hxxp://www[.]youtube[.]com%2F%40linacs2art

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.youtube.com%2F%40linacs2art
Sample260815-thbmvszbpc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5964	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312833967406901"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{3CBA50BC-EDC5-4FEB-A5ED-62E4B0DD13EF}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1014449518-1831897916-4205727055-1000\{2EB2587B-DEE0-4648-98A6-5FFE888752C1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3516	msedge.exe
3516	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe
2416	msedge.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 5708	2416	msedge.exe	90
PID 2416 wrote to memory of 3744	2416	msedge.exe	91
PID 2416 wrote to memory of 5964	2416	msedge.exe	93
PID 2416 wrote to memory of 3744	2416	msedge.exe	91
PID 2416 wrote to memory of 3744	2416	msedge.exe	91
PID 2416 wrote to memory of 4656	2416	msedge.exe	94
PID 2416 wrote to memory of 4656	2416	msedge.exe	94
PID 2416 wrote to memory of 1340	2416	msedge.exe	95
PID 2416 wrote to memory of 1340	2416	msedge.exe	95
PID 2416 wrote to memory of 1340	2416	msedge.exe	95
PID 2416 wrote to memory of 6684	2416	msedge.exe	96
PID 2416 wrote to memory of 6684	2416	msedge.exe	96
PID 2416 wrote to memory of 6684	2416	msedge.exe	96
PID 2416 wrote to memory of 4632	2416	msedge.exe	97
PID 2416 wrote to memory of 4632	2416	msedge.exe	97
PID 2416 wrote to memory of 1964	2416	msedge.exe	98
PID 2416 wrote to memory of 3172	2416	msedge.exe	99
PID 2416 wrote to memory of 1964	2416	msedge.exe	98
PID 2416 wrote to memory of 3172	2416	msedge.exe	99
PID 2416 wrote to memory of 6436	2416	msedge.exe	101
PID 2416 wrote to memory of 3560	2416	msedge.exe	104
PID 2416 wrote to memory of 3560	2416	msedge.exe	104
PID 2416 wrote to memory of 3560	2416	msedge.exe	104
PID 2416 wrote to memory of 2156	2416	msedge.exe	105
PID 2416 wrote to memory of 2156	2416	msedge.exe	105
PID 2416 wrote to memory of 2156	2416	msedge.exe	105
PID 2416 wrote to memory of 5300	2416	msedge.exe	106
PID 2416 wrote to memory of 5300	2416	msedge.exe	106
PID 2416 wrote to memory of 5300	2416	msedge.exe	106
PID 2416 wrote to memory of 4664	2416	msedge.exe	108
PID 2416 wrote to memory of 4840	2416	msedge.exe	109
PID 2416 wrote to memory of 6012	2416	msedge.exe	110
PID 2416 wrote to memory of 6048	2416	msedge.exe	111
PID 2416 wrote to memory of 6048	2416	msedge.exe	111
PID 2416 wrote to memory of 1936	2416	msedge.exe	112
PID 2416 wrote to memory of 3440	2416	msedge.exe	113
PID 2416 wrote to memory of 3440	2416	msedge.exe	113
PID 2416 wrote to memory of 3440	2416	msedge.exe	113
PID 2416 wrote to memory of 5440	2416	msedge.exe	114
PID 2416 wrote to memory of 5440	2416	msedge.exe	114
PID 2416 wrote to memory of 5440	2416	msedge.exe	114
PID 2416 wrote to memory of 5344	2416	msedge.exe	115
PID 2416 wrote to memory of 5344	2416	msedge.exe	115
PID 2416 wrote to memory of 936	2416	msedge.exe	117
PID 2416 wrote to memory of 936	2416	msedge.exe	117
PID 2416 wrote to memory of 936	2416	msedge.exe	117
PID 2416 wrote to memory of 6636	2416	msedge.exe	118
PID 2416 wrote to memory of 6636	2416	msedge.exe	118
PID 2416 wrote to memory of 6636	2416	msedge.exe	118
PID 2416 wrote to memory of 6720	2416	msedge.exe	119
PID 2416 wrote to memory of 6720	2416	msedge.exe	119
PID 2416 wrote to memory of 6720	2416	msedge.exe	119
PID 2416 wrote to memory of 3516	2416	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.youtube.com%2F%40linacs2art
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffbb620c188,0x7ffbb620c194,0x7ffbb620c1a0
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,2289347095914380684,3087536921593685884,262144 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:2
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,6988494286831164568,16479207476980772732,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,14958675717255916930,15968345373422995467,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:13
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3580,i,6720143868931309666,18115735894924562921,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,1265036879790868758,4325294026285635192,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:1
  2⤵
  PID:6684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,4599056135171717752,1885645626108874884,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,11354466453540975649,8200791811073556010,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,10907041112270206167,13796968331856433579,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:14
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,15172613312637195804,5962064666836049253,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,15172613312637195804,5962064666836049253,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
  2⤵
  PID:6436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6536,i,7100770423504896563,5113391744100469183,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5416,i,2253675262123860076,6829680901397075059,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6804,i,1262930263198900151,10989443218816674566,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,3730795199775673588,13341804848812379374,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,16019506601845148612,15683646796144517770,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:14
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,5113290159745610892,12491821900473111628,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:14
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7044,i,13901077530274120566,15270280505186140956,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:12
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2808,i,1302879854160630707,15139940313299183765,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7040,i,9958564106670595627,18239400358140889682,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7004,i,11458321228199065392,6541069657378315447,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,9174792416056753708,14846027982542842747,524288 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:14
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3756,i,7190529305153236301,8086604699536706426,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5824,i,8749273313287783439,12658351031653094589,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:6636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7776,i,7072783150299745461,11194143364254425200,2097152 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6828,i,7107563278065092746,1649863777067911195,262144 --field-trial-handle=2536,i,9892518539723890701,17172023568213335119,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3516

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e9e31f5fb014f6a7439a4e224bdae6d3d8b22db7c287d9c004b0184cc18e6bf8
MD5 00fe8112e1beaff1b09c3e772b0b70e6
SHA1 1d234f4d61d2fe0153bb63a7a246d37e6fc0aabe
SHA512 aaafc34862d38399e66858477aa9d3d624e9e071371fe2961aac0159845c41dbe1ed0ae62f8b9c52f327e4e4a97abdaf614ae741bcfd2627ec55b1d4f6fb6d74
TLSH
T1EAD08071B7286847D9551931D432CB017A57546365BAD1025160410C6C7BDB553CA155
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ba1406dd0117e6bb02a18e1f0ca40a20fdf33f68d611dcf6b59a242ae289374a
MD5 8a26ea5cde92773cb558eb116e113216
SHA1 2f807e9fd5e13c4ff550fceca7d90f11683ae33e
SHA512 dca9db1a71d0ad99193f78ee9f9221519b875eb1beb13ebfbd9d64a1b449eb8a027a5b2ceadf9158001b4548f036b26ed4f2c36ce3e8b981af5a54590c0e94a5
TLSH
T1B8D0C030B7286803D5141931D022CB007A17002321BBD1025160C00C2C3BCB163CA141
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 dee11464ab2110ac743759d395465301c215582f083831ffbd9a728a55b74ab7
MD5 eac95680becbfe80acf7e839b771b54d
SHA1 503a55b24a5de174d5222935cc5e6e4ec1cd2326
SHA512 10deaa4855877b2b29143d575f0084990a4fb010e9bff8ee7e0ed32633ca5bab21bf9827eae542252c74d285928d1959bec265014ca221d97b89f6ca9dd9eb15
TLSH
T1B2E02B59C920BC2719FC1B28A0544747E740132B3B40894F3B3C822D4FF073B4686C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 512KB
SHA256 0e169dfd532e84c92cc907faf5b74f77c485659a069564f3fb4df09db5d7d473
MD5 33b8b8aad927d1e6649e19fdaf5819b9
SHA1 a629d5a71aeb436d6ad8b959291088951921d7e8
SHA512 f4551060dda057d499f4a8e7270af0bbd24ffb0f69331198e4975c8c911464aecbc11cabbd8bcb9a99f9ef059bc432a931f92083646e0f435b41238e68baf851
SSDEEP 12288:bOS45uyruFRW8uJOyPmhmOW2QJUVtVpSi4ky:aLsyrmWJJHP92QJUnJ4k
TLSH
T195B423565F931C2FC7FF2232F19BECC35A51A2AC20C82D35FBC454AA619171A9B285C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 71KB
SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
MD5 8f850aaafc8da0df7f8f0a0b682a934b
SHA1 ef55df2e866abed76fe19b05ceb51c1147a6961f
SHA512 15160500824282d1e829908670dc7405abeb4d571ffdcf94532f55294fce77552c832f27fc14b91141ffd2aa142c441fd8e48df8e43cdbfe9283a043da2460dd
SSDEEP 1536:m4kLBYkMICj9ZBz3ff3Vpsrc6gy86ywUOWo3xmWVNKz/8A7yWuBKZS4PHS:elsr9Lrf3VGQ88hLoxPq/N7y0ZS4Py
TLSH
T14573F15242B8D90C1F6550E30BAA1EF1CD6B18CB94D4A0CCE8C7EF9DD259EAB4D66880
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 256KB
SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
MD5 be569398e0e595dd2f72e1bc4cb2e4c7
SHA1 a7a59eddb0ea2dacb98ff03113480327c1805c9c
SHA512 475d255ae27e373971a32efb3c28faaa9aba5e3b6790329c211e038d1258f84b826b88aed8c7451749a608dad9aa433b9454520314c20339fe6527872bb15f61
SSDEEP 6144:oxQsrSL1TgnPaBehiQ0tlOw49YjoCrT3:eQESLNMaBeGyS7
TLSH
T14644BDB4FBC3D782CB132BBDA43D3D374BA852C561D05A0744639D26A598B26E30727E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 256KB
SHA256 1a51a39a0181abb211af41600112378aa74b3c924fcb662ebd001a647233107d
MD5 455327b5819e32b79e98198399ec7a18
SHA1 43a90a3d3a2d989910edbf818393af1dcba2fe01
SHA512 f49ff3cce466d2e8a38cde077a149d342839f9531c9b4e801725e06bfe0cc01ba56d2c807cb14f584fa53b905616952a2029945bf808d110cdde5f3ffde80645
SSDEEP 3072:XUEGjRWiiI7+mJEpXj2xJZwVvWqRUXRf2QT3ScwuA63NonSznC3V:kvRb/6p2xJBmUXp2a3fztC3
TLSH
T1AF440250EF046AA2CE124BF4DC692F3359B551DB20D0AD0A8BB9DA107EC6193F70779B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 512KB
SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
MD5 063ce058cf92f6249d441c03c9dcddf1
SHA1 6237aa7a601d9500ac6bf6fb7ff57c64a936f9b0
SHA512 cd8f11170f42188e4a5334ae234c046ae722c3c2f7e3c5c428a04b3cc382fa0cdb160ec992db5a3af7dd968e428fa99475bd7375724bc501e4a86bebbbfa2df0
SSDEEP 12288:JqPcXea7AxraLRORPUdUxYUtrM3GS1fhQBcLLY1bKd:Jq6VQRPMUxBTSACo1G
TLSH
T135B4237717071097D53AB37022CA8BCEB7AF77BA4B01EF7629239744E2C8445F4AA490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 17KB
SHA256 6e06dc8c1cd97d04e6295968eaf0408082e0c9ca4e7b6eec1d1c5766f95b1cf3
MD5 53afcd7e089679643f25eae497ac6d3f
SHA1 e2307f4359cc17cbb6aa983e4e0e768745fb1a12
SHA512 99440d3d426eb3f4bea39452782c1155206f7664b6e346d90a73ed9419d2d597156f70276c06fc1edba98d73de5b9ab47442c40c9df4f9dddc5e8284e3160e72
SSDEEP 384:kqFUlfAU7x/RlltmpRJmGKmbCusb3XFn1EcoDDxp0VUPmQcY:2hmpR/p4F1EcoPxp0VSt
TLSH
T1C182D0E51834A08A489DCB54E9595F4CB93CEB2DCEC27A1A1C1DD88306EFA5032F215A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 32KB
SHA256 fd88a15e52c615b2c9ee7b345865effcfc5fffda1349d3778069e9d9a90eae83
MD5 2a89cabc5d3191c425e8914c1546ecdf
SHA1 711682dfc3a08fb688893725b8531d73e2d12a5d
SHA512 100d9d89a8301e39eacc71e60d8dc6291de903f1466a1940b8e830fd7f0ea4ff0f3c5b19aa06d5fdcf4a47b47072c9b2769605283230275cd7ea16115d7e4408
SSDEEP 768:o84UjVYnDODbF58vkzYiEnNuNV65s3mLaMDL4y3J1ulQ:oYjVY6Dbb8cgnNU01DLXv/
TLSH
T1F5E2F1937ACDBFED855881311094510A42E2139FCA05D9A0D0B4DEA2F759F7F892E8F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 18KB
SHA256 ad2483a56557a1ca259dccec7279591abc39b9565f3513c676384dfe060fde4b
MD5 15fac14dedb96ecf1077775671d31141
SHA1 58e8b251869ab8d9c32ea3c297d6f438eed16dcd
SHA512 8eb98407a0afba6b2aec5188883bd129d00e3559a6705e1b1843bd4cae9081a4faed6af5984a29f38f9c4a0cfd548ebe5f29f3aab6942c34e21dcf1e33c065aa
SSDEEP 384:1p/7GUPciEEd227+e8A/cMYIxK82an8b1LUFQVUGLbT46tBKdG8rD:37GUPDEEdlKe8AEs7zfQT3EqBK0Y
TLSH
T1F882D0B84EBC3B5673618B7E42C4B251A87668C30AE4AE38EB35DC337C125469D25353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 28KB
SHA256 ee551ec43471d0756315e43fb3bb4703406298d888d5dbf138af5cb14f0686ee
MD5 9cc5b98cab7972442c813266a471104f
SHA1 39e5313b07c6e396d7b7c20e7ede81304aab7f25
SHA512 8d098e2f1f53a88491353e02b1c145a0a4a4dbd63bfbc0800911c854885c962661a3b48d4cea81cacc1e318f0f709f0768d55d12fa9df96bc8005e553cddfe5d
SSDEEP 768:JJYI9AVeXScoOe7gE9JXwBOe8i+FT6xm1D7rd5OtDm4:zYIOO8fgO/i/m1BMH
TLSH
T153D2E14B06900C72BDB5DF890CDFB520AF64FD0950CA16C99277F180D92326EBDDD969
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 37KB
SHA256 300e962413f8345541869a9e3c6c31b14862a504babf1ae4cbfea6f4024ade97
MD5 69da7fd51c6f3ec332873543ba1a282e
SHA1 b40191557ea4417ef122096e2b030cc65f0d0257
SHA512 b699908bc5a92cbd2c4dca11732e054750a4d03c01256b307e2b1c1a73ef91316b46b4120f3d5e2cbaa012b2d330a30473f021e3f3e2055fc897810816dac913
SSDEEP 768:JzWMn2TlZBXORROvj/lhfcZOCnWhFDp1y1LjJCzrBDlJ:Jzj2lVvjaOOWrDp1aHQXBDn
TLSH
T13003F2F6772720F5A3F2C458CEA1481B69177A5B73406938E4E9131BFF27293B141A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 24KB
SHA256 38f2c23a3645bfe9ef28656201e01b35581591ea4206fb8eced93dd1f1916ad1
MD5 23a836afbf2db424eb00fd06a0d82312
SHA1 57639df09fba7c1dfa02723ee4d64e8e979fb8fa
SHA512 0ec6c75c4510b1518ecfebd07976c3c9eba9b4f97ede39f8b07706301a9bef3895b42858e8824190aa49161fa283b0bd01f2dd25fee90183ee79305ebdff2b8e
SSDEEP 768:ogBRtOhMxxcWA8JhxaKghP+uZG/TuWlE492eMsdqg:ocDOhMxx4glghWuZz492kqg
TLSH
T115B2E1F6294C308C0BBE7E676ED009F39A971625F0BC8C399299823BE71C5143DB5E95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 32KB
SHA256 dc32cb37e8421bbee8369d2c15cfbc7aab2e912d99f45136e4e3e3381f5ff151
MD5 c519f26cfec9e3c175a844ec3b7186fd
SHA1 df6b5b4a7286f7d6e576944bb975b1ca73e1ea4f
SHA512 9248dfd7857446e604406c9ffad348d70d9115d5b8b5b07f6217f2fd92e7620fbfa9557842080f33600fbbea48bc5333e84d0217fc08ba4ee7cb89b980a8e585
SSDEEP 768:t1FK/z143GPGgSyRbM05o7CSiQzCTp6G+IBmHtj4:5K/zZK+bMTGQLrXq
TLSH
T1AFE2F14C175FF6815DA681F9ABC0AAC53A43808752E09217842F7593DBDBD80BF36B13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
Size 37KB
SHA256 02d33af8bb52791cba23ef30c0bfbb79b44b83d615a64ccb61fbde7ed941b0fa
MD5 713aabf4754676ec94f3efa102761036
SHA1 8d7b260e726a33b1c0f47472f7c4e92c07321bf3
SHA512 743afb3f56ede28afd0dd98357dee19015508ea259d9b634f0943aa77bf8855d9776eb5944b3d33ac386b3053876b57e832c29a4cafce5d7b01c1c52361e6691
SSDEEP 768:zFcqSQSqHqWlPcsNA2VOw0ZpEaUxYrIRAiqUdS7f:zFcqCbAA2VoZCIiAiqn
TLSH
T14A03F206B152E00BF68D2F74C6C6A70A29B3959607D702B1156DE6385F3BB5F3C3086B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
Size 170KB
SHA256 9bd991b4260abd4a10ca062532165ab969afc90d4c65608d735cdd53aa5c69cc
MD5 53f52e05be4af4cdf5074314890ea05c
SHA1 01c4699dc3a1f953f82e7b58c8f1f99323c007e9
SHA512 a01c42156d5b0aac486dc897a0289d9081cedb50c2727ebb6c4b0abc090d55e33c3093c982090a55a6c8d571ab66bebc844b6e694b90b8f983ad74159d093b87
SSDEEP 3072:BEQGuKyc0kV9foucbLHve1eUAt3Qmr7+XRuwMtrit+tjkCVW7hKsN7mBMfBaAyi0:aQG1bV9gK1pAt3QmriI7tG8ttwhVhpDK
TLSH
T1DB041227EC53F454E0EA329E61176AC6E7B2738765AE0B69050997C90C0276CD3F1E8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000aa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
Size 194KB
SHA256 0469ca9acef22053122710d2c2f5b19c24a8d3626a66ae03e2636dd04362d924
MD5 1a252a0001bc489f837238c1a2ffb73a
SHA1 6432d6a84c26877887bd0e340ed88aa1461e980b
SHA512 7f541eb6ab122df5c3dd85e4169c910445db78a6945cf5ba7209f20c9006089c09a79232f4074b41aa8dff7850afbcda459a3cc5bd4e535277b0d18286052fb9
SSDEEP 6144:pG5NZ8MY1xsHs0LrKqgjaoVFcCNbmH8C4hyEkoy0J:pYNGMY1As0aqgjayhpmN45k/2
TLSH
T1C414227114DBA7E0636D5683144D3F47FAE2C606BE64EF6F442FE606C2C26622B01E8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 62KB
SHA256 6d2d9f747bf01179c5a79a32469e24dd8cb253f2ed24fcb8b2ad8471d17be97b
MD5 7d808b65afb700ceb13928a15f738036
SHA1 a8216c809ed8e0c9ec371a802bf196fe46f2e3ac
SHA512 b50d48bf16a1b1b4307facf1d169ee209c3657cab15e4c55c665c805e5b54e9459bafdf86ce1c9aeb346d9e7cf0daa9431449cbd2a2e62b667a55fc4c34fa82a
SSDEEP 1536:qYesm4oSR2Q7KPPl/GAfFomS3purjZu7JD4so9nX:qYeunkQuPuRu4JDvInX
TLSH
T1F153023EACE6D57277F929F55251801DC4ED1E857719ACF3F1000C8F8D8B2A2E256D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
Size 48KB
SHA256 68d0b7d3f9bd51273bac4f9a0718a49660dbec1cec2b4df0e89beb27caf5655c
MD5 2ce9d117cebdf8eb2981c148bd042cbb
SHA1 0881070d241972aaff59974e8ae0ecc2709c1788
SHA512 2581495cf67ca7340a8691dee909d86287e3fa4eb640151b48e9eee8b3078553b1d9feb789e799fd993060244859885f0149b774e4a3f67501af8c19e9209b0d
SSDEEP 768:hqPcUtEYPoMsXt2hcFEKXfY0ievCyeBp5an0rI0qdBsVT76iL0zyvX8XXSB+LbRv:AcuavgBpzBp5a00NbXBekySbRhmZ0
TLSH
T12B23F167989AC8300047F02AF3B62DFBC16EA5C5B0D53B42150DE40D5EC66BBEE5A13B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 42KB
SHA256 ec51367a6d0dcc890adbcdb02f1d3c377b2991813c79f60761c2c1fb72668f0d
MD5 2a09feb550d6a0ac533d18c784491b77
SHA1 38b4a51febbac87922537b1005783e73d0c436c0
SHA512 d14d80ecd69d1afccf7e073ea27635ac51732969a2a0b75564a18e43491d680e742b3de1d326eb45582aea1f8d9e366f16ee3d249af73e815b35a62c93963eea
SSDEEP 768:x/8w9XIVFCljZZQk0wN9Yz2GBWRyYwN1BLxYrB82u2:xpagGknNreWQdNHGO2u2
TLSH
T1F913D05E03F27F92DA29B07D52600BBA8317AF005289F2B764D45F1476896F9F2B7318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 77KB
SHA256 6e6c4f56c280f187337c19d500888fc011edcc0e56c52da860082abc5449676c
MD5 f2f9c2f848a3d3d3eeb2b19baa3fe4b1
SHA1 1f3a90238018b89ab1b01034502ac648f38e80ff
SHA512 c6e8d722225602820b3110f77a94ed741066c7eb72f73fad277fa4f243c25de6293cc1826f19b6c41a9be5ce54efef7c4b99eb6781adc41d35c994d797c1d4dc
SSDEEP 1536:6CdgfywTMXkstYCKUs+/4T8bGu8s8JsNUFr4/tAhXBS:6CdaqksKU1wT8z8s8JndZhXBS
TLSH
T1707302975F4C6A4CD13C42FEC25493098ABEADD5631ACC2BF421EA3247356F5CE8D988
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 16KB
SHA256 65c95b8c24d77789cd72e4389ea722638c9ee4805559504faa1e6cae0f2b8ba8
MD5 12a9dd12eacf03e107c4f82c2a4a26df
SHA1 17ab83954ebb6b9624b9d684c9576b8806721165
SHA512 7b45c6f67e7b899e9483eafa6757fa4476e0d841e84c1b44346a6bcfcb41dedd1f62d5a881967f3886f6979311042a21bccaed03b54ca1f78e657dba1c481feb
SSDEEP 384:QdyeUYsLj/JIX4bnfbCjhuG0lLh8JyM7l3VxGettGAw5wKgFclq:SyXLj/JIXluG6LeHBGShd
TLSH
T17772C090B0D063342891BB6431FA72DB178BD8452E67ED1CBC49DDDBD27B466EA402B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 18KB
SHA256 53c5971753a66562e7d2f9e186dd64b70d9ed4fe33562d6642e3751588dbe477
MD5 a7e1ba3f01b0047696e3ff18227ecd04
SHA1 73d20ce1e79861739516def4a6232ba3162b7402
SHA512 c3d111aeb0d0fd7a77bde889b2d51579b255115a53674ccafdbd74dd86694c7095317d5f7559e314fb6b40f65b7ed41df924ea812645b17184e0fff273493025
SSDEEP 384:iEzA4RI/04grbi+MNaGfD+K7FaEKN7OWQl2HO2BRLMyZyKcoawa00n:+4XXi+MNPL17G0WlLMBSawa08
TLSH
T19682BFEAFDC6FD21FCB8102A62159C08F0C5F10BF1C2A67E968610877F7F6466699924
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 20KB
SHA256 c11292c3ffcd2124d121e6bb00383dd1474e0c326c01f228a1f0884b296206c1
MD5 038517fd68a6841bc03d3cd7e5ca56d2
SHA1 3cba022eea44e835b1902a68f14ed5d8f7a58224
SHA512 3d10b7ce04f943fb16d56121982dd3c8702abca12ac4bef2daf0cb1e7c48d8a55f033935c0eca8d500abe90f55f891d5beb34613e351fd4c94be6de9a36f96c3
SSDEEP 384:iojnBsJkiHCbLFqqauR+ll+gZ9pfpxOeNTQttVwUMZFmveoME5+R2VfUgopTy8X:zBsWiikfuR+llRfpDtQsZQXMEcCUgqTt
TLSH
T1FB92D08948D2AE050ECE9C282CD15DF702731A38C5C3E878C85D9A4329FA1EEC5CC7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 17KB
SHA256 e5e010bb0e09978032adabac61496c031e017fedfc8a8f48e2d20ec8ad717fe8
MD5 8fb5cb2f37a4208d06f4f6a827a4505b
SHA1 e2e9e0ac92c220539cbb799cca874af2c24f0d8b
SHA512 47336c07fc46cdb9679343fb918e792c089c832014f6a47acba2b283b88139dc08fec99b290969104243be3a36180a2fcd9c92756ac1465e70842b9797941ef4
SSDEEP 384:iPkoma926kEm9sffEKe5tMkTiv7DIAhR/G:WEim9sfsKkMcCG
TLSH
T11E82C0266318AEB61076DC7FE86D450539E113A710163A30B5D903638FFA9698C7D38F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 16KB
SHA256 56dbfb551f3b4712f5f2281d92ba29eb8e8b74fe2d4ae2127f6946f0330f8775
MD5 594d5680989e3d63194ae3a7c5039643
SHA1 3596d780cc489ac467f112d13725a05babd05167
SHA512 7b294edf0685fe98aa48f34ce2345347ab84daceff35446f17f22e89bc5c01e2c41e253c1fd889e495a5e0ed52576862d42e401ee82a2d4f0deb2c2f62b030a3
SSDEEP 384:i2d9240+OWa3QEOuVArWTHARsElvEFuUgeDbXksjcYYY7xC1R/sbfr:bH240+OWrFqTQ1VeDlAY39CXQr
TLSH
T12172C04BA71EC49DA85DE2EF94924BB1090698AD0460F1012D7B7E0DBACE1D53D73FB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 19KB
SHA256 732df9abfc7c09813e56dc1d1f033468a14c5aa37ac6da8b9934c664a5ec6f78
MD5 35f660fa9ff79a5fec98f722e149bd3a
SHA1 ca12da2f4ade701299a25b22389a2ffc86ec18e7
SHA512 b4f7840028308a83dd5b7a4641476d384cad58d1fe18cd44cb57b45dc224e94322244e43e74dcef458855ea29ab967e9fa66bbf983a4c0fca1ef9617c27c31a8
SSDEEP 384:iYltWBlc/eMBySHFdDzwiTd41gRQwpBqJHyCeWgTd6cX+F4hK1NPrbesez:VltWBlc/esySldDzwQ41JYBsJqwNUK1a
TLSH
T1D492E1EED36B5880A518269498E62C1A3F37511B0C4BF3FA5CC2FCD687411652AFEDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 204KB
SHA256 176f041eb2d53813028df129ff32371d98076184083e265be30d7448fd212084
MD5 740209fd7f7d4306278b9247031e8cd7
SHA1 9cdf87de2deb78c9e156455247ba5935d031d5bd
SHA512 4645163ab3f30180c7075c9f43be7b3f5299b31af5c26463bc6c4fd265362b31dde57c2880f36feafa1b94b288c6dc443740f01852e13c78c39d3145a35580b6
SSDEEP 6144:7iKVNbfssWxd9WKbdJkfZHhoWVPtltX1r8+HmKlX9gJ:TV5DIpdJAJhnVPdFI
TLSH
T1A924223C3619207835863361F12FB4E907783CB7AAEAD16CE49D1F6E60499686166CF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 96016df0070120e2579f34a702448efea4d1a5d76b8b80796e3ff665b1d20d57
MD5 ea629f949064e79deb29cfc767915479
SHA1 2dea0871638690b0f879dc50b632db29fcd24dfc
SHA512 a035dce7359084170b9557aa6da0ce8c53180d4c12c7f5433ea5726bd4ec91b474a5c48dfbb4f2521c2082c41e8ef07b11224d7f1061dbfdbce9b5be7b944528
SSDEEP 96:S61YUuWCbzLRnAZPqrsJmne/m5eOOVW3TFr9GWZvdV:hRCbzTxeRY3TFnB
TLSH
T11BC1FBECD2C796D7FF5B347229929CF435EC60AB54062B5692486E39BC03E942DC2437
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0e67a143bbaa7ee6fd333a46b3dcf3d2a5d5986abc035de645dbf02d8074f903
MD5 fc36c09ae5ccbfd92d331cb9d84c2b23
SHA1 28b63beed2e72f158f9dc899187e7c72203c194d
SHA512 26c979fd925354ec4fece0a3dafae9055450c8823c290861a02822a0d74f5d203a82c2486f39cfc194e46b603f1a6dada6daadd4a783f25603a4c0b5f0b8ce6d
TLSH
T1B36132FD97DB1AD3F72864B269E598B839FCB4A61A475E1460006F3CD40AF047DD4117
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 533a78ae5276fe64c35c499f16d76aca870383e573581745d0c2ca79ee409875
MD5 bdb1b9d4041609874ea1805a274bd877
SHA1 2e25658d3e9676b00534092963d17cdf0a087327
SHA512 c9b39f3527efafc3f70f0f73f1444cec75a1b6c1c9e9a0ee64393f0f13d4343e3724744fe9b0e9077b896e1f4f74bb010d28f22de0e66f126ec12cd815b22600
SSDEEP 96:QfYExz+hoAZ+trdczvW/GJ2lYDc3TCkGBHwrHook:kbvWivYw3TsHJ
TLSH
T145C130ED86C359D7FB4B747129D79CF4B5FCA05655021B02A1946E3EA803E842CC23B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 181KB
SHA256 d24d93c7694ea33825597af9d37bca6e21be500fd329fb76640f673137d70046
MD5 6a377fd0d8ee0178a164bda94a9b25e6
SHA1 f5a8c50cb372428059972e7109f32b5fea933a36
SHA512 114e9b2fc627d49d1c6dd7414f2fe4d18220b5543610673cd583d5487cc29199bffecc0f606f59d5deb224f342304d6a05b82fb35bc4d60e583b960bd746acb7
SSDEEP 3072:7hX+oxxkiKMK+4eqnhc0ZWckwkUgj5pZfDQm/I/F+5csStQ8xkAgj5pZfDQL9/S:Lkdgj/ZfUF+WsSL3gj/ZfT
TLSH
T1DA04FC15626253CDF03FC3731A134D06E737AAC4A655B4AAB9A17B0D35F7B403A28B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 a5205a952db9057b9a9bd1110621eaf0182399f6772d91a3ecd0b064eca0780f
MD5 27ce1bc7cd2dd597dcdf9978b763c824
SHA1 9c34a0ebe4a6cecd4c42a7a2acbe59829a0324cf
SHA512 03029652d29ea11608f5dfbf19bda689a718acf1635c31643ebed016fa14d4878afc949aef263480cd39733aed8fe26fd46fccc45c09ad26c23797557a312547
TLSH
T1EEE0682888C9C16FA15461E754B47B0EA2A7771F96CCBD558E48C800B047448A06E180
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 e4056f42002d6b83e786955e441a6083af3a4363ef774f53ba4c73013d0fb547
MD5 fbffd2a8b2f88897d4666e9e290f67c8
SHA1 d709367307c644e1400d76f8144d706d1fc718b1
SHA512 1f72bcc2eb58c30fdf940c4a0b9680a878ab34052fd7d54821962291ac5287d3a1271270e2c3cc46cbb49edf342c78f0376ed73363364503ba97dd2360bec4b0
SSDEEP 192:D1bHZ+FistXAceK0dBaVZaij6R1iztJ8DGtc8Nrv9eTNyqjpdBjdQrjSqjM:D1bHZ+FistXAceK0dBaVZaiGR1iztJ83
TLSH
T11322DFF3C7E5822DE91256F0DA187F1BDE2D092483683C29C9D4AE4B93F5471E251B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 a4cd5051f05a325f6265a4b4c590b30739d223c450ba46e6b8f9636e41cd6814
MD5 08c015a337e9f7ead35be86f9fa7e441
SHA1 209fe28ba8f7ea9409bbbd7e722bd198f984b2b5
SHA512 f0cf7ff46a7822a94e9310e50117849f070c956cb2fe0181e2b6ab411df1900cbcd3689ee717093fff1908237f018d5058de0efbf9a5212b189abedfcfb286b2
SSDEEP 192:D1bHZ+FistXAceK0d5AGaVZaij6RrM8Nrv9eTNyqcdd7kcrJjdkqjl75JtyYG6Jd:D1bHZ+FistXAceK0d5AGaVZaiGRrM8Nx
TLSH
T10C32DEF3C7E5862DEA1256F09A187F1BDE1D092883583C1AC9D4AE4793F1872E251B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 25376bc7b6a4496ae13ffdd1dfe43995c9cd7babab6db345a78232ce791be61d
MD5 5116e3c686cf082f37b059db0fc1b854
SHA1 e52c1f895d80f5199f469d8db2cca224d4f6db5f
SHA512 a48cb085bfaf846bf0e58744ac8335a495a85907fd20dffb3ada45553efe1b439de1d7d9c96fae40c4de45b3aa0644ceaae9fb24e627d170c186500cf2713c36
SSDEEP 384:sxRSnetAl1/fcsLqpN/XauWX94/5DaJUamf2EdsGQVNZBu9I:sAwU1/feryuqW/5DOM2EdsGQVFu9I
TLSH
T16EA2F75669608D7BCDD7E619F961BF66D7BC1023D9805E48AAFCCA0C00EA7FD211281B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 af3c0b144e13b29b6a22d95b5e45cd9ad78ffeb5ddb80df1bff78069c84be046
MD5 5b04a10f13138a390529c721af21cdd1
SHA1 ca057a4ba48401b9c0cb5969b8157282add198c2
SHA512 1143fef8b71d6977e3ff87ce3c7abe825f066ea55b46d6bb635266af413afa6541c488850fd9195124b4537ec7b80806a56d7809ef6702d5225da159ff45a0c5
SSDEEP 384:sxRZAl1/fcsLqpN/hNUXMjI/5DdJ0/2JeEsGQVNZBu9I:sdU1/ferjMMs/5DK28EsGQVFu9I
TLSH
T14BA2E7065964897BCDDBE619F961BF66D7FC102399905E4CAAFCCE0C00EA7ED211281B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 07d2d64c36c6d58dc7b0b3f8ea70c25e21ee3665912f541b5ecf4464a6d281ba
MD5 b511d893b6f584d27392ac98e7a582d2
SHA1 573ef988197cf902a935c720380b83383eb09ebb
SHA512 1191470238b675db4df74fe8829ba7c276ae24956a19efbdc1defbf362befd16348dc878e2c902d67741fa5fe4bb5cd64132fdcbc321fcc192d246ed5e274465
SSDEEP 384:sxRkAcO1/fcsfLN//NUXMa+/5V/WnisGQVNjPu9I:sA41/fvhdMMl/5pWnisGQVZu9I
TLSH
T15382F7066924897BCCCBD619F965BF92D7FC1563D9505E4CAAFCCA0C04EA6EC211382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a4d4b6d728dfc7c536d3d6bcb19fad00638687f76418bbc84d9bf210e4905258
MD5 6f39294cf14ca60e275cfa7cc5358dd1
SHA1 20656405029fa7fa9cb6192130afd97c5fbdfec0
SHA512 c22d3054358983bd8c5a7a39c9e261ba1ef2eb198577010a99472ce441058e643759d9b93918b82c166c1c587eb5437c044cca436c27dbfc7511dad19230e500
SSDEEP 768:Ob4YATWg1NfwB8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBbDwzroT4z:Ob4YATWg1NfwBu1jasHwAUz
TLSH
T142C2EB2B244CCB7E4F844A9DAC29AED76DD801CB9B984D5447EB890C03C67FB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5c19a5c0-2f57-4728-9d26-85e67f5d7fc7\index-dir\temp-index
Size 2KB
SHA256 586358b37162963b97fd1a295a39f56de04a65641e332552896e898841890091
MD5 83073bc79679f2e13807dc3a48ab7b00
SHA1 3229c27135817bc4d4e3226bd75ec755b831e976
SHA512 1373df7924fc877d06aa3b2adc5df5db344a5edca0d3ea11886884d47c29ff819d8211cd5cf56e9d08169358b7b5e981d1248af7059dc6ba28163b4d740a54c8
TLSH
T13341754CCC80A79DEC75A0BE2E9414F557B52D38FC5CC2924194B1B538032A45B4B5FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1975.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5c19a5c0-2f57-4728-9d26-85e67f5d7fc7\index-dir\the-real-index~RFe5a1975.TMP
Size 48B
SHA256 1caffd18bd7b863cdc8f3a1dd60a8f61fdc76c60fdb17bf3611f58d1b3feb006
MD5 266234122e72411e938c43eb6cee88a0
SHA1 046c19e73018370a2816db62632a46de8b97bbc2
SHA512 93d381779dda26f3d016b58c736e393b328786fac24de74d8d83607d48f90df7a40fb438366fc677998194616c30378419002a742ba787eac41f0a964ab83e2d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 221B
SHA256 2bc0d3e770d1f23ec05fe77a8642de7ed4230c3d5c6147367f18f630b3a60af1
MD5 500c19fce6a760b580f11999749ac552
SHA1 36dfedead850d6357fde974e6d2c0b9f38e4c2b2
SHA512 66d4e98199626a75dce78201533c85b64ca7563d5550b6ed5d81ba4b42a8428ac2a53c8bbbe5abd60affc1b578eda7eb6a388400354c4208000a218440190b1e
TLSH
T1BFD023C6077109472F285B41503451CC647D8C14CC95CCF4A508745534BC913C017B35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 5b9012e39d0d3e484738e7fc2c85686f3d4d6cfc42a7cd093974238183b99902
MD5 62c94ecd96a69debbc3a1672877370a5
SHA1 1362298e2f1fc6269bf00e458d6e5303304d166c
SHA512 8aa5036d0623383e4ec5ada8d2f7ed184273a0920a1b6e716f4739d50a1f8f8bf1a554a24d3c8d04f8470106df1dfa0caa59b32aaa5a833447a853c032bd694f
TLSH
T153C09BD74530495B6F78EBC42038921DE55FC14888D1CDF4F10C500D24755634403E65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 a8e6db743f8aced1299fc8de5712458696db29bc04a0cdad5ce72fec92a21fb0
MD5 f70904a6ff48174530485bf18997d29f
SHA1 be70357ec5c90db29f7ef41a9cf6cbad7558b0ac
SHA512 b48e04973dad9d46fa236c14b5334719a1da51e2b30781fe29d4f285636d847d3b2d086c5c07f81f52f643aae8c49bab906669abd1e65cfa0edb57273f8e6237
TLSH
T11DC09BD7453049976F7CB7C4203C921DE55FC14898D1DDF4F50C500D21B56634403E65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59c605.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe59c605.TMP
Size 137B
SHA256 bc15640567a580e81daf12616a27b290b781d47e019e9b92950afa63e3f46095
MD5 0c8af5c1aca5b65e139dc0e08a86a618
SHA1 1f43828ceaaf786fe778cc72bd5a60643fd3add8
SHA512 0525bf6d7f5680d26638299aacaedbb9c83f27e45f582a2de310e6fcdcd94f9e021cc7dc04e15c89959aa56bd7ba8d452b5336249d5e45c8fac7859edb44e63a
TLSH
T16EC09BD7053049575F7566C55138924DE57FCD5888D1CDF4F10D701930755678503F65
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\146ced5f-83de-44cc-b09c-225831e00fe6\index-dir\temp-index
Size 1KB
SHA256 5f89e59c0bdcd069d5025a5b81436343fa3163e3a58656c33fc9aab6473e2f86
MD5 be2396aead5dd5a463ef1b6775a400f7
SHA1 9018114da314f2ed3bb58759ef30ad8794fd23a5
SHA512 335f5eb5a206690519f7b84905f24bdd1403546f24a9ac6c6b3562da4abfaed93add513ca0538946077d816e3d583dd38757c46c9fb72f13b4dede129530eab3
TLSH
T13E2190638CC2650FEC3B7877723910DA3B3A95EE1346EF8B242C71346D8AB2809A0204
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\146ced5f-83de-44cc-b09c-225831e00fe6\index-dir\the-real-index
Size 3KB
SHA256 3ec0bf6a2db7fe0043c416b84f67266e14c9d21cd466e4512af4962a9f6b290b
MD5 42647b525a9d0c2e90a3d639e3cdb1dd
SHA1 36b0594212a37afcbc02f195b0049e72d1293fdd
SHA512 db576a68b02916da3aaf4e5514eaf48b568d22e0f08bcc1d180589bafbc3f85455dddcc3f36cd14ef28009e6ebca8c731bbd05f9c53ffc9909a78b8dfe3a529c
TLSH
T15951E78E8C49196EC96D10B218FA088237752CEE6B899D076BADE230B8C333A1D15115
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595ba3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\146ced5f-83de-44cc-b09c-225831e00fe6\index-dir\the-real-index~RFe595ba3.TMP
Size 1KB
SHA256 829db50cd311328f66dcb80dd7f2489e5923cb4dd8262b20f4c4296c7be19a35
MD5 d89e32b260e0798688ce7e5685fa1433
SHA1 0598a4adc5fd8c1357adaf7476d1a4273e2166f9
SHA512 4d3c2b255b14d4f4af2e6bf3e0eb5c88dd453dfb8afb3271a1f11f8c1a31278ab389253a0a77a19d5d8341303036314afff785dbe8e45a365d9922f31eab678e
TLSH
T15421676380D2ED07ED3A60B5B30D00DEB73BD8353366D75B216E78781C567289DE1945
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17d79c9f-3248-4140-af14-eb8249adf66a\623cd082b6202da0_0
Size 61KB
SHA256 f434bf6ae21383c8d622acda7c867cffbddca3270a3fda6cc43d6de387638d55
MD5 546fc8e79e843016ddd957191e31bfdc
SHA1 6fa0976612dde59f3db1c8865c357406b72dffe2
SHA512 249e59732864206824e1178aeda41d49957d32d43b59d4d5356820d648a52feaba65b256828b187b01914be9a1915e5442201ca06cf254a902e66d57e65c058c
SSDEEP 1536:BS0ebL4JfCS+ksYyiApR+M0DpbarcjL3MFrF75HPwqpzGi/6RjRfRFC:s0s48bC6Rx0DNDE7/6RjRfRFC
TLSH
T1DF533BA7B262613587AC21D5A49A7F01F12B17461404C9ECF0BD76913B18E8B57B3BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17d79c9f-3248-4140-af14-eb8249adf66a\index-dir\the-real-index
Size 72B
SHA256 2c46f8b413a89fb91808c22eaf64f5228dbd0cd11dee2bda4725c4da46f1af6e
MD5 c5295ebe4a03592379b9010b9670fd1e
SHA1 60b1d76845f8e3ba590c4649e325593d5dba1a31
SHA512 6b0b1ab31123a6d80f5378f6ecb76a4dcf944e440aa7b33c9713bdec4312d109d3c2763c3a653e8c4e09bcca04b9d2949007a1068d1cb114ba4b7b9dd7e16159
TLSH
T141A0021803C04003D00A33F429DB117733108E20A6011309C594169ACC68569454319C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17d79c9f-3248-4140-af14-eb8249adf66a\index-dir\the-real-index
Size 72B
SHA256 0d530e00a787b585cbf9ba353d8de8a82fb247cc5c0dfd2abea2a7a65b9ae524
MD5 ecd6833d919dfc444f433206a07673d3
SHA1 691660ae828eebd874b314226bd0991147790d7a
SHA512 169c41021c151bef0f0c8dc093ab662950d88eb0f5ba5d8a5bdd9005b623098654865d0436b5c2d4e51283ac911378f0f1eedff3da03aece7f8b4c0336372f40
TLSH
T181A0021843D43006C01211B719D202A112808C906A42126688D1304CCCD0A414A8201D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17d79c9f-3248-4140-af14-eb8249adf66a\index-dir\the-real-index
Size 72B
SHA256 4f5afc771a546ee89dd76f1b45a5e2e6cb52429e792a5838a47551f3a992f84f
MD5 15e5c99dd47db63190204ca55085a07f
SHA1 29bc86f6c78298e263298adf11f0a220a7808bde
SHA512 9ace784c8313b730d2359f69326db33b5bc2ea50ff57655ec5e0dd6a7d14b8b18d35c7fd021c3916ec5ba93133e38016eab7945fc24bac3b95d495043c3b20a5
TLSH
T15FA0021802C50003C04622F465D605E333516E10A205239545905658DC55565956703D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\20057bf7-719e-4107-82c9-0bd0cf9d3e20\index-dir\the-real-index
Size 72B
SHA256 ca59a425546e070a48b06384428446597e8313326b33b5912a45987e6a4afa41
MD5 987a70b0f89f4c42d7c92c6faae6efb1
SHA1 388130931fc9cf911612d37b5381b0ce363be918
SHA512 b05b142e7b2a0f440946ce4987742521f34a39f4a330163ef1de60028128c0262a14aaf5077f348bbb3489177e3ecc2363bee1fe22ae927328458b3d166be298
TLSH
T1A7A0023001404201DC01DAF450D3558132759DA40253220557B0F074CCD5D81D926552
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b24da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\20057bf7-719e-4107-82c9-0bd0cf9d3e20\index-dir\the-real-index~RFe5b24da.TMP
Size 48B
SHA256 cb27380bced5f5c186e7569f2defab00cb61ebb42be219a20755ecd9c6a5c88a
MD5 afd371794c45f15d886ee19669a92b6f
SHA1 0a62252a0e2450fc44654f578a540d3a415c130c
SHA512 4073b6f7d628154092a563860d398cda87828aa22919ccfdede914db1d971c35f7beb6f5711ea9ce4ed409c7fb2772660e8060361daaa8451c7d84c3122ad086
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a6e24661-ed62-4313-8dd3-bd288ec52ecc\index-dir\the-real-index
Size 72B
SHA256 8c575f9f35ee9bd67d1e6d91b39165a02316a3b2e97e5c22262aa328d9d6164c
MD5 7485d9fc44822b15715c27c6c06fa621
SHA1 28ff0ddb174832823a878d9a1798f9d3af7db45a
SHA512 2cd0d0603fddcd620ba1d5944cb028b3f08abbbd1a373c7eb40100fdd6e7bc3f960871b4a2fd99e818420840ed3ddae88e784e24a043a717f8338015102402b0
TLSH
T1E5A0023402983241D50616B771C241B123145C960711532555D0056DC8E1BDC8612146
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 8a530f16ea26097f774ee055793069a8928783565fea893ed75ff8d5725acb4b
MD5 876dd2644f541001e2b41d2de331f70d
SHA1 ed4e7618732a523ea40a6a4811cb217157c6460e
SHA512 9ab5b534e24b52462e8fceff10a4bafda2a47c5bd77cd1d9531faa32e6bbbc4eb5d95571492a257b3f1874dddc3a5f52ef2e8b77b0e4f818018f3e243731d2f4
TLSH
T197E068F72FE33830FA6B53D2347194640506B89DC840EC8F402691C75072750249AC32
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 f862313a442293d7e481e312e48e0d6c478bca23624e9d5be2c38b6473a10ef9
MD5 2441093d6920af618dd331001afa40cc
SHA1 0f8b1af0585139e7b992a1403482679591d4de28
SHA512 e856287d800eaa94e6016fc9e7b45bab932c238c22b961f5348ca9d16d1cb9860647f63d12c976e98bdd4aafe33b25672e396a583347d5243952e73553595829
TLSH
T15EF027B73FE72824F9ABA3D27471546445197C5DC851EC8F0027B2879072715209EC32
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 0a29f12f1adbd779b5f9cc0d2aa4e93ae1a739485fe304bca305c3f6641bf7d5
MD5 20e6ac2d1aef53bc3678572b022436d9
SHA1 396f8c4b9d5c924aa46142752d15c6083f0d3912
SHA512 371cd4f1d7a29aa1eb2f673dd852273a6e1d606c7ac6fec0f2a9f0a0e70e755c36a16b722c1cdbce695ffa19447c55ff852e66a595c8517393f1faae2737cffe
TLSH
T1DDF05CB73FF72834F9ABE3D234715424450AB85DC860EC8F0067A2879072725209EC72
MD5 SHA1 SHA512 TLSH

Submit Download

f1cdccba37924bda_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Size 129KB
SHA256 9df8497bf3fe5d5a66ca97ccd8541d416ed8bdece4a8060105dd829a341a533c
MD5 9534bad7d506ba858f06b8f867a96627
SHA1 72d519715dba3a5130fc328dc0ae022906f11a88
SHA512 82475381908bd280433ae8b5f86a3b53decb7a824618af8971a059f665049817443597e597b14217a5e72aeff4fdcdd56dffb639a8de461d0655d3c46aa09b20
SSDEEP 3072:C4YQ9BQxPCx1BeaeNHyPL/uBO/VAx0gL/oL/AL/EL/zL/imJF5:C4YJlyPL/6OdAx0gL/oL/AL/EL/zL/i2
TLSH
T1BED39932769D50AB0E8ABA745156B50392BC7467B8449038F214A7FC25DBFB013FEEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 0b88baa36e3e0d9e217124e7824d83653636e82613f96ba1b171e0fd92bc8045
MD5 3df295039fa2aae2f217c77560d9d669
SHA1 28764d434c5d4943302d14d0721b7f22c6c1d825
SHA512 5e8224550dc1578f6561c53f5d2e90764c0c0e3551175f4112c985e6327b074210f499db44cf3e94b42f251169d352377630e62159de754b53a039cdb59a8c6c
TLSH
T115A00220AA4A9BD2D40D267050B6954173D04EDD020533034D98E1E8FCA718851CD752
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 956cfcbe7f47306596e2d2d31fd844237767a210893aa15882a2c71dd6cb9a7c
MD5 9113e23691219836f8eb13d9ba1499f1
SHA1 9d00a9c986222dfc2941c03e1a171384c092d65b
SHA512 89bb5dd0fbe39fa0b5b3f131c676ac0134035b7f7b6ef0b6706ce3d47c080f3442d6391eba53c87336782b143533353298ab8bda3ba38534bc4baef9e42c815d
TLSH
T106B022208C0EA2C2E80A23FCC0F880C8B2200CC80202220288ECE0F8EAB8A8032CF000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b646.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59b646.TMP
Size 48B
SHA256 717c269189f2cbdfa9cd62871e956e6fd2900fbd60faa296657b0aab79877a17
MD5 0bbbb6003a13c016beed7e35e77a765d
SHA1 4929b74d6f28ae7932b433f3c800713c6cbc2312
SHA512 c8922e946d50f97468c1d220d6e21530517db83c6fe094beec3bded55a5db77617fd026d549632ba055c546c178b5326fb2cf5848acec36dbeb434454509afbb
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 6dbc7e4e49890ce5f7810a3ef5afd56c11746cf70236c949bedc3971fb766773
MD5 ad9a544efb9413d3238633dc72f85927
SHA1 87476d90609f365cf3ae23924f58e6cd4bac52dc
SHA512 892cf675f1d9cbb460e4da619e3884c4e1a9402b533a332e76b9c6000cb20344cfeed4a73cf0f30e22278a3f7fc97fd5e606c115303bdd3af67f043ce1f3f76b
SSDEEP 384:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRPbIhJ9sfl:yv+Rp0nYrnhZZuJCXHnbB1S/HqlcDDRf
TLSH
T130B26E11713F42803C7EB90C81B8986F82C2B4637519E52F7B6846A65F67E039DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 2d7dd68292f9da4daa864956336829141b7433954e6521e4a01f76090fce8161
MD5 8175f91aa1c1da538064adf981b8f23b
SHA1 eadf327c4a29e19a9b3a686acb61e12644b27fe3
SHA512 20aba1a10a116dd714c06af1b1a096db14faa1a9c4261872d7cc297c5224599c7934417c6ab4f3a28fe2055cc9281e0fa62f0074478664fb0561ae2c468498b0
SSDEEP 384:nIiF1tNn/s3n9Sn8Ngm8TUNTUlIRiPvuTuWREqfbYGGpeKL9OObjI9G6w738LEEy:TF1j+9SXmwgUu7UGGr929MJ
TLSH
T1D4C24B32EC59CAB7EDEB8F99B74A7A46EEE01167849C59C8DAD85E0C00C71ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b97a6a40fbdea0204a7030e37247062a0a744f02ef2627a49c70518047b34905
MD5 ca9550a125e8a9312feaa0c6efa7509b
SHA1 8740bdea1bb5d27d0bdb22638b098e51bd278f8c
SHA512 6b464185ef2ad2c6c83044989485cbc5f272010c941c047eb568ac686a435430aa944dc32f20c2fb0645a64949a9660c5479fac95928956b814c78e862c6156e
SSDEEP 384:nPiF1tNn/s3n9Sn8NL58TUNTUlIRIT1vuTUSVEqfbYGGpe+DLytOg8LEEIz/qn:aF1j+9SQ5wgKuRgGGNcOEI
TLSH
T11EB22A32E8A5CAB7ECEA4FD9A30A7606DEE45153C4CC5AD4DAD95E0D00CB1ED430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 6b4f98d8d2ea049059669a435ee2fd076e9eefd89966663206fd410fd0fcdec1
MD5 7376850bfe4dc9f3c42addb45eab18a8
SHA1 de346045849485d50a50a8f791471351a5d47fd9
SHA512 3e074d443aa1362faa2931097a1841a2fd14d38a9e8d5859507326abd76869145451c922e344ac0b9e32ae0a4eca102b82cfb08454a8f4bc4d337877477f9382
SSDEEP 384:npiFiZcIz8NL58TUNTUlIRIT1vuTUg+2EqfbYGGpe+DLytOOOPrXLpe8C/ny8LE5:AFQzQ5wgKun+xGGNcOOi9Pf
TLSH
T17ED25B32E868CAB7ECEA9FD5A7497606DEF45153D5CC5AC8DAD89E0D00CB1AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2cc0b9c60113dbbd98d17edf5e6283fc228489341c5479ebf55f0aa509e26bbb
MD5 38db4700563115ceca2a7c801e2c6667
SHA1 f72e344fcd5bbbb91c75657bc810ef30346092d6
SHA512 63dce0e74962b9229c994f1839e46c085aa233c574929f70f9076abf8cfae45322d13deb65ea356d8eecc49d537891b9bd02ea670ffa7fa013503376aedcfa1c
SSDEEP 384:n7iFiZcIg8NL58TUNTUlIRIT1vuTUmpEqfbYGGpe+DLUZOOOPrXLpe8C/ny8LEE8:WFQgQ5wgKuFsGGNuOOi9Pf
TLSH
T194D24B32E868CAA7ECEA9FD5A7497606DEF45153D5CC5AC8DAD89E0D00CB1ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2086725d3095924c72000a7775c56610a0c65d337d8e3a5e520ddf1118c4a826
MD5 279f0bffaf2e731f43916bbf6e0e7065
SHA1 0754d1cfdbe426f5703725854bba6a4d18a5eb90
SHA512 a82307af715097b485c661e4286c84225a821055195792a2a5d68f8736e71367ae9ac23319a7656a1105bb861b3970e217664b1449de3b5c03e09948abdf5e32
SSDEEP 384:nZiF1tNn/s3n9Sn8Ng58TUNTUlIRiPvuTE0VEqfbYGGpe+DLykOOObjI9G6w7382:wF1j+9SX5wgUuzgGGN7O29MJ
TLSH
T14ED24B32E854CAB7EDEA4FE5B34A7646DEE05267C58C5AC8DAD85D0C00CB1ED4307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 eb09906ebe0a9f45fe77aba8132aa79e0c2cb13b1acb457a4f88a28ea0aa9049
MD5 063f923984bafbbc50f1eafc5488369b
SHA1 f5e82833f6bab7e28231cf0f7c307dc73505affd
SHA512 4601c4a16bf03a61a3a22f9987351cf0085871a820cfb288ed25888c47fbfe31f0c4d20c445d7d91b9dcbf44a0f8a1bebcde45fa4e01061e4a2b63e6bc5ba32d
SSDEEP 384:nPiFiZcI58NL58TUNTUlIRIT1vuTUSVEqfbYGGpe+DLytOOOPrXLpe8C/ny8LEE8:aFQ5Q5wgKuRgGGNcOOi9Pf
TLSH
T1EFD25B32E868CAA7ECEA9FD5A7497606DEF45153D5CC5AC8DAD89E0D00CB1AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4effcc950de61ad9f758450a1b45fa6941cad26b37a97b60d54a762c5d3b4496
MD5 0517a6f07e77f4323432a4eb01e0de06
SHA1 7ca0d3165f7f4050740098af3e4cb446f9ea7063
SHA512 f7d1d6ed643fc24dee9ab9cbb8fe5cd5b31d0f4b35045cb31f2978466f8abd3bf031743c5cc284aed0e5d53d517bfdd569a63692409534cc4f3d01da13f16fd3
TLSH
T15CE00203D30044BED07C0330005336345BE2C03061F14747AD0001943C473043D35FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9a7ad89ecda40a2df5cdc3a1a9f5bb881a3355af07919da26771352f432171ee
MD5 277650b0c2024a9bb9feaa2af3a3b80b
SHA1 f2b69c017ca9cd04dec915ef4d0b3b3bab5e369e
SHA512 c905717e43fb15ef1e3026d890e450576f1ab76291dfc4e344d906678e12063e04c7aea9abe786f0df69578f1a76626e6b6fd03a0eaeda1f43a988e8ef4a44e2
TLSH
T15EE0020253000456C0180330009337103BF1C02011A34747A91001A41C563003D21A41
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e3027ae972643770215c596a0728e5e37406340345d78d251b9e50dfd92c7599
MD5 d40b597c462a69ba7b3ae79d4bb0579a
SHA1 09a57917ad52200d0fc68021b00b04a0b374f787
SHA512 0f46463cbaa2252fc31b0359c142471f0fa57a6fcbaeedc0a4ae6fb8430d560a32652fa91e07bd334ee1526a764c2fda5c0b006f1fc322e7620ac9d3591de3c2
TLSH
T1E6E00202D300046AC06C0330005337201BE1C02051F14747A91001943C573043E35F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59e545.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59e545.TMP
Size 392B
SHA256 abfd6c9d9a9773e0a08fc8b441cbac37b60d5916474acd8a2b226370527b3229
MD5 b1ee4ad333616c4f4b160a02550ae220
SHA1 a08de4ad58dcc04061d7c5b83d9d90b595a2485b
SHA512 96133eab5c3517775b02d508d97eb8efcc1b129fb3e692d52860dcbde5a7e9a55bc542a4ac778e85cb3a6152ebf6e1c57f7ffd3ec163ddc8cfeb76d425116f0b
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 1e6c3b2cddc372a8d2aa7f9302b1dd6bf9b77b42000084a1bb2c1ea6cbf41deb
MD5 7df3a08b1c38584509e8aa277316ac17
SHA1 a2e2610090ba80d37f1cb595e4e7d3f26f634074
SHA512 ca407806aecbea7f692a796f1e5e13a3d25dab9f845aa8c1a6fa70f41cca4f0263b6400cfa6f76f5fd0287c6e376e5245658c2a110f8870de9cf5c32f61eb0c9
SSDEEP 96:pstJj3w6wPWk/szJr3gvawEevfdzJVugqzJru88fXzJnIuG:oNnp1VWfG532BI3
TLSH
T12522CD015FE91D16F2F7AAB259736210FF3ABD099A18CA1D0589450E0832F049A7DFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download