hxxps://www[.]youtube[.]com/

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
149s
max time network
145s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/07/2026, 17:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.youtube.com/
Sample260728-vk3d2a1arg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4308	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297318545885374"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2746394149-3500112804-1243524366-1000\{83B68BBC-88F2-4226-BDB4-C4803FAA4F18}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2746394149-3500112804-1243524366-1000\{234C045A-71CF-4AC1-A728-004338D3A537}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3816	msedge.exe
3816	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2396 wrote to memory of 5532	2396	msedge.exe	80
PID 2396 wrote to memory of 4308	2396	msedge.exe	81
PID 2396 wrote to memory of 4824	2396	msedge.exe	84
PID 2396 wrote to memory of 4824	2396	msedge.exe	84
PID 2396 wrote to memory of 5320	2396	msedge.exe	82
PID 2396 wrote to memory of 5320	2396	msedge.exe	82
PID 2396 wrote to memory of 5320	2396	msedge.exe	82
PID 2396 wrote to memory of 3416	2396	msedge.exe	85
PID 2396 wrote to memory of 3416	2396	msedge.exe	85
PID 2396 wrote to memory of 3416	2396	msedge.exe	85
PID 2396 wrote to memory of 6084	2396	msedge.exe	86
PID 2396 wrote to memory of 6084	2396	msedge.exe	86
PID 2396 wrote to memory of 6084	2396	msedge.exe	86
PID 2396 wrote to memory of 4440	2396	msedge.exe	88
PID 2396 wrote to memory of 4440	2396	msedge.exe	88
PID 2396 wrote to memory of 4440	2396	msedge.exe	88
PID 2396 wrote to memory of 3972	2396	msedge.exe	89
PID 2396 wrote to memory of 3972	2396	msedge.exe	89
PID 2396 wrote to memory of 3972	2396	msedge.exe	89
PID 2396 wrote to memory of 3468	2396	msedge.exe	90
PID 2396 wrote to memory of 5628	2396	msedge.exe	91
PID 2396 wrote to memory of 5628	2396	msedge.exe	91
PID 2396 wrote to memory of 5768	2396	msedge.exe	92
PID 2396 wrote to memory of 5768	2396	msedge.exe	92
PID 2396 wrote to memory of 1000	2396	msedge.exe	93
PID 2396 wrote to memory of 1032	2396	msedge.exe	94
PID 2396 wrote to memory of 1032	2396	msedge.exe	94
PID 2396 wrote to memory of 1000	2396	msedge.exe	93
PID 2396 wrote to memory of 5380	2396	msedge.exe	96
PID 2396 wrote to memory of 5972	2396	msedge.exe	97
PID 5972 wrote to memory of 3688	5972	msedge.exe	98
PID 2396 wrote to memory of 2696	2396	msedge.exe	101
PID 2396 wrote to memory of 780	2396	msedge.exe	102
PID 2396 wrote to memory of 3988	2396	msedge.exe	103
PID 2396 wrote to memory of 2204	2396	msedge.exe	104
PID 2396 wrote to memory of 2204	2396	msedge.exe	104
PID 2396 wrote to memory of 3816	2396	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.youtube.com/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff9e2a4c188,0x7ff9e2a4c194,0x7ff9e2a4c1a0
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,13362838543311190062,3188594493385420037,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,11820744360575540797,17251127773512488286,262144 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,2728762740571327802,17365199288360007607,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:13
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,9195153202052567217,11141398825754215361,2097152 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,10435978883496712229,2612989520401577055,2097152 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5032,i,3389724933535806693,13810098021626054175,2097152 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,11651609415727597655,4355010094686976450,2097152 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,14889753104158972720,18080261551349009608,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,11393582942286283574,4415198002611909558,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=3964 /prefetch:12
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,15862285212537306543,6059875972634691831,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,10524350624257437786,13309757204304567226,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:14
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,10988143838430087949,15071279134075810455,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:14
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,11540479522504113331,8513010133711202152,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,11540479522504113331,8513010133711202152,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,788863383509402357,7067088785824850396,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1116
    3⤵
    PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,10454061219816328993,10148407640100907236,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:14
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6628,i,13989861355695827167,8135625613458210398,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,826163485054625790,10807633440154368121,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:14
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6952,i,3565896126065539878,16713277318564183783,524288 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5852,i,13275362571662347771,12168969158326440542,262144 --field-trial-handle=2192,i,7294602879793274154,7251443184005484276,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3816

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 79054d3106248f0ce580d1442e78fcc5cc48ea2a5eb3b58c6aad98c7106da4b2
MD5 89a1e1173735f4835befe22b5e8bb285
SHA1 d6f781e38a6443407276a07888372638a8f2106f
SHA512 1f5c9b3554cf3bce4cd1214982a8df00dcc74324e66dbddb67a94598fbc762dc44d06c78c7a30a27a408611eba6e2715e40527ce854f203815d9515ab7dc00ce
TLSH
T129D0C0363A2D3003D3195331E042C703332704701C43E201E110C00C9D784D1D3C50C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6b09340cb22edbf71e0f90763fd435b35e26e3a84e71f4c033073dc564ceacd0
MD5 de82f6df0733dc6e89fad64d305f5367
SHA1 f27019be86cb5f8ddd353a4dc0ef3c6cfe6da7db
SHA512 b2443f684be01ef337dd32e8e1253d69b81d20f7291a2a1fa8998d0f723bb6bc114ee5bce6cc270ceadc8b45e5d854eb59b93ff60a8a13d338c218e132c169ff
TLSH
T19DD0C0323E293003D3055331E082C703333700701C43E201E150C01C9DB84D1D7C50C3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 71fb10a0c9432f6178b2c150ab5c12109e8697fd73b466eca026ed4330aa4e8b
MD5 d0bc3509319e43350ba8acfb10fb3c7a
SHA1 fba98322ccb07b724328eeeb9c286b23e6f4b41c
SHA512 d44c0186b6303e462902ce8ee96ac065723c44d9b98de2e39fbfc48a556a4a8e336c86df3cecf77e88e73ea8ce4807c197e68b75eebe3e5fecfd35f7eb9163a0
TLSH
T19BE02BEEC824AC2714FD0B1AE0A6064AFB6013576680885F3B3D460D8FB472A068681C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5860e8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5860e8.TMP
Size 3KB
SHA256 23cc8eb6376ae530c4b4d74716b5d577d78620aa1f0f8ef0309992e9c729089b
MD5 8ee61ba4f6d7cdaf36133c58adcb8e96
SHA1 e9661243589cc221c35f6d9ef7fc3dd921334130
SHA512 2a2ffb3d51c4f7704ecb6e472a4380619b530e94c50834f349da711f240cb96b9ea47f1ae537d9412b6c1f130e37a5ecdeb4ea7f04f167ba6d3e11da3b8d2baa
TLSH
T1A471923C3EA2C563E313023195D24611BD7BC29A39735E1513805976F9FABF1D8179C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 88KB
SHA256 c8b1a40a06d03f449e1728bb9b4ea776ff1543dbb318d2ff6eb2bc57e32c9b5b
MD5 42bc815179fca0164daa5b922db58df8
SHA1 2d559a1b60dd421b462b46e9b9ed686e5cece317
SHA512 512fd21a3ca56d6e2f5f2f408915602061afb36403dcd8a5a7c518ce713ae016f4a63d0bc5a576faa9cb9c0c83d3f4767ca7d26ec8a5f0e05d80a009580ea266
SSDEEP 1536:7hajAwg2A+9ZGs+noNvzPUqdf/SxTPe1oGoChVqjHosirKnPuudNlUMZ9LM:7hajtlAfvoNvzPUqdf/8TPe1oGoCLqEL
TLSH
T12493B21F46C49ADBC658C1F248250FA55B3B2E0A7CD8A0DFF4C5766DF572A801732E1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 353B
SHA256 37882fb7fa26b6a7f8c5d4cc14c033aa9c78b36ec92fe23b8488804aa9999d9d
MD5 d6776ee5bb4ce963917e41080cc42c7c
SHA1 d4d9c09dce1213aaa4447d5e377f0b0532b00a2a
SHA512 8ecf42d35c891f8af5d68a893dfb008198037accdd770efb5435a37376e9c6092b217dd85f75223d1ad46791968de09a2fcf912562d361cd8d30f7f535ef17b2
TLSH
T183E0D86CC9D9C25F612474EB15387B0E95A7A61EABCDED590F05C8107086588917F191
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5e4fa532577df6b14f54b8e780c462d4036d8c361fb14dfd1d13b364c91b3e03
MD5 1db8a37ef9db0dac8d1a827df6c7c88a
SHA1 9d66671ff483730f7285f49d6baa7d033b11653f
SHA512 d329551a011a543e4ebe1a2dcebae19405cdcb590869b1e7ba5cdacd3c7a54e3a2c86a8edc137fb10fb80954fae44f2fe010c572b38cedbd89223c024d5cc8b9
TLSH
T1B731AEF783F4856ECA0196F0BA18AE2BCE2D0515432C3D9A85E4AF1B93E2471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 15af6c0359435ccd85d8ce8ed6b670d039b4c1bf84b12d7d6f34bde23a0de0f8
MD5 ca610f0e48b6febffd7ed6f8ad6d73c6
SHA1 12184daafa47a085d903a0ed86f9ed29f5709da8
SHA512 0b7062a681eb732ef51d55972e90bada58aafa610589b2e7101f2a3652ee75f7835480d14afc27a6147bada2f135a02126ea406c98d42cdc8cfc5c113f671042
SSDEEP 96:D1/OuNVuWuuuhu3uZFEeuwFaaij6Yzuu+u9uUERu5MuCuyugWuOuvrNukvuPOwJ:D1WMZhawBe5aaij6YidoGRH7HC12rNjI
TLSH
T10CB1ADF7C3E4C22DD81156F0EA183D1BDE2D092483683C6AC9E5BE5B93E5471E240A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 4ff3656225a1a2492c2e40acb80c7fde8267d7046dd82c9b61d70c43caca8514
MD5 9a174657c4af97ed1128d79be462faf0
SHA1 868e923913f5680a415e8644118d75cc9f75a027
SHA512 f639b913830b6d44eebd06ba84e3167bc4c219abec091e01ae9ddd18097066509079d10e1015f5d64896eee729d4a684697c7b2f154fdfe241ee2a4b361d66c3
SSDEEP 192:sxZkRryMqZjK1Ml8UQpFy/f0sa6E0CXU+zodpR8Jk/W6+WNnP1/Y0duxaxKIg5NU:sxZksqvy/f0sal0LlH/b9/5NwHU
TLSH
T1B07209166A3859BBCCDBD219F5517F53E2F90427E2844E549AFC8A0C00EBBED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 68240218b60105783cc15eef14276233f9653e3d11b86c244e4c7cf4ffd7620a
MD5 77ba9fe7bf18d371d5eebd6e1a8d6e84
SHA1 9ff2a01eda9b71424cc9a6ed2d3b32bbc9647b11
SHA512 b16a99e5da72744801c65ffa58579a37bb4e97517f8023afdfe95732a13422e5fc8c58ae015a11d91d0fec3b36820702286c01047de2407b6095982421e0ed80
SSDEEP 192:sxZkRryMqZjK1Ml8MFy/f0s8EmxE0CXUizodpR8Jk/W6+WNnP1/Y0dhWxKIgj5J:sxZksdy/f0s8Em60LZH/b9/5Swjj
TLSH
T1A462FA166A38597B8CDBD219F9457F53E3F50563E2904D549AFCCA0C00EBAED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 203cce1c4bb7086bf045d43912169a83adc65717c7b46dd51e88ab586e835b9e
MD5 c9821a650e1491ab2fab27fefc745a82
SHA1 3ea8a2b8ff01a01991c000fb740f506901f57279
SHA512 ec28c1925e34ca9914b2b22b4d8ebdbc04e95fecb3a0206730cad06b2a23429bff4d7e4a301a29b943a6e02bb5e5710113a1d59e8c719f29fe83597336591358
SSDEEP 768:ciWKy8Eq2+dWRm5rQW78F1+UoAYDCx9Tuqh0VfUC9xbog/OV3TQLl/Ck0sg3ro1A:ciWKy8Eq2+dWRm5rQW7u1jaKTQLpCFsy
TLSH
T117E21A2B280CCB7E4F841E5CEC266F966EE8018B66A84D5447FA494C03C77EB511A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\08008aa3-526c-419e-b5c3-876f07d510a4\index-dir\temp-index
Size 48B
SHA256 365e365b67b0e394def9432a1cab9afff2bf74d91169075d450a40cedee0db84
MD5 6946ff2c7da6c4104f2e6f52dd77ab22
SHA1 089652ff578c838c6e4cd039ead299974672e4eb
SHA512 baa0cd2f779d9f9cf24943c7334f5699a5be2ed747a18b1a32f9df9562ff71c02f81890cc49f4e6a840ab06379a80f7061522dfb80884db6bed47bce2cfd9d10
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\08008aa3-526c-419e-b5c3-876f07d510a4\index-dir\temp-index
Size 2KB
SHA256 450165851f7221adaca01eada37d8132bca34fc39153dbb3c0acb17a04a25f88
MD5 55fa6839ae0d226424e7de0cf6dfbed2
SHA1 356d48b24fbbfdf7c1dd12a7ed6ac3ed4cf8af64
SHA512 dc09091b639cfeb8dec5bb4b61bf6157edf118027f09e63d7139f6b7d0ac1a261ea52eab3d1c30be6c231475b2497beff351b6a632a79be033bec740cdfa9c65
TLSH
T1EA41454CC894AB9DDC7551BA2DD415F257B52D28FC18C39241A4B1B538033B45B875FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e2f78c76-157c-4a1f-af0a-2fa541ae87e5\index-dir\the-real-index
Size 576B
SHA256 4fc7a3cbd726ca5573405464dd57471a60aee237f3047df875fd1ac30b95bd54
MD5 114c6cddadceb403cc6cdb012fae35c2
SHA1 bcb0a7015699d003ef468202375e39ffd3ed86b5
SHA512 75c546a3a50323b091cdbc4516f9259a5e7fb025d48f139097a6f546712e8f13e2fc7fa0fa1303a5c9158dc108207cd13a780bcce78e8bc5528de59bc0c67101
TLSH
T1FBF0F1A2DF92446AFE9CADFC02EA01B43235C645495B9143F568B4BDE80F1929CE49B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5860d8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e2f78c76-157c-4a1f-af0a-2fa541ae87e5\index-dir\the-real-index~RFe5860d8.TMP
Size 48B
SHA256 ca4984def834a78a5d410f624f96a7e08d164738b29195697b97811a40653b91
MD5 460224acdf0c1103b00126178b8b9aab
SHA1 0f20903b8f1ca049f6c20623b24d108a3feb6a5f
SHA512 38208ad670add70ec27c6e13eb76a7b7116fe138fa097eab39e859499d6aec3ffc07fba47281ea0ee0fa83725059e92912723fd25bb10000d2e5ce6aa9e05ade
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 94312a31e9d9b08cafc95d6bf233d92eca1e565a9c8827d818c42e8bf74131c0
MD5 98202a2c05e89b2020cb4ba926be0527
SHA1 348f959426a9e7fb9229a00a8490dcaf40149c6a
SHA512 3ee1c9eade3245371108c672ff78a9a634718150ea609ac3e94b7f0ededdff6a24a1a6d2192a62c750bf6d23a67b799164bcf060fb9505153daab6ae0600d812
TLSH
T1EFD0A7D23A61051A42748FD4243476BD853BDC8C8CC1CCA895587126323DD17C412E25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 f4513dd77c2bb0648b7ce2c4cafea5b8b4c556377eca4faf5ddc0d4a216a17e2
MD5 2570ef988b7f6ec54e11bea99231ca28
SHA1 c695c25772209cfcc930bd07a6a77c4521fb69a5
SHA512 22876ce773bb2b35140868f95e79d83a9923e35651f3065aeb36a625b9da3cdda355f2b1fc0703b836a63428d10d9a5f303a7772b433082aebc1b244cd4d6054
TLSH
T11DD022E742305E5A03309F9A203423CF606F9C88E8C1ECD46C08F0B33078B13C0029AD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 0a0ad2b96163108003389e74b739adba5b37224f30e62003ae02642fcb8a4ce7
MD5 0f513f0a033a55dbcc2c13f7b8b62729
SHA1 3edc54b1fa321feb3c902e2768cbe211e8c02011
SHA512 9e613068f8dc3f350e8ce1cb9a61675f56204579ba586332250b86bf3a1c9108cd18eadf70d1d30ed6a2ce426696643ac370843bae48b841a30d28b8d91ac31e
TLSH
T1F0C09BE315504A4B06749FC41434775D951F954C98C1CCE4644854572035D138402D65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 416800cc012a117fc80285ba4cff823a64efebb2ab2e20a35d49b1b9cae996d6
MD5 e57da6fb614d0267521bf62ba05a3680
SHA1 bff152889c2247c91845aa31371dbd3cb255ee1b
SHA512 ccd2917714ba3f0480141f4af31794221bae6a7c4c5f20c41fd396dce4165534871aea83965b67c96fc1142c002ef14e11692be1e9d0f04b69ba9da4d3c8e27b
TLSH
T1C1D0A7D67A91064B13788FD43834B27D853B984C8CC1CC98965C6226623AD57C412E25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe57f81b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe57f81b.TMP
Size 137B
SHA256 d16c68d08e9f8ba59c62f22f85100dfb46a23fac52261c32800e8776930e4c7b
MD5 f6620643785009780ed6808b7df8e73e
SHA1 e1b7f4253421a5193f3d321e5105325fa660e9d7
SHA512 63e7e4ef1fe20546c1ecc30ab160cb4e50b79ddd513f1f785d906f8fd5d4425138fb3d88979cfe5b8a06a6267d63f2eed9f5b50b993c0c83f58f18babcbf574b
TLSH
T1C3C09BE315604A4747715BC45434779D956B9C4D8DC1CCE4944974133035D13C501D25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 c1e485c77623df1abdadd13ae2cc43ee7b155e8bdab633d547480f496c8e2b9c
MD5 0a325962f444ebebf1bfe9ac4171f0d3
SHA1 8adb8736e5223ed010397065d243435bd61586cd
SHA512 230de0419a7e202abedcc915af3604fc80054254052090fb4f024a9738a5ab9f02d545155af1dec1e4ffc10b63e19e6f81512abf4ac9eb09b2a3e31e2c8e2ea8
TLSH
T1ADB0118A2E2C8B82CC2803B0A088808A30282A280A032A0200A820E0802AA00C202028
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e5efe975f74db82b9ba6b14469f573b78f203671d17f9f8cce64a2af3666c752
MD5 b64dc92bd6ebaa8a43f769c7cac9da58
SHA1 12b6cd0ba55bf50d2a65ecd0a07a59453e53b506
SHA512 1dfc6d9729b68f662558c06717b737609a7ffe96e81dfed9b4f2a8d6d35e9b371c38dfb8749dd1b26055a4cda1706ca97fe39b36ea6fb928e2243c6decf10f58
SSDEEP 384:AFBHhTofhno2mB21q3Llbfe3sLDdeEpYt1UHv72zK:AFBHhTofhno2mB21q3Llbfe3sLDdeEp1
TLSH
T1ABB28056717B12123C3E290CA7A19B370E8272A33458A96F7BB804B64E67E115DFCDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 6022ab35cc76062fcb78b36e6fceb86e96b5f553b1d98e28fe0d1acea1acefb1
MD5 187e2008f8650736fc003a9fa0cdf811
SHA1 d06e0f86a5e845688fa939d1b3776fa0c511a2f3
SHA512 373ea80f6742ac4cb671aeca889f07517e65066e1b40dbce6e4723499a57adad1863eb88068c82bac0d77626d1b42b50c379f94f8fe8342027a2d26a4ec3337c
SSDEEP 384:n9iF4ZcI038Nb8TUNTUlIRXy3YHjGfb7oodhLCiT3DVcl1lIO7w/sczHy/7IgsxX:0FG03gwgjqog3DVcLCO7w/1NBuo
TLSH
T1CED25B32E8A4D9BBECEA5EC9B64A7607EEF44163868C5AD4D5CC1D0C00DF59D130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 cb3954cd9972d4adad28b13008eb992ca8137c8a9220a1bd955f3e485b295aa2
MD5 28c5bd3a91d2c5ba32cb12c0df7f5d73
SHA1 cd28908cc767a8021ecc57d9305fad4be477ecce
SHA512 e032ea4c95d0a9100795777dd5a206b022ab03ff15decfd25efe176598cfd78d1fa77fb3d4e38214c303c34ddb1e256cfcde9bb718727d51b0f81c56ac6818c8
SSDEEP 384:n5qiF9CcmyWCs38Nb8TUNTUlIRxyUYHjGfb7oodhLCit3ptHy/7Igs2:nFccps3gwgMqo832
TLSH
T1E4B22A32E894CABBECE64ED9B74A7603DDE04163868C9AE4DAC91D5C01DF19D530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 118105e7c2cac166aaaa46ee3b46132d0a49f8ce9d6fbc5471d1bb56afa22ffb
MD5 af74cfe529f73bbd09434e7e6c9f8ab2
SHA1 4fb3fb61612817f430144ba85ef71454c6b03677
SHA512 bdbe45ada744b8ca346d4b8183513fb04f36647f90f3ea4d4d1082e8998c4d6044c888bddf62961f9a84564dcc11e6ac4cc3756f95b0e96e0a94b568b9232bb5
SSDEEP 384:n5qiF4ZcIW38Nb8TUNTUlIRXy3YHjGfb7oodhLCit3DVcl1lIO7w/sczHy/7Igs9:nFGW3gwgjqo83DVcLCO7w/1NBuo
TLSH
T10AD25B72E8A4D9BBECEA5EC9B64A7607EEF44163868C9AD4D5CC1D1C009F59D030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 a5781dc337f7bf874edb9ddf3f935ec3e9f082a0b115f6be880605de284ba7dd
MD5 16d9162283e9b657f4495119a3235576
SHA1 adb0b496d2ee9c3c5bc03da608074621a8433016
SHA512 ef9719c6d44e14ab0e351777bcdca14ad2dba7eaf562169a720c8c5d29cb2248dd91b60f1850b57f48ce55c27b0a82e87bf91396df83600532a99baac2a1a602
SSDEEP 384:n5HiF9CcmyWCs38N28TUNTUlIxBydvlo4ajGfb7oodhL4ahkP+lFYS/VNHy/7IgS:cFccps3VwgYDxo/ahkoFYS/P
TLSH
T17EB25B36ECA8DAB7FCE64F99E74E7A07DEE00163859859D4DAC80D5D00DB19D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 125f2d504277168843b7e25567163b6cd127e8accf22307569a5f43c30658f60
MD5 32c2dd3c085a84f6bc8bbad329a19df9
SHA1 2485d53c751d1792cdec2bb0ad84da4d50f4a93e
SHA512 3e318fb55badad17f3edf59fbe4d32c4ec879e6e606adb3ed33eaba38cb96b744897f1e518122efabf104485f85314cf0a5bcc3dd2fb2a7933592fdf2ddd5c0d
SSDEEP 384:n5NiF9CcmyWCs38N38TUNTUlIxBydqt0jGfb7oodhLCim3hkP+lFYS/VNHy/7IgS:eFccps3wwgBHoR3hkoFYS/P
TLSH
T1F3C24B32E898CAABFCD64FD5E64A7A07DDE04163868C9AD4DAC81D5D00DF19D530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f67ae989f64b256b40575cc9a12a680617ebd4f67d357f127ecbd414e6a8b4e2
MD5 e47a3ea7fe6d5de7d8814360c478eba5
SHA1 a80535c9656ddf313b1cba6148256972bff89475
SHA512 4be570710ea35eabc0f0a546cb7c5b959f97af325f3ea787f7d0a26504897598beead18a91f46719a57da8d80cb876b59e41c10fd0dc0e5a2fecdcd289328ea4
SSDEEP 384:n5qiFiZcIZ38Nb8TUNTUlIRzyUYHjGfb7oodhLCit3DVcl1lIO7w/sczHy/7Igs9:nFQZ3gwgyqo83DVcLCO7w/1NBuo
TLSH
T1A5D25B72E8A4D9BBECEA5EC9B74A7607EEF44163868C9AD4D5CC1D1C009F59D030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 5a6f92f1a26d521d64db3f73d31531f46b86268f369a5661d6a5553d21d3f7ea
MD5 9ffddd23d80b90e723aea0e8ab7c62db
SHA1 3eaa5fccb83c4d94009b137ba66c21a59adea18b
SHA512 ffb1837f3cf1f0644349e94ff20a8b8d134fc0e930a5bf3a86aa194ce733e9482cc572483ff04a199ac0a10a5c87c9a75316122faf1ad73ced4cee56e3f8b48f
SSDEEP 384:n6iF4ZcIW38Nb8TUNTUlIRXy3YHjGfb7oodhLCit3DVcl1lIO7w/sczHy/7IgsxX:xFGW3gwgjqo83DVcLCO7w/1NBuo
TLSH
T18BD25B72E8A4D9BBECEA5EC9B64A7607EEF44163C68C5AD4D5CC1D1C009F59D030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5380-536-0x00000139E0E70000-0x00000139E1E70000-memory.dmp

Download