hxxps://www[.]youtube[.]com/watch?v=y_lqk6U07CU

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
127s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.youtube.com/watch?v=y_lqk6U07CU
Sample260706-wt3ltsa16w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4876	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278352423497137"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{EAD0DFEC-6D53-4453-B709-52B139A5F232}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{1F45AA5F-FE4D-4289-9AF2-9B1CA797DC97}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5888	msedge.exe
5888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 3144 wrote to memory of 4928	3144	msedge.exe	85
PID 3144 wrote to memory of 4876	3144	msedge.exe	87
PID 3144 wrote to memory of 2632	3144	msedge.exe	86
PID 3144 wrote to memory of 4344	3144	msedge.exe	88
PID 3144 wrote to memory of 2632	3144	msedge.exe	86
PID 3144 wrote to memory of 2632	3144	msedge.exe	86
PID 3144 wrote to memory of 4344	3144	msedge.exe	88
PID 3144 wrote to memory of 1824	3144	msedge.exe	89
PID 3144 wrote to memory of 1824	3144	msedge.exe	89
PID 3144 wrote to memory of 1824	3144	msedge.exe	89
PID 3144 wrote to memory of 4348	3144	msedge.exe	90
PID 3144 wrote to memory of 4348	3144	msedge.exe	90
PID 3144 wrote to memory of 4348	3144	msedge.exe	90
PID 3144 wrote to memory of 2668	3144	msedge.exe	93
PID 3144 wrote to memory of 4380	3144	msedge.exe	92
PID 3144 wrote to memory of 2668	3144	msedge.exe	93
PID 3144 wrote to memory of 2668	3144	msedge.exe	93
PID 3144 wrote to memory of 4380	3144	msedge.exe	92
PID 3144 wrote to memory of 4380	3144	msedge.exe	92
PID 3144 wrote to memory of 3804	3144	msedge.exe	96
PID 3144 wrote to memory of 3804	3144	msedge.exe	96
PID 3144 wrote to memory of 3804	3144	msedge.exe	96
PID 3144 wrote to memory of 4816	3144	msedge.exe	99
PID 3144 wrote to memory of 4816	3144	msedge.exe	99
PID 3144 wrote to memory of 1740	3144	msedge.exe	98
PID 3144 wrote to memory of 1740	3144	msedge.exe	98
PID 3144 wrote to memory of 3996	3144	msedge.exe	100
PID 3144 wrote to memory of 3996	3144	msedge.exe	100
PID 3144 wrote to memory of 3996	3144	msedge.exe	100
PID 3144 wrote to memory of 4240	3144	msedge.exe	101
PID 3144 wrote to memory of 4240	3144	msedge.exe	101
PID 3144 wrote to memory of 4336	3144	msedge.exe	102
PID 3144 wrote to memory of 680	3144	msedge.exe	108
PID 3144 wrote to memory of 6048	3144	msedge.exe	120
PID 3144 wrote to memory of 6056	3144	msedge.exe	121
PID 3144 wrote to memory of 6064	3144	msedge.exe	122
PID 3144 wrote to memory of 4524	3144	msedge.exe	125
PID 3144 wrote to memory of 4524	3144	msedge.exe	125
PID 3144 wrote to memory of 4524	3144	msedge.exe	125
PID 3144 wrote to memory of 4744	3144	msedge.exe	126
PID 3144 wrote to memory of 4744	3144	msedge.exe	126
PID 3144 wrote to memory of 1280	3144	msedge.exe	127
PID 3144 wrote to memory of 1280	3144	msedge.exe	127
PID 3144 wrote to memory of 5596	3144	msedge.exe	128
PID 3144 wrote to memory of 5596	3144	msedge.exe	128
PID 3144 wrote to memory of 5596	3144	msedge.exe	128
PID 3144 wrote to memory of 6056	3144	msedge.exe	129
PID 3144 wrote to memory of 6056	3144	msedge.exe	129
PID 3144 wrote to memory of 6056	3144	msedge.exe	129
PID 3144 wrote to memory of 5888	3144	msedge.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.youtube.com/watch?v=y_lqk6U07CU
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffb4f7ac188,0x7ffb4f7ac194,0x7ffb4f7ac1a0
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,4778088263974472770,13617210658545432612,262144 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,9601439005405433251,13977440485375203369,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,4125825454647702915,4549777872281666287,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,1259860694843925331,9729455639951263010,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,4219328808831688415,15707304383043846452,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,14837956274760414100,11391651956713708562,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,8893625888876259518,2250604374402852487,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4372,i,100156426554371620,3267200499698175431,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,13214414469584032210,716467215888789252,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,17463788720861127668,9861164288982512532,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5796,i,18092313640083665407,5087560856742561224,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,18164027686481442503,7951132035965022871,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,281761843873876017,6165328909413944945,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,754747432096323450,6800241027574235885,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,754747432096323450,6800241027574235885,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,4851164730365517134,16563811866346774875,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,7685626841858968559,8487382194344130019,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:8
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,17123475570533506114,16546251975438179714,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5504,i,3561956219293240080,11854939138906547572,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,18248338042761434139,2535409535772631619,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,8375645093370364518,17408198768875567466,524288 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6880,i,15385299532376775431,15427255507911992882,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7012,i,8902047137881598388,8100822044951774736,2097152 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,662348242114764763,14549169163662184554,262144 --field-trial-handle=2268,i,12215156381097194533,8311996842182586346,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5888

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 19KB
SHA256 b9e910102d058a696ccfcc1af565d3844c952c7e2127915ee2953f66839a9555
MD5 9f98b25682d26512e43c53b3ab379849
SHA1 241687b6aba85f978728113da6a9831378bd6320
SHA512 9cdd2d1b0d782879d8e089292d6b7e44efc176ae733e0cd223a1815636eb7776afdfef1d46a63121a1cddf261aa1af5741138e5026d8abaa1586f32507068e80
SSDEEP 384:720rn9jqnI9cpR2kDPi+Ck9Zl+jog912SHX6Xr6V3FFBH/nRLQ5wDhxCmH4I1:nrclta+Ck9DoogP36XmZXBZPDbBH4Y
TLSH
T16892C0A09992C88ECD36F4271E5EE9C3595CE4917E3A0BBB07D26D5B084164A7CB21CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 17KB
SHA256 fe672d5c4e9570c5c4c30f7ffa25027237ec3a8766ec89d377a0f8964ee75937
MD5 7b25ade41ba17550d716530d18040b36
SHA1 d4d120778bc8ec1848baad09c6cfda312e02b155
SHA512 0785d61dc17879db03511c9977ebfed986072398665166edcda0ece0ffd0bdae44592d4a91064be3da462c571e13fab722aa5d9516c41d215b9a381faaef0e5f
SSDEEP 384:/nmVvU04jy2mdP6WxXByiQy1lm3W0KlGou/W2B9wv5iMOtLbnO2b:fAvX4jy2SP6WxxjhmuGoeW2B9wv6bnOG
TLSH
T1E882D1539CB2628EEFD09404FCB02B6E6B45CDAB700177ABB7D1426811C6187F2796B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
Size 42KB
SHA256 11fc429161ecd4d8006a1276bc7fe4f62393b07fca71d2c61cabd4ee208b8948
MD5 2909dfad4afe852e201c7556d038feba
SHA1 dd597bed078a30722bb14cc362f303fa117a215a
SHA512 7c2b75e5e4b53f50b0916781f7645167a58ece7e1301cd6dd5a950a4d05a97192bc7410b20940ffe75da71787e94172149da7d091b34fb38b860c0377b5144e2
SSDEEP 768:ld4uDiCXpQLzb5s7qgUYt0KkfTuzpNKeZFzm1dJE1MoYSbOiQm0iz2y9TlzRTzGB:zFDUzbiHVE2zOdO1FYSbtQLy9hirwmqW
TLSH
T13413F1453803446D5E2988E9927D7B23DF72D2F84D500EBC1E8F8C849D59B73D1C2BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 16KB
SHA256 72763158166647579960f87e25e33e472ab8cbb8b0bba12f3d7bc78880b6df45
MD5 f89fefffd25906efc74daa2eaef2c3e4
SHA1 ede8f5270ad52823eef3ac80d2a05e888e571648
SHA512 c8f9f833eab79ddb98503f62804210e94ef4524927f2dbd4c9b4fb0a91c5f8d504b604869d70a9a742c82d303818f7d7d24f6276eb24e57e919da561d243bb7f
SSDEEP 384:kozsDYLt/tOkZPNgg5nA9mvj4eWrYn0Nb+8FEjCP9ehO65:k3DmekdpZlnIb+8u+9ehb5
TLSH
T10C72D022660D2AD2DDB26EE111A2B9BA04731ECA49176589E9CD0747925C03AFE7E03C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 93becebb929705f88af09cca7494599163500daf06f22306c7d06d735c2f4bea
MD5 1ccac8ea92d31c99a4129b315015b44f
SHA1 9a296305b4ceb344751c8364fa2e9b0e9530438c
SHA512 0ee4bfd26a4d1c6c4e577aef3e34b9988b5bd1123e4176a097b6b162875a3eb8000da1f7b54b3e71e0fec96d0a4538c95fb9731c49a24763f063a1d320b1154e
SSDEEP 96:OEP/CAEdZnaC+h2ukxhXw6qOMXkKzedg9UUw/mpdvjVgL:XWyh27vAwMVQUUkpoL
TLSH
T13AE1F80742EA3E52DFCE00B2F2D8191D25E582A5CE236F42294BE03DAD07ABF8455334
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 865864588eb50a701570c2b4761b835e47113ccd072fd7cc720891a6d61911dc
MD5 68eda5ed0e11ea8a9482dff049069d02
SHA1 ae67020a67475a2beea943d9b638e77d3625a832
SHA512 48f8e284ccc6601ee54803f07b26803cbf34ff65b1055da188324fd927987a18b689348298125a9c87d11c1d82eb5bb9c49558b16a20390fb2caf19a689681f3
TLSH
T1D781810B46A83E95DFD71070F2ED5A2D34F283F58E136F961E9CD83DA416B674091728
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593474.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593474.TMP
Size 3KB
SHA256 94271bbebdc727ba68bb74176811f278bc2a1b4d5674d0c2cb127c6dc5361a89
MD5 a38e5526ac078f35991d0641840369ee
SHA1 51012f177502b1a7ceac6aba4058a58a14e937e9
SHA512 a2edc17e545b08662b83522c67fad7a21f74f2ccb47ba73f5a50283dcd79d7c116f627065b05dd6e7665ded9d0bfead09ce2a183d03f3727d7dee2b3834a841f
TLSH
T15271A20B06693E95EFE71470F3EC460D38F283F94D632EA61DACC87D652AB274492308
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 243KB
SHA256 286c8581f1dd51c3bd12be0d5bf4be81842b8c74f3b0486749bd4cef4b7968e3
MD5 e3a04dabdd90b418653cf9740bbc1346
SHA1 01dc69c6e0f9d261529503b3d13b7cf7ea17f629
SHA512 4c2554e4c1f26f6dc68d8b6ceec2eb31d5dbd2ad54c93c878383b2f2932420ac5b04ed81ddc0f8d41b276887c8d0309f0c3cc233f7768d29b0d23708bbdbe1bc
SSDEEP 3072:7ZJldz7Vu535FJ+3zGUb30YiqXiorpVkebs0YUlLfiwPfNdV:gE
TLSH
T1823408346256E6C0F02E83BB57258D07D335C5CDABA870D1BA627B0D36B7B18369C729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 353B
SHA256 3eca33ebe5fd5a1c184561b05ad11425737a27caea6c167faee0c7317b8d1027
MD5 ff432377852689fef6a061a356acf819
SHA1 29a59d794419ef187b4cb3a3ce212ef05f1d01b2
SHA512 0a29d270e9785d206ba54c24598c983074b2d9f3249503a2d5da00f7355afcd78c0558253b6219ca8f8d212e79291f8169130fac00fe463ffcc662c4e29d8a8e
TLSH
T193E0682885C9C16F225460E700607B0EE6D7722FD7CCBD490F05D81C7446048962D1A0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 c0a0a457c7f4a0e16e1e15d23abba3b3d8d2771e71b1e63f283be362de776746
MD5 aa7ae5ee025922e1e7fd0610ab55a07d
SHA1 bd2bafe568611511668dc581ba8b4f2778902d7b
SHA512 8ba85ec6c341c51939d8131e6736662873ffda3bc153ecda892271ea62d66b4fe8c4fcadf6241526cee7b5c3b31ba8992aaa3edb1ef57e8ea450cbc8ef9ced0b
SSDEEP 192:D1asSFtjFe0UvJfNtzrusR2rwYOeR18PIGDShrkj6vp57g3Ofcxt5Mvtk:D1asSFtjFe0UvJfNtzrusR2rwYOeR18H
TLSH
T1B912EDF2C3E5822DDC2156F4DB143E1BCE2D0A6483683C69C9E5BF4B93E5471E251A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c44de152d60d648960788f99dc952d9a721b2cebb3b56a0c6b17a1c69fa19a8b
MD5 4b451dbc3a40b7ab2bdfb0e7313971fd
SHA1 b46ccfbbcac372858286c5780fc04e07ee25e306
SHA512 817d5d44ed0d46dca0a4ce41e271e3d61eacf08ba2d89bd31ef6fe74b08d55f7d32af1ee769a01ecd1d432067299df118f5542c2b4ece56f6ee9f663c6cfdab8
SSDEEP 192:sxZERckJ/fIsYtqAEdp0D28HW6+WNn28/Y411IIgrJ:sxZExJ/fIsY4HuHb1/e9
TLSH
T18222B8536E38A97B4CC7D21DBA15BB17E6F54022A5D05E58A6FC8A0C05F7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 82c1cac8927c89b9cf7d5c16395e24e625f4f774c4cc22e1737d11f0e509e97c
MD5 50da83781fae6b6e92878bef24777b7f
SHA1 bb5bd1d9f9b86d4d6cf4c45dfe153140a09dd1d6
SHA512 d54d0c5d5df5d4266b697b7cdd837ca33ef8e84ad88e86d0460a8b1bef72ca00b545081b268ab36a4b542846f7b14d2917f1be625a2148c33815c537ab21a7ea
SSDEEP 192:sxZfQUn+RoyM/jK1Ml8MWOJ/fIsvtqMalsOZ3dpidu228HW6+WNBpI+U28/Y4Esa:sxZzn+yuOJ/fIsvEBhphKHbvBe/C7
TLSH
T10772F812A924597BDDE7D22DF901BB57DAF9046296944E88E9FCCE0C00F7BDD221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 0e3499e73e203177b31c7cf0817c8314f16d83748ec858d796ae977b9b9f2794
MD5 af6dea835c7cdfbb65eef06cece868cd
SHA1 3e8595ce51b0c0ba57775afe8d08534e17c9f1a7
SHA512 e7976f454f0aa99cd8e645d730dad8e8f7cc8d4d13287bff98867d2af635a8d5a507a479945dfe9dda183e137cef334d9e28ed8ef54e94d7fcb4721d107f6055
SSDEEP 384:sxZznVyMJ/fIsvExhZhJMHbH7hciBe/4R7:sLVfJ/fjEeHbqu
TLSH
T15682F812A924597BDCE7D22DF901BB57DAF9046296804F88A9FCCE0C01F7BDD221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7ffad70106adbe964312eb12fc032c2b28d7cbcbf2712ba705159ebade9a5578
MD5 1e0eb2753373aa1b5ecdd3450c6b7625
SHA1 3c536061e038972dfa8922027fc173395412adb3
SHA512 17416dc8fd80c49d678f3f7f58fb50bb2783ed26b1ac1f7b1b9b2d6062f2770f3b7c7db17b3ab8a1db5270d22cc878f2e9c884a33cf8fa0e1df1889c853f1fd6
SSDEEP 192:sxZsRoyM/jK1Ml8MkJ/fIsvtqAIdp0D28HW6+WNn28/Y4isVAIIg5ZJ:sxZs6MJ/fIsv4BuHb1/Dl
TLSH
T1D352E812AA346977CCDBD21DFA41BB57DAF50562A2904E44A9FCCA0C05E7BED320381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b3a2baa7e1100c8844ce015295cb1607c1dc0a81821949c454011e02277c46c4
MD5 d1587cde72f44219322754857ca1a12d
SHA1 7670e225e1dd4a7227a60d348bbade6f2ca5cdcd
SHA512 fabfd4e3e91c6751981b47c49750c29a4a78cbb1309355cdec84ed57ae5c6bdbe72c79f5814832e90f75a1c93964f4b727370a1f8efd2321596564e5f4888581
SSDEEP 768:Yi8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdvrookonUn6:Yi8iJPNWvx76ru1jahALocd8KU6
TLSH
T124D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B948D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 529c5f013f513cb95328ac1f0ba07a2328ff269f62bdde963d1e899dadc53702
MD5 eaceafb7dd280149e202a9fec7a304de
SHA1 3bb7566235a2d4a991c2a1d22cc5922a94d085eb
SHA512 4d63ecffc3d350bc2185e1535df5c12249cdad9f7cbd464fbd493f5c8f8859e473cb92d4f5bfd13212e5e8605dfea653b6ece6a662c7a59a859a8ec6093c8a36
SSDEEP 768:YHqirTNWvx7jr8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMALl6opTvroj6EUnS:YHqirTNWvx7jru1ja5ALocT8fUS
TLSH
T1C4C2FB3B640CCB7E4FC01A9DDC5A6F963EA802CB5B649D4087FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\04033890-a9fb-4a18-a099-704d28fde14d\index-dir\the-real-index
Size 2KB
SHA256 0c1ec1ec0d9b71b516b78fab01deef71ba82893c24d56c9ca27379179db92958
MD5 07ee91965243cf65237d733d5f3ff127
SHA1 91dc48a7d2c3fdf01e21e909c0083581e1c07a6e
SHA512 1b7619f1b64fe2d152c0cc5618ddc3577037c6412ac52347eba028fe00f4bc8d8f91fd7dbeae15f7a5e35bf14500fedc8aa922f1413dfb2d0a458f4dbb8f5a95
TLSH
T10741144CCD80A79ED875617E2C9414F153B12C24FC69C3A2C194B6B134532755B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5921d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\04033890-a9fb-4a18-a099-704d28fde14d\index-dir\the-real-index~RFe5921d6.TMP
Size 48B
SHA256 5d3afc133a6837c524f1a4411d6c94648e70ecfe5b9e61fe0c485899492b1d47
MD5 7059a440ba3837643effcae3dd934948
SHA1 dd6722d92a21e4054c8fc0df7623d043af0d5e3d
SHA512 6e9afab9060ec51214e1046fa0518dc33041bff9f4f127137fde13c83f672d8727956c933ce3166330d9f3ec66efdbf04f92c65eb140cffef8c80f63752ae232
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5baa1d14-722a-4737-b62f-dfe3e41828f9\index-dir\the-real-index
Size 576B
SHA256 7cacc6ed5a53a6dd9892f15c9fcca922042b88d8d36db555c717e4184e6b5145
MD5 ea95e353638959aa86d95210e72c7e28
SHA1 6b1effdd5b57477f340e2855bbe7e6a36bfec3f1
SHA512 bd3e2dfa6b4929e9b92d33fa58b04de6c83567db9964b2bbae7bd03a049761d75d0635dbf1647c968373175d527f8b79c1f8d2855cb257daaff7f0abec3bcce3
TLSH
T1ACF0A3996EF01585ED70677712A24551B2BC864426466EA7507D6DA7071F3120DC2310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59286e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5baa1d14-722a-4737-b62f-dfe3e41828f9\index-dir\the-real-index~RFe59286e.TMP
Size 48B
SHA256 d8fe0961863ff9ffaf5d95dac0bf56b3d11b803d7a2cd0494411e36983ed34df
MD5 075deeeca28dcd8455b090a1cbf4f392
SHA1 f2148d19fdd7a69f449780394ec7372fc058838d
SHA512 eb5c231b13f97ba8801f35d2917028bbe62a00d786c18b7fe99d51f0441c2bd6c29352a3260a0253a1015e4bc48282cf537ece5a48a1c035d196ccca0f2e1579
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 d3cc2c1c102fb657cba69946ffb3f08f658161feb2b6f5eae13222cd535473f0
MD5 f752454b2507f043ef457c33824f8297
SHA1 0376eb86f00d4fffdb8caa9fedde12eabf663a59
SHA512 4b3f3ac7230ba15c6671263769a5fc166f187811e70d3807baab930025150c29a00f7788f0d9b2e2316b5ca5eba682c826169f8e94a6913e0a887bf054a5a336
TLSH
T19ED023C541314DA90670DB85303C3B5EC556DC35C891CCE46B4574C13478303C405935
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 241B
SHA256 bc99e768fa2b83326912d642c9b0fd821a8a1c04181a7f83cc3da6885db1c851
MD5 545d2423a8b1ad8e97bef806dd2dd6c1
SHA1 005ced46419d0d555185259a8338b90f0fa171ff
SHA512 45ade23af6d935772314b08c57d15e739c5f7b1aa8ca595805367dbd7f0f81eddf4dae8e7925bc9e73bf2a789a2ec348b9d057f422f0011196a2f883a080cff5
TLSH
T12ED0A7C25530469D46355EE43038BB6EC54BAC68CD93CCB8665876013134617C416D28
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 f386120201c7692be91b930a2aaf245fd600533a49174a1c22a00337c1f0c4fe
MD5 c4dd6d6616ee54a61c2c2a7301c03c23
SHA1 3afcfdf2473da4a8d5911bca40250687eadf3e1f
SHA512 86091101c24ed5983d9cc62ae0f78a8e40e01a2b1787c16f19020ee966d5e53462572fc50a4a0c3421486e0875b91055214beafbc705d29c2c3dd5e36212e52e
TLSH
T11EC09BD24530456E4A74AFC8303C7F1ED94B5559C4D1CCF47548584130347134445525
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 2412de0f041ba69df4e7c40bd4c89a2367eec7561b1d5186f746ac6cfb75b677
MD5 162198be390bda59e9081cb5f216776e
SHA1 93a191e9bf085c4860599dc84d3fb56a0b45bfa1
SHA512 4fd9533872c63bca10b5cf0b5206f9550ce1aed794401c7dc559c421102849bad159c85088f26371931df301906909e601a42cb8d1d95b0a516edf18b754b760
TLSH
T144D0A782AA310A8546359FE43038B72EC54BA879CD92CCB8665856453221A16C412E28
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58c956.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58c956.TMP
Size 137B
SHA256 eab499d73a5c5246b8432c6baf2a0d71058194539787843e8aeba30174852287
MD5 84b26db24dde64110a6c4d7e8b075d87
SHA1 91aa717dbe9af11fa3a6fa880d2a8813fbf6b2a5
SHA512 485cf5cbefeac277fff9fc1d49aa14590added8f3f843ffade734d5e4f770ee18b66389373f0ca1640c2dd8854a6377b0572d05d0cbc7525ba8944eb4af48ee6
TLSH
T1A7C09BD24530465E4B706AC5B03C7B5FD95F5C59C8D1CCF46549784130347138545635
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 0d4f8ce6e11b07060d90c3729e92c03c328c1a0ae70efa96c0d7c3ae28fc1cdf
MD5 3467eb761a894e0d6e39b6a050197d85
SHA1 93c15bb5b3a8b3dab513a6f9c8c3aa1c1d654f7a
SHA512 073952bea83bb18f47dbb07c6157309872ff14cbf15e35e697d48eba40d129a2c6b99601de1938670b779eb411611e5766560f242e22d1649d054352027e74b1
TLSH
T198A0021C02D04245CA07A2F4659B915137114A10020A6F5541D60684CC705964B4500C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 3KB
SHA256 9f9cd2d27b6e242add80bb3911beddc7a8556cbb1bffc237707560026b30be23
MD5 bf72cdc9deb079b38b4f22fdce2bf38a
SHA1 bd81375a88015136a2fdb6d2d2bb7ce8975cd1a5
SHA512 e8919f9368215ae68e5ba3e7790b04ea9991bfdef48553d894907146e9aff371ab043e863db302857edf0b6c3f2ae06abc1e277cdca340b6ec8326eff8114544
TLSH
T14451C98DCD891A8BCC6C11B3A8BA14C5337668DC4B884F075DACA538BCC733D1825655
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 adfbe9a46268a980617ea8cc4dd538bb4e3dce2b18ac970bde47293fc3e4945e
MD5 722f8f8f9bb5dc02b1cdc3d7456cb4ca
SHA1 8137d5e6332aea4fb4513bb002124d23fbae040d
SHA512 f59bee7cf77f7ed366ea9659f0f52b0a42deeaa2b53c77ce38c0f79769e71ab9218243118f2bf68c3a78b00e7adc381ff79d8be1eca928549b57578aa7c696ab
TLSH
T16BE0C0F72EFB2C44FEBF67E10570A8A00281B459D544BC8F142AEB832461352340AC22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 4a26a90a744f20d94e4d576867fb7262848db5aa70203ff1921d3e5292aab466
MD5 f280c961301a4d6060b28f3fa7aed9e0
SHA1 646cac340d962f9475b2063353a663590e5ddadf
SHA512 1cecf237d1bab935c9c14e98788e9a610a249207eda3f405bc798183b76d590e5a940e7c55d75a8aca1a40766ea24e38a1db3afb3811e23432cce942efa392cf
TLSH
T1A3B012864F548450DC0C037859D29648213494709517576344A400A055230A00155147
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 878e401e588c309d09079e98d0d48573bbfe928ac241533e7b00c20914d5d65e
MD5 46e9b307837d4464a533ea78bff503a2
SHA1 0a8ab8dcbde0d72c78b3c0e7727bff2f7fe96db7
SHA512 f98b9cc00f6b08aaf349b1eeb15da99e62a97f16316875cddb540458d97407e0b4aedde4741962c04aa501d8c760f3a1836184d85bd2429c89b0b829a19f0066
TLSH
T1CBB0228A0E2880C3CC3C033C8CC00AEE30388C202F0BA32A80B800F0CE23A80032E00A
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c4c04584eb387eb98e8a5fcf7cee08681b41021f2902348b1fc67ec5a26c68aa
MD5 914fca40eab73df55b5cc216102dbb9e
SHA1 ace764725a86cfeb75b21e42760564a08196ebb3
SHA512 25e3502c64f534d99b5145cca1021a9c429be9487e9ae2f214cf840068c10d81a11c14d4a7a9bd9d9db0bec7c57c1be1213a782daf56063e04ec45ede4437812
SSDEEP 96:KEIgK9WK6A4KBGHS3eyEkUyW8pBgiyK43gYyciKxQy7HPY95PNtBz:azbWS3eyEkUN8piiK3gY5iKxQy7HPY9v
TLSH
T1B6914016327B03016C3E650CD2969B2747C171A7300DA42B3BAA01E75EA7E664EFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3abe5f3b-246d-4b97-9eff-924d4821b190.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3abe5f3b-246d-4b97-9eff-924d4821b190.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 68465543d07605ecfc85e6728a870ad9a91b022d89ec6d5e3208a710d4636516
MD5 c1c165473bed5d0c4f914ace88f22770
SHA1 0c67d189bc30c50429d2c3db684846b3c30d918d
SHA512 e272c57655d68f51531a6aa372771839135578026c9a9435c401cc614da458a417d53d80de46845f3e4a222a9041c08892220a6f3b1bc5027919d4a7e3e9590c
SSDEEP 192:FLsN5BQYmFEQmiU1vAFT4k03NoeNELI1q36HhH:5sN5BWyVGckvMJem
TLSH
T13C423B35ACA86C7B5DE3A595F04736179E708067DAC82F90D9EC6B0D02DB6DC1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 fec1295dce23354a4ac4f0d84b85718f30f73e38f0fd96a736d2b319565ee87c
MD5 5be307062836c14dff6087e6c2271900
SHA1 1544da878abcc1db303cabc895894dd5f2b8767c
SHA512 07c09a025eae2c3c0cc489d1a10fee271e6464e1ff254f1403cbbf80ab68759bc240a1f05a1cab6a9b156c632466b8d014bf76fbf8e8a3f654469d36ac03a6e2
SSDEEP 384:uWiF1urQXjZxh6V8zsNb8TUNTUlIlLTajV6t2kvMS0eJajDkg:OF1ur0h6iqwgttkelg
TLSH
T15CC218F648E76876D99E9747A37E3D178DBCC063B5845A60B7D80A0CCD8A1BFD306801
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 816a15ff1068f902c5476e1a46d19a02ae1ec8bca98d0aba2c130865eeda26ca
MD5 8c706c49e7d730389eddb950d119ff1d
SHA1 86a0e346643c65d9460c21de45fc5b66effaa3e7
SHA512 975ddb124b9bbeb91b10dad87a7825dab54e19ed794a6548335af63237e6a8b8c1e0374351e949949208126d29d63e6440a0af87bdd9fe543f3c3929662dca8e
SSDEEP 192:uSTurERX/L8qVXqCZ6VgQdcgsN51PQYmFEQmiU1vALT4k03NoeNELI1q3PVSghB0:durQXjZxh6VVsN5tWyV+ckvMJeJajDkg
TLSH
T181928E3A58B87C675EA3A455F087352B8EB05067CAC82FA0DDED1F0D02DE6EC1307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9e68c40b3894555072b65c90f2516c5d396e1179bdd32f5e64c409a3b6fe9dc9
MD5 37895ea92a2b5fd8a69056a4ef8051fa
SHA1 ade3d0a4e3bb8abaad9dd04b24c4435d1aab1659
SHA512 83d6c7982ded435ae80587f91ca0d46437cbab014e3965e4e8870e6bcb881fa796433f57e634bd39f1290a212a542a0b935d7993efce619e28b417882af72dbc
SSDEEP 192:ufTurERX/L8qVXqCZ6VgQdcgsN5IPQYmFEQmiU1vALT4k03NoeNELI1q3PVSghB0:KurQXjZxh6VVsN5cWyV+ckvMJeJajDkg
TLSH
T149928D7A58787C675EA3A459F047352B8EB05067CAC82FA0DDED5F0D02DE6EC1307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 65422ddc8e154316ef4a6bf11e64a425fcf1887a9697cd0c0b949979ea06350a
MD5 a89fac9ed8d4fca1535a86ce03764fcf
SHA1 e2733604d27663c8d0145014ac330409c0606bc5
SHA512 7b4425509c2cad25f8360fe12eed7fa0f829b9a66e64a1bd1c2a09b7c5c395d2f5ed26b259aac0fc919bf3a061052def879c848c938b113466db4bf7df8aa6ce
SSDEEP 384:iurQXjZxh6V8zsN5LTajV/t2kvMoeJajDkg:iur0h6iHtpelg
TLSH
T149928D7A58B87C679EE3A159F047751B8EB05067CAC82FA0D9ED1F0D06DE6DC230B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 befcd3b98714db83eeb6882a78f92e63b8fd98e1f39e3e8a42d38e1cdc8744b6
MD5 857af48aa81f114aa5c644268c87849a
SHA1 d2ec677c031e64277f857a705fa0cfb71bc8d538
SHA512 a1ef77c7b57c29db5389b2937527207f51542bc289ad27c28fd5dd3c22c1f58ae99a3b7de4b337efa510531eba96c68e7e7526dd4f48748c2039fcd56a2cb6b5
SSDEEP 96:WqONkYQsjpfmUT7K5ih/cIPURHl8h4otop5IgJDSBqPwivh50xy0SFYK7Ax6YLgD:9ONM6kuQmiUyTZyM903NoeNIcR1q3U6
TLSH
T1B5123B36AC78AC2B5DD3A964F08736179EA04127DFC96F91D9EC2B0C01DB69C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 abb04b8e8fffc7070ffdcdc8249f8910b4e08281b7c429c7d5cbb01a93733c0e
MD5 d3fdde4a7892980a9106d93f017404b5
SHA1 7299833768bcb33623062592600e8b4606de8755
SHA512 17d4a89588a9a0fc159e01b1e5a4d61b74ea5854d25212e8e42eb109dbd94a31fc5344973030d83248f231bdec66e91acd54b9ce2324a7a5769c1eb75da8921e
SSDEEP 96:ZqONkcQsjpfmUTmDK5ih/cIPURHl8h4otop5I5DSBhPwivh50xy0SFYK7Ax6YLg3:gONc6kDfQmiUyayZ903NIQi6EU6
TLSH
T13C02E8356C786CBB8EA3AE19F58737275FA5103BEAD52F80D9E81A1C40D728C1702827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 88e507a1a7e9ffd591d01a85df828d174a0b5570caa478249c347f2b623ef738
MD5 0c5d1fabf8f2c5a9fa05300adadc6e72
SHA1 51588afcbe8f48ef4654a496cf9c32ee583c7601
SHA512 90e207f1ba7cfb91d14a2cda519d1a5b815e7a766294c0a7fb3b69b26d74604e1c3ad938d74d5d528a2cdc197f31d7ae42eb9ac47a4eabe5ff222dfe96480c1c
TLSH
T11CE00413170400F4C07C03300103151155C3C47000F001547D71114C0D333013D35F45
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59df5a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59df5a.TMP
Size 392B
SHA256 2f511aea9369a1ad7b2781565a9c7e3b634180f95f9eab6bbd5e2b0d44aa2486
MD5 cfaac84374b4cccbc2d6bc10d13bf659
SHA1 243ac43d6a2d577538aeeca770bf9ec49856bfdf
SHA512 f4ab11db640d7e1f45af98f32df51c9a5f743e64ee4aaffed3f3b1bf31aada315675c7b0e7df1894954494d97bcd43b38648aea5c65d57dca71164c0a851a69d
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3c9d899c18e8f8478ee624a3838834c9cc47fb779168b253e3bddee23c95d645
MD5 906395808342b7e52e35ef795132886e
SHA1 a65c57cd6ed37586b4dfa6009405d7ad72a6e11c
SHA512 afa9c92214c891b7469c304a07b50864e46948dd2b0a44773b6c1d950be8068801c04bb300c6d0f24271701b7872d0213fb6f4f69529dc9a65a5d1794c8b1e25
TLSH
T161413D5CAAF91158B3776F56ABF6A46D887ABC772E06D45E00010D4F0637704C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download