hxxp://youtube[.]com

Analysis

max time kernel
599s
max time network
578s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 22:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube.com
Sample260629-15e25agv2x

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5008	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1935666426-3801330415-1166019131-1000\{1AABE82B-CA30-47DB-B887-07AE6389FC1F}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1935666426-3801330415-1166019131-1000\{A3919BB0-1E27-42EE-9D11-5EC87F9B3215}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6096	msedge.exe
6096	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe
6028	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 6028 wrote to memory of 6288	6028	msedge.exe	88
PID 6028 wrote to memory of 5008	6028	msedge.exe	90
PID 6028 wrote to memory of 2580	6028	msedge.exe	91
PID 6028 wrote to memory of 2580	6028	msedge.exe	91
PID 6028 wrote to memory of 2580	6028	msedge.exe	91
PID 6028 wrote to memory of 2312	6028	msedge.exe	92
PID 6028 wrote to memory of 2312	6028	msedge.exe	92
PID 6028 wrote to memory of 2860	6028	msedge.exe	93
PID 6028 wrote to memory of 2860	6028	msedge.exe	93
PID 6028 wrote to memory of 2860	6028	msedge.exe	93
PID 6028 wrote to memory of 4388	6028	msedge.exe	94
PID 6028 wrote to memory of 4388	6028	msedge.exe	94
PID 6028 wrote to memory of 4388	6028	msedge.exe	94
PID 6028 wrote to memory of 6752	6028	msedge.exe	95
PID 6028 wrote to memory of 6752	6028	msedge.exe	95
PID 6028 wrote to memory of 6752	6028	msedge.exe	95
PID 6028 wrote to memory of 6000	6028	msedge.exe	96
PID 6028 wrote to memory of 6000	6028	msedge.exe	96
PID 6028 wrote to memory of 6000	6028	msedge.exe	96
PID 6028 wrote to memory of 5696	6028	msedge.exe	97
PID 6028 wrote to memory of 5696	6028	msedge.exe	97
PID 6028 wrote to memory of 432	6028	msedge.exe	98
PID 6028 wrote to memory of 1876	6028	msedge.exe	99
PID 6028 wrote to memory of 1876	6028	msedge.exe	99
PID 6028 wrote to memory of 5412	6028	msedge.exe	100
PID 6028 wrote to memory of 3480	6028	msedge.exe	101
PID 6028 wrote to memory of 5412	6028	msedge.exe	100
PID 6028 wrote to memory of 3480	6028	msedge.exe	101
PID 6028 wrote to memory of 5280	6028	msedge.exe	103
PID 6028 wrote to memory of 2168	6028	msedge.exe	106
PID 6028 wrote to memory of 1236	6028	msedge.exe	107
PID 6028 wrote to memory of 1488	6028	msedge.exe	108
PID 6028 wrote to memory of 4636	6028	msedge.exe	109
PID 6028 wrote to memory of 4636	6028	msedge.exe	109
PID 6028 wrote to memory of 6096	6028	msedge.exe	111
PID 6028 wrote to memory of 5224	6028	msedge.exe	112
PID 6028 wrote to memory of 5224	6028	msedge.exe	112
PID 6028 wrote to memory of 4112	6028	msedge.exe	113
PID 6028 wrote to memory of 4112	6028	msedge.exe	113
PID 6028 wrote to memory of 2164	6028	msedge.exe	114
PID 6028 wrote to memory of 2164	6028	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdc8a2c188,0x7ffdc8a2c194,0x7ffdc8a2c1a0
  2⤵
  PID:6288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,6034333669246710472,17133787763122175983,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,12590996507664482500,17721725692319513635,262144 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,16758578150309324820,6053732865040332916,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:13
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,14291017147738424910,15286085536644578275,2097152 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10550128713698052296,15732032412314852373,2097152 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5112,i,10830072296163909104,13397237688488819712,2097152 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:6752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4912,i,3697120812983498159,1490549215750866718,2097152 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,11916165910784618914,766285038004600516,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:12
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,3777750489978149500,16477952840760722108,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
  2⤵
  - Modifies registry class
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6132875789438325508,10220134342960715327,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:14
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,15519950709998832703,2692005898351287219,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:14
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7639386619713709205,13859018317211171062,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,4355548140302289840,1285218418180914334,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,4355548140302289840,1285218418180914334,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,11928470047062752980,2255901866880131362,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:14
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,280170100858260537,16643495111084946776,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:14
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,14996643804128936185,11789552066611466714,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:14
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,6795447646590547028,13450486720632177922,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6884,i,7778036277479821173,2526320322049571285,262144 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,13495189652436517796,15249163325050384143,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3268,i,9529319487505985167,18072712702827251078,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6716,i,7494034068405068668,1162555715314508424,524288 --field-trial-handle=2160,i,898165218750374345,17703608962564593662,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:14
  2⤵
  PID:2164

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:7144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7207f4c246d3ac882ff42358926e52b8316dd22bb03c5644ebc6f2dbc1168a28
MD5 b7329a74f1fa351c02d17b8e2692e575
SHA1 ef3d4b0eaaee583b5233cc6fc44fd331077feaf2
SHA512 650d63f3a2e065e3c2e4933483e10d79ab609f116a4e0bf7e107adff2025a85d1c77c68f86e7604724ab7da540f31911cd91f5e49bbae26354b6446fe249827e
TLSH
T146D012143718648BC91A2571D4318381A6668421215A8F4564A1D24D9D69493A39A392
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9ac04be28534ffc90f065c5357ca3a80ca723726cde5efb88f8a7e1a6b44baca
MD5 b73ee45352458e50358c0ccfe08f6cf9
SHA1 c9670f21ef5a19258323e88f363ca274d9b861a3
SHA512 a0988cd4a43f2f8fe9ab537054ce760518819b4a5b241855d7dd15687bd71afc74fa5b853542182d12a3a9aebcf68ff8590341f7237f1283b2b611b7b5610238
TLSH
T11DD012143718648BCD1A2571D8318381A666846125598F4560A1924D9D69493539A396
MD5 SHA1 SHA512 TLSH

Submit Download

81361bda-3432-4ca9-81dd-a4bba381419b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81361bda-3432-4ca9-81dd-a4bba381419b.tmp
Size 16KB
SHA256 0e112baeb044419a0de7f9dd22d4a82909c56fa39543cb590cc7849cf35c8fa9
MD5 69c591151cde615b6dab28055e76e2d5
SHA1 729fc1309154cd8e19b0ec53b795cf9154b11055
SHA512 580eed075e60a6957ae251b47761016dfd25c3ec84f42beddb012124356ccee8fe70959e6772d744a528a3c3c7b6a06cffd4180bc2dba798fc44ab6b349aa537
SSDEEP 192:sxRpR2yMqZjK1Ml8UQ6FW/f8sU6AZUYzoA8p/sb3D/g6+WNl/s/YUc4GEIgD3dJ:sxRprqgW/f8sU6eUhm/5S/lTn
TLSH
T10B72EA166924597B8CD7D619FA95BB93D6F90123E2904E44AEFC8A0C11F77EC221383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 7e650211fc41bb62f08ea60c5df5bfad6534a64ec0a6dbfb7c8606d2101d6de3
MD5 e5988416b95753687ed8b97427334080
SHA1 6dcab8af6c0cdfd57a78e262500f7bc4184b8e7f
SHA512 8fc321bf1f5253cd6b724f38dc159c1a6ebaf1333e9bb8703cd7d0015d67fe530a779fa8372de18d99093cdf8a84bd3cedb461ccd0ee15e367cc7a8781dca7ec
TLSH
T125E026CDCCCAC36EE680B847817C530C8280365E97C8694E1B18DCCE79412C8A3C26A1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 62d2d553e8619ba61370887ddb9145fa533c0d2ca8bacf68a620af4fc39dddb4
MD5 bc44922936bd44e1caad8e3c2bf56b2b
SHA1 eadb1bc3bb1f99b5bdd3e059159b327a1cfa7e3a
SHA512 e95d3d7c74edb4446c545b8a5e179836ec4f69d5abf8d6441d7acb61df222af69a2e8501ce37a550bde152a6df6d07c664e1768b912711c345670d4c6c2630ab
TLSH
T1B5E07D8D8CCBC31E9650658742FC638E86B1374ED7C86D5E1724C8CD3481688A7E3990
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8c4b769c1e7c5f26039ea4be106634cc912eb02aad1b0f2d75b356b0294a628c
MD5 a4f289a957aab40ba7039a912912fcf2
SHA1 02b7edea627ec0efa57ad2abab0f9ed649a6bddf
SHA512 39e208ce589363d4f9856d117971515078d4be279b9351733bcec0cf950bbf8957b0b1edd9ec10a79ba7b87f727a797cfa30d996106a7f581850433668c94f1c
TLSH
T1A5E022A6C861EC2F08F91B192170569FEB54131A2B40594BBB3C820C8FB163F098692C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3f9c76e007416b8a82e02d2015908201c55a19b482bbff10d6e693759ae14fcc
MD5 219004b5d8126fafb48dc78184bf61b4
SHA1 f1f35ee995cfd8fe40c1450361b8b165eff80de5
SHA512 7aa235d0cd0ad082f3e28ba729d14a4370718d2fddf1b702ea8cb83a0e3475cc619b22d69d4a20b1c792976046540ae9d867a84834b14c113cee83b9e32c0264
TLSH
T10681E9C4276439E2CB25867221D61E89FF7D95D28203FD11740FD07B5493B965831EF1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592f24.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592f24.TMP
Size 3KB
SHA256 f370d3e50cc4827f7637cf5d2e9b30e0811e80e2ab41ae2cfd594c882c55ead4
MD5 45d6241080a745c1939c08b56987e3e3
SHA1 a8fb3c5775254035dad4f51ec8825e3f12069e70
SHA512 f8dfac7658456cd7fdb8fa0c693dc278d0bf4838291ddaf354c56dda8e8516364578f1cf5e80c83fa55d5179663a13e4db5818c668044c8fbbfefcf599886b58
TLSH
T1C56129C82B2439E5C72A84B205C21E9CFFBC99E10203FD15745FE0B7648A7680832EF1
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 79KB
SHA256 510aa274039d6dad4de4e096320d2de6219901ecfa46563d3f2e2806da1363c8
MD5 24e1383e2adcb36a763c2ce9c8f1daeb
SHA1 1ae1a8e07cfe1e82cb4741d297dcd053b803d7f1
SHA512 f0992cb645acd99f7bb74b48df1e6607e7ff08a43aca3e2e9f82ab302b5ff323cdf14a6e93aba992f8c3f7855002852206b8152975f4d36289f21ebe01c19c7c
SSDEEP 1536:7COVFX1q36K+Qq6IQDPZuWCL6ROIZ0glofoyD:7COVFXBGq6IQDPZuWCmROIZjlofoyD
TLSH
T16383932F06C459DBC659C1F149260FA59B7A2E096CD8A0DFF0C5776EE533A900B32E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 353B
SHA256 38d3c0fef9c550aceaf436ee70e244e9626f592b070fa3d563a54137df08f30c
MD5 755423b885a4cf4a315c9d9f1e7220fe
SHA1 f0cd857613db990b41ccfd6d9cfbb18590fd4dce
SHA512 b80b066b8fb9431bedbd1532848c8bb17159c9fa45aa11464586f38c7025075937d240ee9f738c0d8ba37ed4158830eb35e4687af894bd828904dd546ec3cda2
TLSH
T185E0687CC8CAC25F616064E70038BB0EE2A7A20E97CEAD450F00D818B48628C906D141
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1d4bcafaf3cb6011c610fb10b3a5879a2f53808d76f6dabe4a7159c4320e6781
MD5 f94b872fddc9e9fc0bf0369abc779da5
SHA1 4d54b726310ee935ac25d2418e290776b8c71d2a
SHA512 75b202a13c3f219d5fb4fb4cc85924475a42bcf868f82b10c56cffbefdf708d3205856db12b08f54d6a7ca032577269e96cdd4c37fce03063809f75483b4918b
TLSH
T16D51C0F7C3E4866DDA0195F0BA187E2BCE1C0915432C7D5AC9E09E1B93E3471E181A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 40e3332551c5d5d40d784f62026ab3cec1958e612385aef10e51cbd232657432
MD5 cb4a39b2feb041d26406ecba698aa4f6
SHA1 e908808780e59024534754bb691b4c42fdcff76f
SHA512 9a266ae79e2032c8058a285ac4f1be642aafcc7676c968e993eac14835cede111405e8eee595b4508462bb4e7df1aa07770563e5fae497944dcd3b55fe6b94a3
SSDEEP 192:DW1dosXs1UeEoGmMNIjhnZ1ij66mRxsjG8UV52r4rXJXo:DW1dosXs1UeEoGmMNI5Z1iG6mRxsjG8L
TLSH
T166E1BFF7C3E4822DD81156F4E6183D1BDD2D0D64836C3C6AD9E4AF4BA3E6071E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

d6c05042-6ed9-43cf-818d-603e22c3e58d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d6c05042-6ed9-43cf-818d-603e22c3e58d.tmp
Size 5KB
SHA256 eb5ff524379b5df41a824c9f35793b3e1c569e2e02ccf9e7b06418a3923b52e1
MD5 bc876577d3321d622362ab64a4d2328f
SHA1 f2c39e6eb61224993f4981855b61b16a1f545a31
SHA512 76fbf35137ad9daf100340c3d5f59420dd74b691511dc863002abc0bd440be37d67ede906d78dba534764ef85dd6d112162c690f70f7b2dc49555ece498ba316
SSDEEP 96:D/O1uvVuWuQuJluKVuUuVFEeEuuukujorNIjhnZzBij66udu5Bu+u4ugOuxu+uum:DW1uN32JvReEV5SMNIjhnZ1ij66mSDBW
TLSH
T1AAC19BF783E4C22DE91196F0E6187D2BDE6C0924836C3C79D9D4AE17A3E6071E241A5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 3d73fb7bf1db8b50a7413285b4ff561559326b7e42c1affc4190b081d484f906
MD5 f08dee671ed84a806d1b5f71c4a3a71e
SHA1 72d36793f47f4156719e0b84ef1a736a4856e9b7
SHA512 fe478360d5920d4b52951372e8c7876ce5ee8f836a896bef3bb10b98437a3ec0206543b37da3e27d223f4c7711c44e38c232e37ba1054b690685af8e1ebdeb2e
SSDEEP 192:sxRpR2yMqZjK1Ml8wFW/f8sU6AZUYzoA8p/sb3D/g6+WNl/s/YUo4GEIgjdJ:sxRprbW/f8sU6eUhm/5S/Bjn
TLSH
T1CB72FA166924593B8DD7D619FA95BB93D6F90123E2904E44AEFC8A0C11F77EC221383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 de6f900e48e245ef9ce2de4847514961b19d23fc9141369d444ea4488f859e9e
MD5 b7512e72c0959ccaa9d99baae49d08f7
SHA1 09d7315ddc4cd65255f85dcf1fc609589d701c8d
SHA512 f51f8b0cef01fe36a44f014a54fa6aeefdebfc0cc1bd5231eff6191339e87a44fe03304066d2e1b414e3b877c1413cb2b6652e471528cc6a0d19ecde6b625cfb
SSDEEP 768:4eOlx6WgSYf9S8F1+UoAYDCx9Tuqh0VfUC9xbog/OVwuOGiro0:4eOlx6WgSYf9Su1jatTG50
TLSH
T173C20D2B640CC77E8F844A9DEC29AE966DD802CB5B988D5447EB490C03C77EF521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\053feadd-b04d-4fc0-8e51-2e127b7e95b4\index-dir\the-real-index
Size 2KB
SHA256 e4ca4bc093a9fdeca6e00812419b62d80c886217cf58e4e0b164df35d3a5e7b1
MD5 4f9b4abff09e5a2e45033f66d371df33
SHA1 90c34250995c8e52e2bd3ff14d5726d4006d15ff
SHA512 bb78450d0b8bb083be74e5cbf90da75d1c93fc2ef68c40a1ef8aff3777855bd7d89519d09ff0d5c90fd856e21ac6047c830747d694480bbdaa2abbb3f267513c
TLSH
T1E241428CCC90A7EEEC75617A3D9814F557B22D14FC68C6A380A0B6B134032B46B57AFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591b00.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\053feadd-b04d-4fc0-8e51-2e127b7e95b4\index-dir\the-real-index~RFe591b00.TMP
Size 48B
SHA256 7e01b285524863c5f23030235b4318d672adaa83b566b40b04cac3d1b5d29262
MD5 91c4c1d9bec7cf35432964ebe91c6096
SHA1 89a8c3ea670b70efa50f523cb21861fbb4027b67
SHA512 92f2cd394c756ad3ce803a395cc5f3e6d23551556a0cb8becd05b4186e7f0e92581debf5db1aa535e96dbe3ae6259d84c161a5fe502d3fe947bececd84d3a8f1
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f242ac07-13e3-4ae3-87ac-6321c2d98d07\index-dir\the-real-index
Size 576B
SHA256 23f5fe483041533b09dd3ab76f7e7d008242ff9426e21365296c3e9c314b44da
MD5 abec55b56f3715973d25f15a3e43c758
SHA1 e9b93ff4b4e91f3c2c6bf6aab1748587fbbd976c
SHA512 74861a04b8708a1e396a701a6a8752104f10826f6546d99c53dc29c7e52a53d9b55e0c2ccf69bfeaf4cbe383ac01346de779514042d41a0a4a9bc4c6eb9d8950
TLSH
T1C5F0A36B29F50855DD50497611535F607274F1D914923B67D57AD167150F7838DC1240
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5920dc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f242ac07-13e3-4ae3-87ac-6321c2d98d07\index-dir\the-real-index~RFe5920dc.TMP
Size 48B
SHA256 62e5cdb3efd42cd250999b7215d7ee74a2dbf1b46dcab9578b9f3004d657aeda
MD5 84df413a5a541fc60056dc135bd7fc7c
SHA1 fb85f56ff04d0af9cf477376e13fcd84cb05e80e
SHA512 7321d1bc78ab3fd9cc97c8ac31dded0e514159fa2c6a6098b02681ce49021369e9dde9965530d287b67504221e0a1082a07918f23ebd6895726708cb3021faed
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 ef3917fa626f8d822d3932a7dd66c7f59eb844a74249cfc871906041164bfa9e
MD5 c3ad9b5222ad9a41201290f8b0070691
SHA1 609dbfa3e4815ae0c5c4609072c4ca957948b3da
SHA512 df531abe93941085c80a06b726d5559e7089b6be92b08b921b80193ac98a39c11733dd62d3e725dd602160ca04b229a48303b75134407053c3e1dde4ca8352bd
TLSH
T1CDD023D55131DF5725305F405139125DC52F9C0CD480C9D55405755F34FC503D505D7A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 8ebb22727c3d5da88a69b7a8914911458aaf55413097ac42f344cb7f60e85823
MD5 8fb34857292a17839c9d3c9e2677c8d3
SHA1 ba4b119ffb27826bc288f7cfcbdaa289105ffaed
SHA512 e1f4d4756781e2a86a4d9da8069336ac909ccab3b54962d13d352cec3c8e8934b0ed593aae3cc2d345521dcb2ad15557b82185be9cbaa366185206d0f919e467
TLSH
T167C092EB19248B8B1A34AFC8213C622DD92FD14C88C1CEE9B008685B787C9138802D7A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 291e5c301c49a4a88c860aa405c7c2cc9548321d9598e5f040e9d6e88c4c4516
MD5 8a02fe986ea5cfe4252b971c24d6de40
SHA1 896122f9213f06a0aca3df30426bac876a1f736a
SHA512 5eafd0b00265eca5803c138c3d7df474e788a87de8fef47bec011b02bfc11a9bc1b69f16777c8611e5d740175da09d07b5bef9b799a2e92c257217e77c77d1bf
TLSH
T154D097CA3A620B8521395FD03538A16C860FC00CCC83CE9D9100301A3274A13CC22D3E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 282c2c4ebd3d2c503750f95e8464f42a3d4a2ec47d7e1df644435394d9befeb9
MD5 a2cf556f6f9f9571cea83160c9ec285c
SHA1 3dc37680fe6a3ad75445c00d7c3d992df9241d67
SHA512 d98dfdd5f51a70628302fe949e486b31c29fbef1a0995869468be4cb91cc3855f6d725495c227ea35a1ecce90f1a951daf460d10e0f2de551b6eef8088f9e27e
TLSH
T16CD0A7DA3962064516795FD5363CE19C851FDC4CCC82CEDD515434193678A13C926D3E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58c435.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58c435.TMP
Size 137B
SHA256 4931c87546fd5237f1541e93eea977dd350bea1b72681e5fc0a4a7b50d729edc
MD5 bc930f2531e369d6d1dd446e1697b226
SHA1 4975b8685ba62af73153ff363aab5961a5342ee6
SHA512 5912a405c03263fa2516162ec23a4f212f728dc3e10cad7d626eea1744f786432c1706c1f45cec1730da4715cf87a1fcd6b61e099a3c54436eaa52e9a63e76e1
TLSH
T145C092EA1A244B8B1B31AEC4213C625DD96FDC5C88C1CDE9B50E781B787C913C846D3A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\baed1163-a8ed-4c5e-b26c-85c50260ee11\index-dir\the-real-index
Size 2KB
SHA256 c6e836d47ec5318eb4943232065c37041fc942885584089397aa59b7cdcd4043
MD5 f708043783c313426567822fab2bc8d5
SHA1 7d72be7da89baa8b8f5354e236430dee22a91b4e
SHA512 bf3eb89da96cd9d2f880b3a5a4012801f1dc6c083764ed4342d8ada6eda21f3606782f669efca2514b1288c66b01700e8398f419b6976a7ae11f289896b245e1
TLSH
T1FC41A3688C825E0BDD298D731575249C23B9B4DD1A888F07797C613CB887A2A18A572C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d471e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\baed1163-a8ed-4c5e-b26c-85c50260ee11\index-dir\the-real-index~RFe5d471e.TMP
Size 2KB
SHA256 63ac34415219fe480a2b9ff070c500cd7e7f4cd58415da7811b7f6435dbe04de
MD5 9c30f47874827ce5e9891f35c9fe9e2a
SHA1 b676a8d7f735fa80a770ba1d4374079f915e0007
SHA512 d1d28ecff2183aa7257edfc750ea204b0bfbf6d4b92efbdbdd96a793a81513b58422ac09f0734f612daff089734ed5e7ae8f3438eca7c5b897b8d3b10c35dc5c
TLSH
T1FE4185649D829E1BDC2444730A46148D333FB1605644AE0B30FCE13928D36396DA42AD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 386ad46ec4acc2ed40da62682548476bd3d9f1aaf291693d42e5d6a99d2306de
MD5 1ab3ad19436fad7b4e9393f318d9a697
SHA1 00214162637bc4561ece8b9fecdadff6747888a8
SHA512 531dcbfe1edc414183085d244f9cf42170e36fd10742e017fdf9b681b71282a75792ceb0d58f408c1a8be2b58d69badf5d44bee4a40d8b8704565ea4c8a5b409
TLSH
T166E0C0B72DF31840ACEF97D65CF090B104063464C694EC5E116EA28360B33353443C52
MD5 SHA1 SHA512 TLSH

Submit Download

67a473248953641b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
Size 190KB
SHA256 37974ce911f4b8263936900a93e44e73bb8963c4d1851104d2ff65c85eb36d1b
MD5 69ebadc50247499403f8915dcbc6dc77
SHA1 7bc1de67bfdb38153663e9a824561e4914bb03b7
SHA512 88cebefb705d23dafeeff0d5fb91d10eb76889f1aa0ff89c2c4454e3e0365183dd13902ee313a720c74cd21a27d7fd9aa7e9606c6ce9e050efd8d0d196955e9e
SSDEEP 3072:CwzqBGVbM892YOPcItZIrMLjV9BRWH+CDG5b:A892YOPpHIrajV9q+CDG1
TLSH
T1FB144BCDB7A1B47352A744F5802F0407B239B89AB80CC4B8F594DDD96E24659837BF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67a473248953641b_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_1
Size 487KB
SHA256 06112426a3b1ed92017383ffdf7af40f5358f00836ad7eef2f7d52626640b595
MD5 5f7cb4a06ab08a9a53390fd6ad5d80f2
SHA1 8270adcec98445ebc9dbcf4995f01e5f86dc618b
SHA512 846413f4b7586be64cfd36f4f0ecfc7e200dc67db5e2f09ce02f1c447d8f01f5465bc5c69d676bbf730fcd2dc167c26a76b27ee3bee8f95a43da69f1e5ac960d
SSDEEP 6144:IXSnptUak9OxOQ8fDlZ7FBB1JoSVWs7EO3943DSHSpKb09Sx342Y+Kq5C68Fj6cA:I48l1VWsxH4SIZ4Gnd6iat3igE1Cq8Vp
TLSH
T128B43A56A3617A53CD1743FA06638A2B7779814C3F8BD3261AC1A7266C303F79D4EC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 17KB
SHA256 52451eaf1f773c21c9de1a148d3a7bcc1db0a1f2d611b89ac8d74713474b072c
MD5 06e11470f21685d88c395080cc6cfc1d
SHA1 92ec04619f8574baa2cd044e3726031b5367180d
SHA512 09f341cd1bf12324e442dcac1a54c7c22b6f83c6200a66900f351407d1d8078f890300b77da972af627c0c0d8104613b1ae7afe398bfcbe6ad36a07ea1395891
SSDEEP 384:E4EY61sLWelJ1JqHnIP0y5E5uzhRAD+vQu+JEY1:bEYXUby5jhaGg1
TLSH
T1CF72F9730C649837D2E5C6E5A6BEBF596CBC21BB18968EF4F06D557801F0A87034B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
Size 10KB
SHA256 e5be554f3efc66df19666660a37f5e27c1f7d66717c96a9ac93f20a61eaf437a
MD5 027aa29b5198c55898cdcc7314184b4b
SHA1 e5a86237236672f7b08df5a3520758ecd49d7407
SHA512 e0bc7020beedb8e2e6d6695ac518e6733c98672c3a1835a7aed9deec82e78309948a5a7654cade2b5adc3a682f44b7f230e4827720693e94d4ddb9df221f2369
SSDEEP 192:xbs7XnbHDo/Z0fe0aNc3JGatiYWw2Vm18wov5vS39QrL30C3XvXO:hs7Xnbc/D08w2Vmg5vOeL3J3Xv+
TLSH
T1D632E9391C58BCD3D0E9D67492B5DB0C5F709B8989DBCBA6A6A034FC19802E237CF521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 57439860ea90472ec5d0effc2a0b236266019686583ceb400699b22ae98bd174
MD5 417d8061440c0b1bb76899c8f10bbd5f
SHA1 a7bafb9b8b9c3d4b01a3bd6f1bd7312483693c45
SHA512 f85894d23649da863b7bc9f17f4894f08e4698ace785f37a2b0bc9b1796bab2041d76581d15e5fcf6839c416534ca83efb8dd879f2ad757f12dc7e8921061300
TLSH
T150B02445040451D1CC1C037454C103C5717C3C340F130001107C10F7C033740510504C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5917d4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5917d4.TMP
Size 48B
SHA256 efbfae8b68840cf025b1e2fc0ab81ef49b9347567ff8bc5144a7d5fc0e0a902e
MD5 11ec872348c5285bfbe951a900f21d4b
SHA1 16f688010d2bf2b181b47bc0e20012d0c328ee77
SHA512 17c0e458980e79909c0e8b6d218c27a894c1d2d3b2a5e9008a67fd26561ef7bbf3f761b9f17774fc7a0758f6b851671baf047a582b94886ce1895a48c2546e54
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 5187671de284bdb40b622f9f0d6dc16502fe9933cba1021823ecfc1d80987cfe
MD5 89338ac1063bc7d1655ac9886a4c2e0f
SHA1 79a93808eda516246aed32aa089cb13cdcb41658
SHA512 fb5a377845e60a69bfff4711429eb2ca2c924a8001020fbe71c770e3ff1323213a18f4c88fb7f66cba6fb7d8b5a0ce7909f90ea5904efed5fa5cac30fabba32e
SSDEEP 384:9WhIEeUI94LU82K3iXGuTQIVlgBFTzTyLuFVdv3n+FNmP13ObHd59wh8r/j931IM:UVI1zrZi+JK9ALXESpl
TLSH
T146B28F5171BA1701383D280E93B9942F1A4630E230DEA97B7B6935E56F67E000FFDAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 51cd8226017eec7112f75582a2d781802f08c330c55705913860fa3556b96bb6
MD5 ef08af2e0afe3feeb0590085d1902aa9
SHA1 16331cefb2852b9ab6ada4f57c78679a98a1f108
SHA512 2d389d9c0e356c25481a687d06e1550a34b7bcaaa034c62862dec07e5afdf39cd04c09eb6e0631019310a032ffc44cc13ad37adf2c09e3b3f518731c27b863fa
SSDEEP 768:eF1j+9K6wgRdevn9FGnH/Wx/mn12bfJhB:b9KYBWd0yJhB
TLSH
T1F5C25A36ECA8CA77ADE78FC9B709764AEEE402A781C859D4DAD84D4D01D32DD1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 13fb05ed5744997a98f60440f90f0e6a8f7b454b1efee7336182d7a8bc03b912
MD5 2f7ae1179467268dc9b5c7bb5b588f15
SHA1 76866a318ef0619cc18e47c242a2145c2f363781
SHA512 02525c682c2ab7e32f408ba794b0d930f4f730bbc8c165b6aab555dfff9116d7496864d40a74fc801ca025d41df0a186fdcc327004a268f7ce8cd1e4cf94c17b
SSDEEP 384:n2ViF1urQXjZxh6Vv8Nw8TUNTUlIRHPlcGW4ukW2n9cfcGnvGOR9+BfoxGaHiYIt:jF1ur0h6hBwgHeevn9FGnH/2f6GaC2C
TLSH
T13DC25B36E8A4DA77ADE68BC5A71A7657EEE04293C1CC99D0EEC95D0C01DB2DC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 fde08bb44bf33a8ef39d64d9aae513b2e1916b910dc2fe89d6003b4fa0306a78
MD5 73b2b63f06b25db679eb31a10333dadf
SHA1 52f7f34af262e975c404ef6b7da8812b7d863a9d
SHA512 ef6877a5eb42baa1aa955234713df5b9572b06cd76f6e30e73bd19f449acf367a08353134cde878d26bea352e7896b775a4cd8e2e47aceba57f4b2c66e77cf8d
SSDEEP 384:n2ViFQurQXjZxh6Vv8Nw8TUNTUlIR7PlcGW4ukW2n9cfcGnvGOR9+BfoxGaHiYIt:jFQur0h6hBwgHeevn9FGnH/2f6GaC2C
TLSH
T10FC25A36E8A4DA77ADE68BC5A71A7657EEE04293C1CC99D0EEC95D0C01DB2DC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 14f686a2cb6bf1b2a33e5930750666c55d149f3c98e53442310fc83a72881de1
MD5 be88765915c18b0afffbc81e8452aeea
SHA1 40af18aa81711b1e93edaa2f31a032d2c35393ad
SHA512 8add4aa0b5cdef74383cbb13b7ad73b5405dd19a5a4ee5683eb6966636a9faab4250464ea1dc65caf699d1c1f32a3d52926be2cfd01830ab84e8147b7b7b76a4
SSDEEP 384:n2ziFQurQXjZxh6Vv8Nw8TUNTUlIR7PlcGb4ukW2n9cfcGnvGOR9+BfotOaHiYIt:ZFQur0h6hBwgHzevn9FGnH/2fMOaC2C
TLSH
T125E2B1F698D79977E89E4787673D2D4699FCC153B0885990BBC90D0CCC8A2BFD30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download