hxxp://youtube[.]com

Resubmissions

08/08/2026, 01:43

260808-b5drmafn6y3

08/08/2026, 01:39

260808-b2763afn213

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 01:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube.com
Sample260808-b2763afn21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1900	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306267821382304"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{14E6CFCD-C7CA-40AA-BAF4-AA76EB393AD0}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{F4F16517-6FB6-4B79-AA44-EC55E1BCA52D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 1548 wrote to memory of 4380	1548	msedge.exe	86
PID 1548 wrote to memory of 1900	1548	msedge.exe	87
PID 1548 wrote to memory of 4788	1548	msedge.exe	88
PID 1548 wrote to memory of 4788	1548	msedge.exe	88
PID 1548 wrote to memory of 4788	1548	msedge.exe	88
PID 1548 wrote to memory of 3256	1548	msedge.exe	89
PID 1548 wrote to memory of 3256	1548	msedge.exe	89
PID 1548 wrote to memory of 3452	1548	msedge.exe	91
PID 1548 wrote to memory of 3452	1548	msedge.exe	91
PID 1548 wrote to memory of 3452	1548	msedge.exe	91
PID 1548 wrote to memory of 2432	1548	msedge.exe	92
PID 1548 wrote to memory of 2432	1548	msedge.exe	92
PID 1548 wrote to memory of 2432	1548	msedge.exe	92
PID 1548 wrote to memory of 1572	1548	msedge.exe	93
PID 1548 wrote to memory of 1572	1548	msedge.exe	93
PID 1548 wrote to memory of 1572	1548	msedge.exe	93
PID 1548 wrote to memory of 2416	1548	msedge.exe	94
PID 1548 wrote to memory of 2416	1548	msedge.exe	94
PID 1548 wrote to memory of 2416	1548	msedge.exe	94
PID 1548 wrote to memory of 552	1548	msedge.exe	99
PID 1548 wrote to memory of 552	1548	msedge.exe	99
PID 1548 wrote to memory of 3112	1548	msedge.exe	100
PID 1548 wrote to memory of 3112	1548	msedge.exe	100
PID 1548 wrote to memory of 4276	1548	msedge.exe	102
PID 1548 wrote to memory of 4668	1548	msedge.exe	103
PID 1548 wrote to memory of 4668	1548	msedge.exe	103
PID 1548 wrote to memory of 4668	1548	msedge.exe	103
PID 1548 wrote to memory of 4908	1548	msedge.exe	104
PID 1548 wrote to memory of 4908	1548	msedge.exe	104
PID 1548 wrote to memory of 4908	1548	msedge.exe	104
PID 1548 wrote to memory of 3340	1548	msedge.exe	105
PID 1548 wrote to memory of 3340	1548	msedge.exe	105
PID 1548 wrote to memory of 4268	1548	msedge.exe	106
PID 1548 wrote to memory of 4268	1548	msedge.exe	106
PID 1548 wrote to memory of 4028	1548	msedge.exe	107
PID 1548 wrote to memory of 4964	1548	msedge.exe	108
PID 1548 wrote to memory of 4964	1548	msedge.exe	108
PID 1548 wrote to memory of 4964	1548	msedge.exe	108
PID 1548 wrote to memory of 4724	1548	msedge.exe	110
PID 1548 wrote to memory of 748	1548	msedge.exe	111
PID 1548 wrote to memory of 1824	1548	msedge.exe	112
PID 1548 wrote to memory of 6124	1548	msedge.exe	121
PID 1548 wrote to memory of 6124	1548	msedge.exe	121
PID 1548 wrote to memory of 5540	1548	msedge.exe	122
PID 1548 wrote to memory of 5540	1548	msedge.exe	122
PID 1548 wrote to memory of 5540	1548	msedge.exe	122
PID 1548 wrote to memory of 1684	1548	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa062ac188,0x7ffa062ac194,0x7ffa062ac1a0
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,14732914415065425638,14053656084469371892,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,9634910061297283845,12900688725136188735,262144 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,203428979895362599,9842200860875473390,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3544,i,4643959472724066977,6846082016628679985,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,2400189260557702704,16803059282041218862,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,6765957791368039117,4167336424622496501,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,15919810216732945470,12915174575600937108,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,5252832589678792215,8118911322466327584,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3900,i,5225986771080859224,7137025969352233461,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,17344902840886363945,10419095874412254419,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,17344902840886363945,10419095874412254419,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6000,i,742191541701471866,13860835418368689337,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6212,i,8194909714230097130,8792696209551494401,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,6307948256149921860,12270157863372322786,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,14782911012344345163,17517512500880604422,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6768,i,1397110122554563442,3447908496105303036,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6612,i,3239433139855529099,14584672290385482994,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7100,i,7046369080990821133,13914790991438252937,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7128,i,9726557882257038118,3741969792516491083,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7148,i,11497137420757646711,190599352218815216,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,8670700161640932394,1207092270792935892,524288 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:8
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5124,i,11306909852393371947,2829630001004862423,2097152 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6824,i,12757390917264250407,10642120249359638914,262144 --field-trial-handle=2152,i,1569136293194455101,13877761524512905024,262144 --variations-seed-version --mojo-platform-channel-handle=7468 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

28eab294-8b11-4b4a-a2b5-fc5460ffb4c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\28eab294-8b11-4b4a-a2b5-fc5460ffb4c3.tmp
Size 16KB
SHA256 c2f1142332c84adff3d4ee00ec64b57327ba6772aaa6e28c47b1582794218b85
MD5 5f5ac28c66b97cf58ef5bcce43f47c78
SHA1 ccd0e43a89e201a3e8ed9769c2c72ef3234d2179
SHA512 37d5c67f6f228b329c3abfc90525cd178e2404f1fbbf0d07aca192473382e7ffc05828f01522ae18d7a0d366c0c2f3d1fbb17c9de4c49697828a6fb5e9829b64
SSDEEP 192:uXm+xasuheOwQxMGsNr6QEio/ZEgHQmiU1SAEn14H/+jVSjzor9oHXLET1h5cFTA:xZcIhsNr6YouK8Jqf+o8eHXoT1kFj3s
TLSH
T1AB726D72AC78AC3659E2A541F48636138FFC9077E6C96F94D3FCAB1C049A6AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e11c70830d4a1bc2a4549cd9c429b90eb75a0647645123570fbac4e7c335d789
MD5 f74e020851ab377e81f1d36af42053f2
SHA1 6786b00df5ae7b32b6a2f71f026dd7d6d8c7bfdc
SHA512 ec986a17d1c4bdd5ef2975dd4ce726f8e3a1f79d43aac673a202b900273e6abf1eca0c4a19bdb68af4a9f66d50298364ea29196339f3cbed68e605c41b5255a2
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7I:fwUQC5VwBIiElEd2K57P7I
TLSH
T12FB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 16KB
SHA256 21e567d667f0debde217442964c11e53ec074908e61083aaa85c30e0991c4a6d
MD5 27868df963f84e26a3661e1aa6155378
SHA1 8c03f2ab06d038181b2752d844478359f63efcb0
SHA512 4fd7028792d5738dac9143d0bfe1c43104060b1911c6ffcfa157c50ecc9b3947d99fa600e06ef64fc0ce956da77d75dde57e94bdc82eac3d24fbcd64d7b57c70
SSDEEP 384:j+AQhCvTMgiBK2+y9NV7LBKKSzIq21Jp6I/FlRlrzLtFTiHX:C5bgOKjILHaEN3zLtFTiHX
TLSH
T1C972E113E1B1415FC87412B7A69C1F5E0B22649CD4D97CD39632AD3A0A5E864A71F389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 60KB
SHA256 973d7c4cd91c428490204d4647f283b60daacc9ff0e8c83bf8c1bf994528602d
MD5 b96f8d90119f9f8307274adc5695da21
SHA1 57e36157b36dbc401c5701d0e27ec2885193a4ae
SHA512 e267cd9d04f6ced28190e549640aa7e08060673a0f616b7ade1ef3aba4f7c8ef52a082266ec362f42ad2bf3982141bb8476e4be4c97ef8c40248a1d9e25efea1
SSDEEP 1536:G3gKQfQWtQJzaGw3WZiWX0K1pFlvnC2c+6LABHgO:G3g94oSZFkulqJ+6LAZ
TLSH
T1895302A1F19608BE6EBA88B35DEC427A99F9F4E653D66D32D54F124021B8821D937C04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 72KB
SHA256 e21ce53d43bd9e404759b9a267e44c63106a423e70263f87d9e13ccfad4f61f3
MD5 1d4e7b902aa7d072fff5861353725adf
SHA1 3ab24c6848aa072854995d7f477604f2474fd6a6
SHA512 4667de5c55d95d200c604614114228180b0bec7b1e2f4bc204de5e28048301dd956ac0105516cc734757da33643cbef9ef42a2a04ca7ec6810200fed1f842d05
SSDEEP 768:U8XRyk5xUzO+ZR6lrxcgNbZcHTnGWRVmcrODcgAhR0C35hYNeJET+KoASRBqFqTE:UKRfo0rxzbcbzfSDccNaAJ0W9nKr+wM
TLSH
T1DD73023BCC97140DC7999B27A829A32EC10892C6A01F7D3B46C4347975233C5B667DD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 774725200462fe9e36bf67ab08933a516c1d8fb6f872cbded1d74862c3234116
MD5 91ecd623a6a24f31e4824833c3e0d3d8
SHA1 9ea408431307d1e9af2177dcd8f791584349193b
SHA512 7be2f64b938f66eaa9fd1298f6b931f0f90279a1ee0563f4304b336cb8d89d63f22b1cd7506fc29e10064f1d87a2154c4cb94c8609832a4f198ebe56cb684020
SSDEEP 192:Z+09eXcnr/l+GXCr67fPjIaD+/pAFeZUzOR9E9aJqITOk5EMlQcJ:mcryaKBH7+dEJ
TLSH
T1E3E1E77182C1AD66DF1752BDF288492236B5F4DBA7078B1F1A10BF7D7803BA85EB2010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 a226106fb077695d1384d5ab05f487b587523190f498e62a205a8310d7453978
MD5 63ada03759143da31060a6102d7048c2
SHA1 5893d7df7f48c5d3a6fe0d88ac98293db018e454
SHA512 65bd06bba200cd6ac0d3ab5130900fb21425258fa83a2eb2fffb662ce3e87cb764cf21325db11dfef15b5784ab370c1fa3ef3b0aa38ca657f852c59cd1050495
SSDEEP 96:TVZupKU+6s5bkstJgiWRrOA6sNXg3CPkUznPDwwnq8zX/kFp+ft1z8hVMmAgE4Jo:TJidnr6kzSkEmB
TLSH
T14E9119459382A872DF5362BEF3D42A1234F6B5E9270BCF2A25107E7E74067AC8C37544
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 8fd30411f1c845d9bac45a24072cf27f7371352f69a19eaa36be08976c6ad7fb
MD5 b6e53ecb9cc0cce2bce00892e26306a7
SHA1 3c288ab3137dc2d9b350d155d0206559369ede7a
SHA512 a054defb3c830515551744afa878384919935758a03603a6eded2d82fc552377e4787d6d229a15b68bf72af3d7e935cfe297fa590a3894509f7e2dee5dcab5be
SSDEEP 96:IZupKU+6s5bkstJgiWRrOA6sNAg3CPFUznPDwwnq8zX/kFp+ft1z8hVMmAgE4J3v:KZ2nr6kzSkEm+
TLSH
T1829107459382A872DF1362BDF3C4261234F6B4E9270BCF2A25103E7E74067AC8C37554
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596306.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596306.TMP
Size 3KB
SHA256 7ac7d96f5eda11bcc5d8bd4df17216df6126afee4ebdb5c60551070441d9bb7b
MD5 5e2b588fbadf77cf831081e60c1323b5
SHA1 ca5fbd6fbe6a4ded2bcf56de9f57ae831d2c935e
SHA512 de45ed87cae9dd903db717adf939d6b5634432fd30a80988b672e1cbc751c1414c36c6bf52c3f36afac957be6eeda11cb4553614ec592551cbd2e705b059a1d9
TLSH
T186616F69974208B4CF6316BEF3E0531238F2B4E8391BCF62159079BEB21676C8D7B558
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 6KB
SHA256 f99b46670ebe0f84205d7a0d4daf6de8213c9f62b373e8abcf486dea41bd954d
MD5 ed78dd700087af08a2d0808983f29acc
SHA1 7576d6666f75f1d82971bac1c85023f0f1b2050f
SHA512 3ab4e532abc520b49f08fb504d805b649bc914609438a250b57b9aae7c42634710feb27e075e233db54618991e6b66965fb15bee994fdbb2c1d76bb464bfe1c9
SSDEEP 96:rHZOpOl/iNqsz+vhAJDMTLx+qDMIrsvmB2d6mRJDv+Op0lNyRQ1rZRwqWQbXU6L3:rZOAEavYqxw+lA9vl0lsy1rDwq52wjp
TLSH
T1C1E16DB556C88855D93E1FBBD2FD164EE670BB0C7A88C09D6201728F5E13803E96B16D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000015.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
Size 709KB
SHA256 f02d5db14aaabd39b6d15e9c58d344508c0b07027815cc4709a910d81b1e406d
MD5 7eb77400c212e7e67d01f5c5c6d04fca
SHA1 7972ec1d10147dd5c9463a3f68f0dae6876094bd
SHA512 f75af9a90bfc9b9262251e6f5675e44d47224972fa900947fa2b7870ff93700fe340fbb7fb35d4cf87d163c2a5a83db63fed5318391cceb45072779f4da728d0
SSDEEP 3072:lnCEp3y3feVM6A02xAYMwHEGV5vAYKwslhxybs8/lhW9++JodEpCKozNjCZhHpCN:8clSbRlks5eTMi1TfBboOp0
TLSH
T13BF4E894B26B62E8B47F835627058C0BE379D2D8D65D3411BAB16F4916E3F003F68379
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000017.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
Size 16KB
SHA256 c7e374c8baebc726608a52284ed8c0c922c6e40773b5eb672f225152a2053e7d
MD5 041009d338e8b403e1d3196614dd4ece
SHA1 975e0be2b56ff3ed924dee1ef908810dde8c0a26
SHA512 5122f37033436b09390292aac4ecbc69ca94a3f30abbfbbbe545d74a447d9630edf35b8f810ab217397285ac7419b41b5d84c3a282ab42ed2cc5906097e5868d
SSDEEP 384:Rsm70cFa0l19ZUK8IEZEiqJ1XiwJegSW5/:RNCKOZEiqJ1SwJegt/
TLSH
T11B72B0BF29C44887D077557BB0FE1649AE32BD0E354DE0DCA652304C1D62AB764BDA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 6KB
SHA256 95a9b22aa1124a67adafffa1e50f4d358570183914d44e534a71cbf77d3f54c7
MD5 837d0e44b147e9091994471941a83df8
SHA1 224a905fe6de28c622226713870b5e3032b76e4d
SHA512 1550e985fc104e693dbb0527202bcd8a18b2559243c511d02a8d44ebceec079269f903dc2b78a7bacac4854fe4f0a8bef50e4b9890b08b47ed831391daddbe55
SSDEEP 96:amK2mKCQfH2zC99u2C994iirDkgVtXPCv1UzkCVwwg/rxMxjeVfu/fuX:mWWG99c99kDJAv1UzT69oKVf4fuX
TLSH
T19AD16BC7260984E81857C27FDA2FE089CD98F6025F0EDF55A55FA2CF07E082B9466CB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 1KB
SHA256 33f13d5f7ad45f640e45f33fb3c4d1bc61560d62d1d4f7bd35ba7a5682b1aa19
MD5 aff2b88665daf8180f7ed983d94b9921
SHA1 f7a4c3cf66a19f2e22bea7e7a17b1ec97c0a7033
SHA512 b35beca3b5b06036e19c3b1f6b3f49491c9503f425b448d8d41458d998db9d04c0cb528dde57bd628b36f9770e35ac38d043f83effddffd4baaee40de8748746
TLSH
T14C21AF21F7FAA884F8F616F54AFB78467D32BC4E0D0AD62F2101018D50B3A058C3033A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 25b38e7c2ec28ad570554f40b885013ec0b9f8660b359f97f2ba59f969fb9ee5
MD5 89b91d56bceb4f34831e079ff45e29ba
SHA1 238a84b771c2450d6b14a8389679b180643509ca
SHA512 65da2e619444c0425f70ab63f7dbef0beac42667c9fe28267d122b4a3187bb426a6ff45f80d75aa0642bc0915935a4873e514e4c6c75a7f20d305e967508c55a
SSDEEP 192:D+92vZy1aw9jyK1re/JEaCfJ3rJLshGfNBsHWUhPqj65W0WLWF5Wq2vwl5fiQeX3:D+92vZy1aw9jyK1rehEaCB3dLshGfNB3
TLSH
T1D432CEF3C3D4822DD82156F4DB68392EDD6D0E2883283C3AD9D6BE4B53E5071E205A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 644119cf29afba9c250b6add21274b9da8e6f352ab92357b69d1dcdc48627a71
MD5 7d12685e82ed78c3fb35a2b2d0738db9
SHA1 8ec1cce31e8e21586fd64793068af327e7f0aa45
SHA512 0a3a4830e89558ec928d40f30c6364b41da303460952e58f6b3e6b4305e1adb30a9698d14e134d59a0211c4b3aeb2efef8edfa5da66aa8745a97dce394d53ec4
SSDEEP 192:sxZUR/1yM/jK1Ml8MkZ/fxs+56w8MIdp0bfjZH+n6+WNnjQ/YwnSEWIgrJ:sxZUpJMZ/fxs+58VWHFs/Y9
TLSH
T1AD52FA126F34A97B8CCBD219F945BB53D6F94432E5900E94AAFCD91C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 086049d79edcd8f5e499c108024579dff4b5172ad33483d58db8f8e551d53bd6
MD5 7f409ddb9b77bafe78fc750ce7d7ff32
SHA1 7d406899ab4a2c3e8c51c5e7dca0979dfb01ae5c
SHA512 24b898d686b3e3212e5f5e585eafc583ef35f211febc628c4ee4b4547d0e6f799c1b9441a868bc0ab3587e46d059c879e467d3a028774a6dcbde35fc0b3ab1f4
SSDEEP 192:sxZ2QUniR/1yM/jK1MlnMkZ/fxsH5628iIdp0bKjrH+n6+WNnnsXYwOIEWIg5rJ:sxZInipJJZ/fxsH5iLFHFsXFH
TLSH
T1B16209226E34597BCDDBD218F941BB53D6F9443295900E94EAFCD90C04E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 be53fce1fd727503f71c3bfc146f94a342c4b3f72a983be41e0c3b63a204aa6d
MD5 ccf015408f3b2860e10f5285b4c32927
SHA1 d25dbb3183d96d57a68aa7df59e594fd04c4bf49
SHA512 b0140022a22420a4dedd36e66bd55bd00099b6902aabb3bb5f4f4770dd1320de9106f70ab02c22c5666d367f66e4370de81bb54728c9237240062949a823ab82
SSDEEP 192:sxZNQUnPQUnjR/1yM/jK1MlnMWOZ/fxsH5628u7Jqla8dpiFRKjrH+n6+WNBudU2:sxZlnjnjpJLOZ/fxsH5i0AaMLHFyYxhi
TLSH
T12282F7126A34597BDDE7D128F9127B57E6F80023D9904E94EAFCD91C08F6BED221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 cb592d06e2efa61ad80e3a02695b82877077d7547de420178737581a3f98e8c8
MD5 481ba70e604fe50888a8c6446f7688a8
SHA1 19f0a724ab4f1c6bf6701e151d4890b690ea9d5b
SHA512 df66ab09046656562fbfc6ddae1ce4b7cb9b5a0d3d99fdb7775abb996e0cb175e26147d16c054f9d380e13e7c57b53155e6a2049b751d342ab407cfeea846739
SSDEEP 768:dy4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d2roh2csaY:dy4jeXmWvmKLEu1jacPLZQdNTQ
TLSH
T10FD20A3B294CCF7E4F844E5CEC26AE976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b7acce17-82ea-47da-a74e-77a8843603c1\index-dir\temp-index
Size 2KB
SHA256 783bb1335ccb8d40d661875d6fa753158867f6b17cd713ec047dba82c1cd7467
MD5 064d21252e060616f1e92474a34c3e9c
SHA1 de7cd9a99de0ac5e797a7287e7a166a8fab75db8
SHA512 d6b05f9082c33f605b71466e9fb1bc1219d4f27358ffe5105e49080c21175a4fac509b09988cb03c50a97724a7f39e0a4e94be51adbef96ef4fd7d976d42cda7
TLSH
T1AD51A38CCD8057ADECB261FE1C9414B293B12C28FC58839181A4F2A238136681707AFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b7acce17-82ea-47da-a74e-77a8843603c1\index-dir\the-real-index
Size 2KB
SHA256 68d1c19ff4ea17625f68ce798b93671cef461d9ba3723c152413c5c8e8902caf
MD5 3bac6e3de34ced2f4f1634d1cb2b54bf
SHA1 e50447bca118ed8e2a70811f0d237579b11ff9d3
SHA512 dea9a7361150752e80fc9d8b80e248f20331b60c893d894a35634cf97ac5e9ec1e1418d4278ed33fa6bdf45395e0ed83d7dbff852d7a8e0c0b1675ad25beb562
TLSH
T12B51C54DCD8057EDCCB251FE1C8414B293B12C28FC6883D181A4F1A23413A6417076FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b7acce17-82ea-47da-a74e-77a8843603c1\index-dir\the-real-index
Size 2KB
SHA256 a272f57736e20b75cc8a6d40e7f44429bc8d97209129c90adfe8a64ff80fe4cf
MD5 88a6141429b6ede76afbf5d36e56b6cf
SHA1 81f4a3d4f6832379b8c356ed9a6b074cdfcab3d4
SHA512 1a94cfcaaaf7c3551898fb310d98c8ac37718ed85ad86319932af0bf4bbe4e4b06181aa7c8affdd37a047bf8085f0e4101a50d27622a946b7c6e90684883a055
TLSH
T13A41B34DC98067EDCCB062FF2D5825B243B12C28FC5CC3A250A4B6A23803AA417076FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588538.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b7acce17-82ea-47da-a74e-77a8843603c1\index-dir\the-real-index~RFe588538.TMP
Size 48B
SHA256 ad5c4fdc808bb295abf2faab238e76af34b5ec4c3ac535ee9249cc46708f6be0
MD5 fd3d0fa38d23280cb26206f810bbcd6c
SHA1 a6fd81417f773a3368708e2c6067f3d118a322a6
SHA512 b1ee3200a7c4ab564ffd761f13ff824b7726bf1444624c3b0583bb909e4b56648aa96aee028676318a17e07aedd1153a6504e11feb05155fab352d636ef908a9
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d616a205-5e22-4e79-9d2c-b2ab1b6b935f\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 172dec94af6588a98fb2dd9591af04e21728b23aec4e19674aae85bec796161e
MD5 6ea727fe99df42f0aca2e0ad5af0a680
SHA1 2aa4dc60f41268a1b90dd61fc2bd975dd9935c4d
SHA512 2ba6b516249dbde03398930d9b80d5f71c38242f2dfb650014ccad642caea48bfd33c377b85e36629bd8495c03fc5589a9330c3ca2c76f0cb560c2346b4400bf
TLSH
T118D022DA03318D6A6B71DAC8A839A18E852BCC05CCC2CCF8A800B142347C203C002A39
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 2c78ba48eb437b5d30ee96b16782b64c6a3e86200ea58e4b4377b98a3eda9747
MD5 a3680df6368656cd4c2a291209225093
SHA1 f1f0f68c950458ef8e6b1cd3a44b1ad2a1ae2d5d
SHA512 d1ce49d2b1dd6097b42474d8502a129e1d462d4f28253dbfee5f30d41dc4e81e05ce04a046b5ecedf70afe5755288754e6636f2766a17f0cbdc325e3bba46b04
TLSH
T11AD023DB17758D9B1B3095CD7435124C44175D05DDC7ECE8E808714631B4513E046733
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 283B
SHA256 55d93bd98e2bcd6585aedd22dbb278b2804f66cf5386c0e2c88d2408b34aa83b
MD5 6254e94ef9b86d997669813982a4049c
SHA1 f6b68522e3514a6ff0472b4ce4e565c9c725ae90
SHA512 239950dfaef7e60b8bf23edf0991ffa6cab28185f97da5643f839d79b2366a04099d1be3136613f08134964ffb20f55be3be8a174ab70a780c12552fae9405a5
TLSH
T186D02B9A5238495DEE738BCA7836748EEA69C85484C5DCAC9C4E618924B0507910BF3B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 ff733f72d749fc110ce3dd7e29488ad76536fdcb7976b956b95454e1cf3ffc30
MD5 438f5236b301e5fe9f5fbfb9f88fa7e2
SHA1 0919b1592b44cc18229e3006789f32a3dae96ee3
SHA512 715f9d3f433e902a343dfe91e1de876042ee2016604c1792c65a5e5960a774b3727dc9695e46c6a800ccc60108cca6911b983d3b4052439487dbd09ff1b5cf76
TLSH
T1B3C09BE717544A5E4F71DACC2439935DD90B8558CDC2DCF4A04451013434517D403A35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 2fcf81bb4bd5681369acd2b994ce67eb0e1b7c430640f3006a6a6cf50f925b1b
MD5 7c46496784b5e5d12c8d5ffd79a8e964
SHA1 1e59d4805278ff34d002cabe3d9f465ba94a1348
SHA512 b898db289bcecbb17a4f50c946662393c41a183f4e0ace9ac919cf505b30c23c211da34f1b8122a227bc398d1a13ad99bcf355b25a87d2976915bcb29241558e
TLSH
T1B9C09BE717544A9A4F71D6CC3439775DD90B8558CDC2DCF4E44851023174517D412A36
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 276B
SHA256 36395abb0ca59d7fb5b7f17887b71671d88bf4ed3be1727ae45ebb9291382ed3
MD5 bf0f63cc60835bba4b18fc3ba10d369d
SHA1 3e0ff25b236f0313b3e18738f96e3859aac3e08e
SHA512 82501897f063cefb19a224291ed481eb6fb3f2665cb1c1e038582bbea72e7c6722d7661625de36b81cefe941fbe35909530bdfeb47badd2ea85878ba5d3b12e6
TLSH
T14FD02B9A5228491DFE73CFC52836655EF7A980548485DCAC984951492870506504BF3B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 276B
SHA256 14509acfb844b0b5f43bcd4f0f3671a4cd812b5019c5fde396a39c829ae00bca
MD5 bf28ffc7717ce71cae059bb20d3c4437
SHA1 63fc0ea941b3b36a99c21e296cce7e1d113306a1
SHA512 b63dcab2da557daa8c3d42fd6483395e9c943debe01efbda4ce4173e47ec7a736b3033e9f6447a85021f4ccc400efa7ea598f6cbdb1e4fad51d746056a6efd0d
TLSH
T187D02B9A5628491DFE73CFC52836645EE76980548585DCAC984951492870506500BF3B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe585c06.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe585c06.TMP
Size 137B
SHA256 dc7af9a05b375dd8916f4d6ba759b0b32502d82b2cd5049c49faf68926f8aecd
MD5 9d7c4b428e69e7c2af4dafcb5ba0a48a
SHA1 a91a6a0c4fa64822ece419c942a31d183c4b6cd8
SHA512 9dcbba03b07d02ec7a19145fb62b8609e3d3be9a042686844f6f8065d358cf251dce59160fa99df891c82c74b2f5b2d91a8e6d3a7a4d8a5cac03cf9ee29cd8f4
TLSH
T135C09BE717544E5A4F7295C9243953DDD51B8C5C8DC2DCF4A04571413034517C406A35
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\temp-index
Size 3KB
SHA256 2e19bcdb8a57c5843d7b210fbeed4ff06b3e4c0957944ff24537934cc29e2c8b
MD5 13eedd9146cb8f859c4625190c581392
SHA1 159d4d66abfa7e1b949aff1b5ce7e338e8cb63f7
SHA512 e1bd0280b99d8b0722c416fb1c974417b886b82bd2894cd472cdfb38cc6904bd68a8878aa6b1a3d83d174a277f70a74ce68d9c593451b984c0db7e829a6e5eba
TLSH
T1CB51F88DCC810A56EDAC11B318FA248077B664DD96845F0BAECCB434BCC327E2C2B650
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 1KB
SHA256 8e57c87c264da21c87cd58c91ee50ee1a0d90366c02438ae74e30d7719e2ffee
MD5 239f455cc508a894af5ed9ba656f48e5
SHA1 143cae3c9a92a3f0426abf203c1e138a3b80d0fd
SHA512 9726099238b1bf4b073b6680193c8963a42609a1df0ceab5bfd66bd2347e0ae7f66cf27ca9649365c456b2f15393e7bb9af9779efd2f155d1d843f098edd0fb5
TLSH
T1DE314F8D8D84AD9FF89484B71473B8E8B37089CC4721E323587C22762E1238E1A4B1DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d3a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index~RFe59d3a2.TMP
Size 1KB
SHA256 30ac6838be351090ea9067b8a1e0d5eeae3c028f98963d7f5436e52c957b6f94
MD5 bd44259a6b3f6c8b59aa157d7a0e368a
SHA1 0bbff2fcd38c3c0baeda5ea77121a20ac6afeaba
SHA512 7c316aca5571b0b7727b671d813e9ab6a0e6d5762f396e83b26662009b7b0beee00197d37d6dce2ab85b17e8aa6df08fe056375290f61e4e1c4c6e82e8c35eed
TLSH
T1B631028A4A918D0BF884507B1D63B4B8733588405326B393A97C62399E21B8D1A4F0D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 47c9da0b66e451be13d81920cf7437a43206b4f05e38e12dab82784ba0ad2afc
MD5 1b835bee51677644c46b1faf72cbee7e
SHA1 47c7162f16bca08bcb2335a947492bc7a053b89d
SHA512 3c4c7b8607d189a844474b38893ef833cd1e08387e23ec8523903508fc45b8d0c6904bb94323435ce7a503c7cb76343a97f5a45f5803629a6b41555c76289396
TLSH
T13FA002240A947006C05296B279D6016222104AE88302232541A1414CE8E5F465B4D09C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\834819d4-20b9-424f-9271-71c3bb438301\index-dir\the-real-index
Size 72B
SHA256 4911ba20e3e627dea2c5bcc79967e269e9590c5778035b359b0b9b6898fcaad3
MD5 a40a4927d3ac80c5ae38043882342b5f
SHA1 d04794fd4550b7902ee86ee78359a6ccc10a31c0
SHA512 c67ecf41c9e6407e52f48e8b7d0617e997490eb24d01ba4ffc303ebaa443ed7122dcfe04acd835f82e69dc4c41ec8c84c7fb74a408f6b0b7ca288a59df6de13f
TLSH
T1BAA0025057805459D83225B129561A811300CA106204A70B40E114CACC524C44D4551C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 8e9690d5f929a84c0ee99e167dda649098f82a26886cc3bcf19f1e4357c18de8
MD5 7202cc01184edfc03902af4a1104555e
SHA1 ff69bda1c2566dade945a6ae750a073e6009672e
SHA512 5146cc3439fd5422912daf88b2f4975ff8556f953bf877a4b1bd5ef73c1878849cde0b13ab97cb267079bbc20f5c722dcf6e181281042c9172668a55c356f543
TLSH
T197E0D8F63DE73D20ACBF57E628B245A84146B4688955EC8E2416A2E751B12682416C61
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 6ab1a22306a775238f18569a46a2898c53b9d4d1b757b524adaa2bc3880aa65a
MD5 8d3475e597bfbeabbfe97e7ed4fb1f87
SHA1 805a8bcdf5a1c312f29bc501d8886366ca4f2649
SHA512 72a5f82ff8dbf636d3dc4f8f9c6172b30da65a8747f4eef89c34304b0f3cf1508ef7dc2fa4aeaa6b768c2c7e622b739ab25dbe600984e4a55b87585ce902dccb
TLSH
T141B0222ACE0CC00AC80A03BF28B280FC30380CEC830B0FB028AE80A0823A20000CA0A2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 c2913386768e1b783e50b2c2508f74c9eed604c88d66c93af79951eea1444c83
MD5 74792cceb0749701bbb3af4ec1e88bbf
SHA1 c825d883d159c00197df44ebc469d2d48fd34546
SHA512 e57363a37f964227c8e5d43d5fe23f2442bd7c2c0b35245c58dfbcab16db91a903b36baf6060929911fbc51d98923499f85aae73488019cafe65349e03e53f6e
TLSH
T199A002A589404051C45502FC288505CD321C68D51709870D41AEC49AFB68640654E042
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d8e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d8e6.TMP
Size 48B
SHA256 ad6c55edc37b175f0b487d4275d45a11ac02bdfb35e61318d358e2a9263e1aaf
MD5 b81190e89797e7a74dae8e32f7b316af
SHA1 fbe8b3e056df612644b32d533497e315df23a58b
SHA512 644df5f4c1e6a7149037840e3d4d278e5d34c8a17e7cbe67b7dece054a5de43b781616cbd839229fa05978e01906736f4d3b276c89052b0685db5be47a469a1b
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 85db05f43b3032921d264ed8f48a2c996c75dd3cd60c9197aa60d8920a7e1ed3
MD5 2c1190bf0d2968ac709f0b4fc7ba3919
SHA1 9e45f31225544ea7d80125aefccabb014c5f5258
SHA512 14c0b473d98801ce3ee644c28ca19a0da51a02f77624eeae0a553c0183ce0f668f003c19cc353ef9f2df74d9a461341aace78a6664e61766368397d752b13262
SSDEEP 48:KNOfCuD1IxKuEkDylrIBKsIMSENyuECixLO7sI0mxKd41kxR8h6TmiSyU:K41KKuE6mrmKsI3hiKyAK1
TLSH
T1C891368A71BF12213C7E395CA5D586174B417A637418E42BBBA910B20D6BE345CFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59304d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59304d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 33853a47219c832b1441274363651404fa1de33be73ad418c09036ceed09a34e
MD5 15ba9f291e6a545484709a6ab87aaa81
SHA1 35c1eac32ba792840d7400bf17ddd74709e094f7
SHA512 6cc9a5302abc93e96b6591c4dca5c6ced3f2ec37062d0289b8e3442b1a874b8cfcbc98559bb866f7e4c299a52c66031a07a516838fd111b70073a68e83e66d3d
SSDEEP 192:uhLsNrfQEio/ZEgHQmiU1SAEn14H/+jVSjzor9oHXLET1h5cFTZqaU8:usNrfYouK8Jqf+o8eHXoT1kFjU8
TLSH
T191321A326C68AC364DE2A645F48B36139FF8116BDA896F94D3FC5F1C04DE6AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 a709f1b0cf828d61f79ca99916d92b69af18b739b19273e71a59062847c8ba08
MD5 4ae281f72017169037ce67768012c294
SHA1 7f695ea838f322016df4a056a0457bbe10d60051
SHA512 e0940bca25dbce98f9eeab7d1ce15b4a1b03968f77776e623350267045f45479220e8ed22477c49cf6a5e6143d11acacecec60efe690cc5bf81edb696e548010
SSDEEP 384:RiFiZcIhzsN18TUNTUlIl6YouK8vqf+o8eHXoT12Fj3s:4FQRkwgHoivyx3oT1oj3s
TLSH
T1B7B208F248D7983AD9AE5B43E77D2D028EFCC067B5846A94B3E85A0CCC561BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fbb3bc5fdc661742be1d9f12ca86b30f42e487bc891ddf1c075387c1611ec390
MD5 adeb32c3ccde0abde6769a427b1c101d
SHA1 1fb254976177fba4f1230dff4173e28b41d6e80b
SHA512 2e1f9e10a9d4497a964e59b3de13a91fb37a02f370cee9ec2c8ae5cff411bdc272b26280733d1ff1416a7debe001b461abaf7faf3ff480e9615fdd267723d33c
SSDEEP 192:EONG6hZ0QmiUymopc/+jVSjzor9oZ5wOZFaU6:EONG6oOpu+o8eg2sU6
TLSH
T17202D8356D786C678EE2AE45F48726135FE8116BEE956F84D6F81B1C00D779C2303836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 ab101ebff44d4a0a4322fd0aecffd8c64651b0df79631aaba9c7169ec05b8c73
MD5 f81c8a38eaccf6fe5daa89250443ee79
SHA1 42ee39332393978c58cfe65184c1539ed6f96114
SHA512 8c242f6e40e7294629831911ba6410764008755f10caa0188d85785ed6799e524e558dea6760925766a53f711bb966fad096467829f9464b3b1352d43d6fbb78
SSDEEP 192:uhLsNrmAQEio/ZEgHQmiU1SAEn14H/+jVSjzor9oHXLET1h5cFTZqajqCJ:usNrVYouK8Jqf+o8eHXoT1kFj3J
TLSH
T161521A36AC68AC364DD2A645F48B36138FF8516B9AC92F94D7FC5F1C04DA6AC2307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e7208e657cb70d37699cd74bade99cae60630c11df4f3695641c51303bd9f9fd
MD5 249e83029ece2f332139e1e540c31118
SHA1 2d2e4596b89450c0f0507a47a9f9bec100f8499b
SHA512 a110b22ccc08aa76b7466af84ebac859cc6adf416572771f680d997ed57fa6713ada6e3c0f1f8b8acaaa648e3b98c4acbe1f58c055150ba7888d4db7f4cc8b32
SSDEEP 192:dONG6hZ8QmiUysbon2c/+jVSjzor9oHXLET1j5cOqZqaU6:dONG6o7M2u+o8eHXoT1e9jU6
TLSH
T1E812FA326968BC674DD26A45F48731139EE9512BDE857F84D6FC2F1C04DF6AC230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c0315e086f9bfae02afcf55bb681302c321c6f1b26d6d41ceb68ea3aa093d3f8
MD5 6069c35e76431db2fc20192bacf20063
SHA1 282e3d9489d3638e06b2b2d1dcfef251e42f366a
SHA512 9b0565c3e947a7ef4fc06c546e9e2cd6413f6e429e437ad756bf74d3e6500567fc4043fd27fbda137268a8d219ae194b0e99c1ad1fc1ff5bc71f22a3f3b698e6
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe59e361.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59e361.TMP
Size 392B
SHA256 8f0e33a48d6fb3d03a6786350d018116aebc30c60abb16e3aadc8d78e7b5ff33
MD5 856ec1ed0feab2b515f66e069fe8882e
SHA1 1926a16185c042db2e2934894e1e6a1f8fb1f361
SHA512 6dde95601ca4ff03d3560f9d461b22becc024505c95e7bfef7a39a5b7fd234ff75e888ffe2c10980db4622ac4d340af917bace8ffdc30678a469b18f1501f86e
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7844287a91ae95bbc82580c6acf52a72f50fdf98a8a5b7377c1aac1cae29df51
MD5 c64d9c6531253c013a33f69cf655af05
SHA1 654c6ed0ad710cc821827a04bdc7e33e95d5a631
SHA512 db630854f6e5e6ec802e4564780f3cc84c1ea1e516c04ee1814c26020cb441a4f2ed6c18716ab71ab9ebc70dd9f570ed04df2261cb6a28a36c61a5f04b2ebdc8
TLSH
T144410B58B6E95148B3B76F5A9BF2A46E887E7D772F07845E10110E8F0B22B40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download