTZJsrIsOgy4NC0rsZIRUJ/j/xDfsa:9h
TLSH
T1EC44D61460E172C5E12ED37602955C06EB76DACC5B5CB096B8627E0D2BF7F483AA0B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 353B
SHA256 e724e721d58be0cb088531be449860c09391ed04657170728ccd560961fbe095
MD5 99c12947ae7b2b7b996b35db1f5f48f2
SHA1 6cf071e17a565f2020412d39ef2c35219135affa
SHA512 d86e22fe46b1b29f0b155b97131b14c0dba630f833ba9a169c8df02bed7b2e67c76b41f167f0f11ff94ba1b0ac8054e44a972986609e39f17a608c4a41b36df0
TLSH
T19AE06838C8CCD29F521420DB59307B0ED2ABA20F9BCCED594E00D818B046548942D240
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 29KB
SHA256 149dbaa53aa2ef965aeec427ecb6f627902843a67063b89af999c109b1e3d6e7
MD5 0dc70b0a4b3611461f530c752f30fe46
SHA1 cffef06e12957d33dd004ba00f2097d7bca99f13
SHA512 0ffa409ec36dce3e88e16ddec73ba095e398e848a701a40e46d4ebfc7cdb8a38a7a4b630d38f4414c72acb7ea9da973cc98fad5a8617c70f58c3b3558dea44f1
SSDEEP 384:DLjN44606G+YAlEyoSjbL8NM/VHycre67G7e9JX3+BebhiFeUePqGVierRt1pnjx:Gc01ZxnsBEJoN1XuS89P
TLSH
T184D28CF783E5D52E891117F8A6146E1BCE1D0759432C3C2AC8D5EE87E3E2072E16A60F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 1319737508c852a74061b09e435affeb27e0c1058dfbf6b47d560c023308d117
MD5 edfd6168c968870862c124572905c90d
SHA1 50be874ded586ef69620c8f73d6552a4837ba1a6
SHA512 ed4acba9f70095b89924126fa993ff365eeb6e6bfd1cfc8e6306456f613ccffa916dd54e6afaf33580e01d56b17993a96d050150ed86691420288b805585963c
SSDEEP 192:sxZDRTyM/jK1Ml8Mk7/fSsAcwIdp06oyHW6+WNnqw/YwOscKIgrJ:sxZDtM7/fSsAcRTHb1/d9
TLSH
T1E652FB126A34597BCDDBD219FD55BB53D6F50432A2944E84AAFCCA0C04E6FED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 63a21ebbc8310c2416ebec7c45ee3103dcd736c9a20ea6b3ab983c57fc126b1a
MD5 7a09b2dcf12aff8cb1999b0105babb71
SHA1 a71efb32155c9a05633cc78f474749982c1b07b5
SHA512 acb606f0f148eef8f43ee29751b948e40bd6a2224efb1f1ed84fe5505684293999fabcfbd58558975f2a080cef50e8bd4f12ea08d592caacca16bb05f8f34130
SSDEEP 192:sxZDRTyM/jK1Ml8Mm7/fSsr4HIdp4SD8i0AzyHW6+WNnfEJYwTscKIg5JJ:sxZDte7/fSsr4I5sHb8Jmd
TLSH
T1EB62E9526A34597BCDCBD219FA51BB53D6F50432A2944E94AAFCCA0C01F6FED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ab83455a9e5d1168c87cdcc815045a250dd1fb032c3713a41550f2b9c09d9d2f
MD5 93dca757e3b2fdbb3676f09d8d23707e
SHA1 7b2572defb1b383c8b110ab093c46669471716bd
SHA512 69acfd420c9e46caef6a96ed9a442f0258ab569da1894d9bf612a1ce0d456aaffa78740314e12bb3615a48d4edbfbf3eb69dda657d44a7562487b062bcfba630
SSDEEP 192:sxZDRTyM/jK1Ml8UQacv7/fSsr4HIdpySD8i0AzyHW6+WNmBnUfEJYwXneKIg5JJ:sxZDtq1v7/fSsr4InsHbovJNd
TLSH
T1D762D852AA345977CDDBD219F951FB93D6F50432A2944E84AAFCCA0C00E6FED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a70d215ed99b99d583030cb27731fed642c3679c24f2632b92d195028ae73559
MD5 a147592789d7a8e458aad83843f36d51
SHA1 dbdb29b12ef33c310177ae624e09e78139f1360d
SHA512 180598a34a3888b20e11970337f86348c1c5e0ba865834e2015043f03324ff4f46702eefe00649abe1d8b117f5825ad9ede5bf9bf7435b9835940c4645a1cfe9
SSDEEP 192:sxZDRTyM/jK1Ml8Mcv7/fSsr4HIdp4SD8i0AzyHW6+WNnfEJYwTIcKIg5JJ:sxZDtkv7/fSsr4I5sHb8J2d
TLSH
T1AD62D9526A34597BCDDBD219FA51BB53D6F50432A2944E94AAFCCA0C01F6FED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3fe197a263426d8629c6fafc2c617cf768fd804112805e8688d5f2c42bb08390
MD5 ccb779d2138a2960f0c83405a54ec18e
SHA1 8c0681ab63a714f58d4326cf81b522a851f2663a
SHA512 fba8757584579615d736c80898ba0e83eaa7b7a367cc6e345812996d8e12532d0924111cc87bc3e516b8ea5cd0b49f701f47960fd9853e47a13e1872672e13dc
SSDEEP 768:un4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dKrohhcRaq:un4jeXmWvmKLEu1jacPLZQdh8D
TLSH
T174D20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0bda1a6f-bfc5-488d-8ff7-1c0a0f094400\index-dir\the-real-index
Size 2KB
SHA256 0eb159e11599eaed0f03d24c9fa94209befdec7980edf34b3ab7560e461be619
MD5 73d66c21cca5b5b740f5bd027d865d1e
SHA1 30592ae8220cc2c6d842000e6a203fe69fc8e0ee
SHA512 f4efa26dd44f7fecabcc9a6ea2dc139f3c457037b3f7c95ab4ef78c8da3055536fb311c043e68c42bb2bf8788828a3d958016b6c31008a8344e4810f501785ce
TLSH
T1B551734CC88467AED87161BE299415F287752C38FC69C3A18094B1B23413AB81B8B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f5b5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0bda1a6f-bfc5-488d-8ff7-1c0a0f094400\index-dir\the-real-index~RFe58f5b5.TMP
Size 48B
SHA256 ac7b27c09c1833503768887d1bf4243c6f949389d9505ef5eebc9f5e4970b2be
MD5 31af48ccb1ee4029ee354a946fe87cd4
SHA1 924c9f416817bb15396290f2dafb41104a00fe48
SHA512 c53a802ee6661cd7bc73be910c39e3baebb268e3eb242a35de9b42630e011d5dbc6ea07994356d563cba1e51386c6b41531956d2fc998be6e58538911c108a31
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 70dd092d7a6d433bcecf27baed0e2f7e37cbd248748e6b5539d4d00f5ac26a7d
MD5 3e54d19c35c50709149e6780339e06ff
SHA1 c8d5379bcc376fa09b65f97473a6eafe29e6a816
SHA512 e16533a49c3949408ef866ca2737c011f90c1516478cb4af007be08f9ab6fa8b800a3855f95404caae98a863dd63b6594bc9fbb834b4fdee5ad08ac46c3abc27
TLSH
T139D0A7C682618A431B31DD882238510D94174C4898C8DCD8D404B0426074D12C011B35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 79996b0edba6350c52cd95bc680c1af9495c87ea93202806e23cae23a2714770
MD5 d0c5f9aad7f4546c7aacc9080071d307
SHA1 a81044d6b488c9a06ec5101830288ee8a323f2c6
SHA512 742b150c868c3b02d61f5cebf93fa6cd28005fb6ed956ee6b34894bf721fb09b2ab139372f5045fbae3af70e31b6d30f8f8a75aad0dbed49bfde7259dcdfeddc
TLSH
T1B1C092EB6A114BD70B72EEC8303CB21EE51BC958C8CCCCF8F54CA007A238A138412B65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 fcae267373879868a6efec09fd383a738feba39feb7e074d6609538754b19588
MD5 7611f92288e9b30f47445fc834d2c18a
SHA1 f9f804a52d9d48718face67dbf01699b128c002f
SHA512 22c2db5ad1189523711890b3c1ac7921709dfdf55d1a4f1c7cf0646053e2d43b45bfe79e2d6cf1b6c6c0f84fa936c4d2f5bdf821029eb9fe4ffd62169235e1f7
TLSH
T170C092E766118B9B0F72EEC8303CB61EE51B8A88C8C8CCE8A14CA007A1389138412B65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58973a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58973a.TMP
Size 137B
SHA256 a8c62269e84d4440b8fa6e2f63a3d7984de7c943a223e2bbef24bb1abf479e5d
MD5 aafb064f711cde54dc109cae6e7ec0c0
SHA1 4ba562357fb973995dfea9b514cbbbdb122a72aa
SHA512 4bedb0849da8f888f895971e951b531cfc634827f052f93db4d3e8d548974b39f2f8354036692923837d29ab5b1cb64fd9a0bcb52b82dad6afabc936177a9464
TLSH
T10FC092E766204F970B72EEC5303CB24EE51B8D58CCC8CCE8A14DB017B1389138555B75
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 d8af0b2b0da872358b1012333eb5c55c29105799a3f3fa2c96d93c5a50420e4c
MD5 f2f8ea7a5bc6bd00f64eeeae280d385e
SHA1 1adcb4c101ce97c995a1181170be299354080ef8
SHA512 5bf8fa46b408defaaaa81a5b6a44765e90446efeb67e0fb554fd310bc366f3de6ef57e9c49a27bca496f43e5a4313bdb709e2f814e917ff8c2a20478cf05dad4
TLSH
T1EFA0029511AD1451DC1003F59845118C261049D10542221184ACC098AD59640B52AC05
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e6a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e6a2.TMP
Size 48B
SHA256 c9885dc032c0c09a5a61c5f61b462581631c464a5e66a29c211e5b2d4563d275
MD5 ddac6dcae03a0a4ccb571e333ddd05d2
SHA1 b8ade1dd2877805e68f55e7d55a47ce15e2f955d
SHA512 c475a95b921d2487f50aab3008f9672285e9fe30d8c90fb6d5da6c38db396cf4e1720d06ee34b06e78b4f4f79652ae40a33ed6c77db24bac160c3691bb81cec1
MD5 SHA1 SHA512

Submit Download

f136ea24dd18b67b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\f136ea24dd18b67b_0
Size 63KB
SHA256 99adbdbe2fec78e7540bdb02adcd70da07ea4c013e0d9582769225a86f03f035
MD5 bc9045c75d917f150a2dc1973768a351
SHA1 4f8f5c302eb508009a61b82ed05b11a33dc2afb1
SHA512 ab748311a911c0bfcff47d3ff8b5018383e8988be760243078df0739c3cd42c3483868355c7b297be52121177f2c52c30e894d1962ad8581e81b1a14e441ed0d
SSDEEP 768:heJDcwZ9olHJrD05l7eEFfgoAxWhrJTV9/5oZ+UyA2xGu/5374WAiEAXnR8c6BVy:hDJ0VPVR5yyJxGSV4V1C6c0VVEO
TLSH
T1D2535CA633707477827BA1F1905F130B713AE167F40494E8B194EEE54A84BAA42B7F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 82fcfb354faa46d534a95611b6965d26caaeea6f7c7d3bfca96de07812a55deb
MD5 1026a0762feac8d1bb44b3820d5c8c66
SHA1 a4541a983ed098f430a918c051a6aaca3907587e
SHA512 b686ef727d29818d49d98cc77b9cc636e0a47678706475e1ce6b18552c4b4f7d00e66b6b39ddbb823db63f9c4db304ecb9c9a9bec77ccbd86daa73b78a5c134a
TLSH
T1DEA0026822804112C10282B95D919240F7517E944111231F75D15D8AC9949E191D6101
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 492fd226ab064f6519ab3b064448b6371ccd65177aa6356f5eb1d1631be21ef8
MD5 5d994baf8bb860dfc694a3a82dca2646
SHA1 4ef403c719b9b5395590b1d08f2e62d9d356f421
SHA512 3faa1c458197fec47c4acee75909de3934deded0897e206fc273f7c86ee8e6411b941713d6fd707eeb31b79d6512bbf0c91a7be110027bd9db24f39aced9311f
SSDEEP 24:KdKf9G3asdAc44o0+rIji4KibhaU41EioSmWM/8qVyXYof/sdaCdK6W4KG+dIjAE:KAzIhK0YMHy1JIhKa88K6IfKbKUDy2
TLSH
T1D991001630FB53413C7DAA0883559A6A4E4271A37429E47B3FAC64B91E27E148FFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4817318-1abe-49e5-a37d-bf4f805002f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b4817318-1abe-49e5-a37d-bf4f805002f5.tmp
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c07f037182c203749c2da86bb81c98e2b079b5df712a76de477a69dcaaac7a74
MD5 52c4c0ceb6c803851fdf1f08302cafe8
SHA1 e8325f80d8be1ca9da52217cd620d424e1be3c56
SHA512 628ab6757b6897e4cd5777a1580df2b707e707319b1ceea17c04e97a9b84e90841bb37feaf1bd53d621426eb9ae3de11abd15e1cf944ac8db907ca656fd967a1
SSDEEP 384:AFtNn/s3n9SfsNbW1tzVU7KAf+2/d9Y45RFDITGT0I1x9M:AFj+9UnSmobrDi+0UvM
TLSH
T16A928D329829AC274ED29556F44B32174FF441BBA6C53FC9D6EC6F0C04DE7AC131A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e416b5930bf98c1b07c4b9e73ab49b0e311496c14397ca28f7c007336e3f2e9c
MD5 4901a1d7841b5a6c91fa1308fb55d967
SHA1 589b1a72681564f382945b123b417cb179d609e4
SHA512 8a9b900532d5f20457494c07590c71a7dc4b0fc92137cb020cec41498fb8077fbaca4878c0377039892ce2b4941c2083130457714f7d07fba8ad71d8db286838
SSDEEP 192:EON+V6hZ0QmiUyCUpc/+jV40+Fd9YDJ5wOZneU6:EONw6oypu+2/d9Yk2eU6
TLSH
T1C202D835A8686C778EE2AE45F48777135FE4113BAAD56F84DAEC1B1C00D769C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 5656710873e7c045e5643ecacd4a215327f0b3abf266eae0eae0e1d6184fa2b4
MD5 fc16a193fe7358cca3716e4ed534c1dd
SHA1 02f80b2298c637561c1933596d2ea81bf23f4888
SHA512 c78acfa1d0e06f5ec80851e348341cc48e2a00958823d0c50d7023ef693dc4692f05ee917507e56d669224f74ab3cccbbb7c7c902246504c67fbddf4171529bd
SSDEEP 384:2FtNn/s3n9SHsNbC1tzVUg5Of+2/d9Y45RFDITGT0I1x9M:2Fj+9gjSs+brDi+0UvM
TLSH
T115928D329829AC274ED29656F40B32570EF441BBD6C53FC9A5ECAF0D04DA7AC131A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d2962995faee937c8d2e5eb1e5932216e35e0eaad2c4b7da9f931590a73b7cfc
MD5 ebaf1f4a409231efcdaf7278cdc1ce12
SHA1 1cd6b8791bd8315e531e398d20fef3e114f49314
SHA512 6fc1c18a6891643b0948a287ce36072fa0b3b03e9d6e708277ec82f79feffabe0f507a99a7a0abd65a3ec7d3f045d83a006cdea839e23035b5bf422bf15daa8f
SSDEEP 384:2FtNn/s3n9S6sNbC1tzVUD5Of+2/d9Y45RFDITGT0I1x9M:2Fj+9ZjS9+brDi+0UvM
TLSH
T109928D329829AC274ED29656F40B32570EF441BBD6C53FC9A5ECAF0D04DA7AC131A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8f483345f4533a87b80be86f41836841cb19a0737e12ad060f243d34340687b5
MD5 332abce5baf9e40cfbca739d8a998122
SHA1 2b8ad40218b56a3ee107a9278d84abab1cfe211d
SHA512 0a9711ee70617a96c25a8e9ebebcf34b71e8344129f20caa0035c0aab234b686fc241f02baa0223d177c5226824490ffa96d4e7fefe69f032431dd6799a9e1bb
SSDEEP 384:OaiF1tNn/s3n9SuosNl8TUNTUlIlC1tzVUDpOf+2/d9Y45rFDITGT0I1x9M:ORF1j+9CMwg4SF+bZDi+0UvM
TLSH
T1BDC239F248D79836D99E4747F73E2D024EBCC167B581AA85B79C5A0CCC862BFD306906
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d3790015ff131a184bbe79bf12e9c47202c9d4aa8f6beae91e2cab4b4a01e7c8
MD5 d2d3f3bd5b4ada86bcae67b2ee6f1d8a
SHA1 d41b43ac5c09711901dd441b665538f0f4491382
SHA512 f4b8072a185759bee7f844e0934f4309b3e53f2e312e7f886747752f446c5e5c663b9be25b0429215ed864a5a2ea599ee1cc3929b520ba8ffb55f9e79a464968
SSDEEP 192:QzONO6hZkKQmiUyJUgc/+jV40+Fd9YD804Nz5cOqerqXU6:QzONO6gGngu+2/d9Y45O9DU6
TLSH
T1AC120B31A868A8674ED3AA41F09736135EE5513BEFC97FC4E6EC5B1C00DF6AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 434831a77b65340f6f8554c1179388846fc203b71c7d8a0063ac089bd9ed7d7c
MD5 f9387df9f33b90339869386d7221294b
SHA1 042fd26b2f36b0d66a8e0ea0a221918c8a8f275e
SHA512 191171d90bfeef8c6a4823a2be6e9220ebf234bc7c3fa36a31946ffb8f73cf78f8bac53feed457e5a908e8116a7a76209ba4dfd6080290e2cf4cd4db95b7d772
TLSH
T10BE00201F300810AC07C0330109F2734BBE2C15102A207060520459ABD623012E61AC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe594f6e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe594f6e.TMP
Size 392B
SHA256 909421c16c0dd1357130998fa1a64caa3c0c443ec1a585a0e3a159a1d635bafd
MD5 7660f9ba6670fcf32de60e619780bdf0
SHA1 14469b816535eb05f91b93692564dc51fd4c24a4
SHA512 9af305e875dfdc637e32401f189acefc64c369d396064389cc8f13506f64d12ef4fec6a1d2c88ef70a395530c91720c61053c3de116278407113b6569489059b
TLSH
T1FAE00201A2008129C07C0330104B2B30AAD2815101A106040620419A6D222012621AC4
MD5 SHA1 SHA512 TLSH

Submit Download

25f392fd-3c6d-465a-9973-2c4c932db028.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\25f392fd-3c6d-465a-9973-2c4c932db028.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7e6886a1fcd71bfcbfae533c59334799fa10c9dcaa36896795ce406dfa7197dc
MD5 91682e38a035cd6b42028e5279f8180f
SHA1 761a4ade07ac505c80743b2a2c0f0f71a92db70f
SHA512 c9f53aaf8445408cda4768d5f62939c98976768b2c8d71a090e292310941bddb4ff6d611097a3c2fac098422850c7383ffd01e77f12505cc2d4c0c17fa613a0f
TLSH
T1EA410958A6FA1148B3B77E56AFF6A86D447EB8772F16945D00110D4E0B37B04C872737
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads