hxxps://mega[.]nz/file/YB4HVZra#2uT7VvPuzJsJ8adXrt2HotM8GTVBpQ6F2aK6ovUOsgw

Analysis

user interaction
yes
max time kernel
256s
max time network
259s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/08/2026, 09:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://mega.nz/file/YB4HVZra#2uT7VvPuzJsJ8adXrt2HotM8GTVBpQ6F2aK6ovUOsgw
Sample260818-lgwmmsgq21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5308	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315190681054325"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{177E013F-8848-4670-9498-E4F077E4AA79}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6112	msedge.exe
6112	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3976 wrote to memory of 5012	3976	msedge.exe	80
PID 3976 wrote to memory of 5308	3976	msedge.exe	81
PID 3976 wrote to memory of 5632	3976	msedge.exe	82
PID 3976 wrote to memory of 5632	3976	msedge.exe	82
PID 3976 wrote to memory of 5632	3976	msedge.exe	82
PID 3976 wrote to memory of 808	3976	msedge.exe	83
PID 3976 wrote to memory of 808	3976	msedge.exe	83
PID 3976 wrote to memory of 2496	3976	msedge.exe	85
PID 3976 wrote to memory of 2496	3976	msedge.exe	85
PID 3976 wrote to memory of 2496	3976	msedge.exe	85
PID 3976 wrote to memory of 5520	3976	msedge.exe	86
PID 3976 wrote to memory of 5520	3976	msedge.exe	86
PID 3976 wrote to memory of 5520	3976	msedge.exe	86
PID 3976 wrote to memory of 1268	3976	msedge.exe	88
PID 3976 wrote to memory of 1268	3976	msedge.exe	88
PID 3976 wrote to memory of 5484	3976	msedge.exe	89
PID 3976 wrote to memory of 5484	3976	msedge.exe	89
PID 3976 wrote to memory of 948	3976	msedge.exe	90
PID 3976 wrote to memory of 5676	3976	msedge.exe	92
PID 948 wrote to memory of 4820	948	msedge.exe	93
PID 3976 wrote to memory of 2112	3976	msedge.exe	96
PID 3976 wrote to memory of 2112	3976	msedge.exe	96
PID 3976 wrote to memory of 1380	3976	msedge.exe	97
PID 3976 wrote to memory of 1380	3976	msedge.exe	97
PID 3976 wrote to memory of 5020	3976	msedge.exe	98
PID 3976 wrote to memory of 4588	3976	msedge.exe	99
PID 3976 wrote to memory of 4592	3976	msedge.exe	100
PID 3976 wrote to memory of 2920	3976	msedge.exe	101
PID 3976 wrote to memory of 2920	3976	msedge.exe	101
PID 3976 wrote to memory of 6112	3976	msedge.exe	103
PID 3976 wrote to memory of 1684	3976	msedge.exe	106
PID 3976 wrote to memory of 1684	3976	msedge.exe	106

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mega.nz/file/YB4HVZra#2uT7VvPuzJsJ8adXrt2HotM8GTVBpQ6F2aK6ovUOsgw
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x24c,0x7fff2196c188,0x7fff2196c194,0x7fff2196c1a0
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,7119113414176095360,13427921063975890861,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,9632586629202199690,16617944258414994173,262144 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,2891334494117558025,12644776463929529927,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:13
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,9385799146494814326,6850780135251889382,2097152 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,4132280954985196035,16949923800484890067,2097152 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,12389834220087498073,16356845953309981975,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,6635944867048710003,17947085730859971102,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,3039997219531859930,15568638869285773775,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:948
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1140
    3⤵
    PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,11304574549924302904,4518687070552748875,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,11304574549924302904,4518687070552748875,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,6599937580115802895,8164210399669026552,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,7456650807847118002,15418564986493441747,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:12
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,4279434640077970018,11312472059913884363,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:14
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6668,i,13476978904515393576,5603105946470319022,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,10546750528032404234,17958351896967150918,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:14
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,6267279365301906574,4760987099305199141,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:14
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,12228806947029046692,12395062922222395258,262144 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,12576482676821278974,14015705520376328451,524288 --field-trial-handle=2200,i,2513570117171069514,11443635670962530100,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:14
  2⤵
  PID:1684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4432

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -lc WATCHDOG WATCHDOG-20260818-0533.dmp
1⤵
PID:3812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c17dc8315075bb661bddf6b1efa879b9a3c39af13982f986bd287f5bc861cbdf
MD5 9573474710d1de6302a0d98890d2faae
SHA1 618b9f2079a97625be399f6137e46655659ecff9
SHA512 a345b915a4191d30d0da665ea4f78297c0cd671a5767e05c415403efb649110868fb279d22dc496792452c325e19b00f5e579f6e014a4488c9a4d6fac83d1c46
TLSH
T118D012273B0DB054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5eb4869923edec919f2618524d2fca4f384a1735c14613a67389a334724f8171
MD5 2d5fa21c8f4bfc67b00b711b7836dad6
SHA1 760353eb2fe92103db22bc9673cb821c7f2f0084
SHA512 95c350faa258fe6a17558c0b776fd3ff8fea4ea5b832004f38a607ee92ec9f0024423cc36619b539f492fbd60b331b3b9d3a7fc16d85e5aa0927421b825d66ea
TLSH
T1D0614E1109730096E7B10ABDE5C20E013472F3B68A674EBB38DC8875E722B615B7A407
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\p\00\00000000
Size 4.5MB
SHA256 a89a8eee3d19955e1437b1f723ab0ccdc774ee302454a8e5b51729c0c450b5f6
MD5 da2fe2a2e02ef6fac0c929f652f22bf7
SHA1 a36f3129edc80a59b61746c915b75b34cdfe2f8e
SHA512 ad29ebefc1cc21a3f526b6fa12b093e58c78b9347aed4fe254012474a9102ffacbb9c347514fbb60f76f1d3f13a3f0b16b6e9935823d49201a0c5ddf2e79a7ec
SSDEEP 98304:Y3HhXyAMVITuisWsUkfSzCMtWKlrhVsAqQXElaUxTqeoJgT97b:Y3BgVyfopfECsWKlr1XEoUxzoiTtb
TLSH
T18B2633CFFADA20224F5A8D2D9611A3A904C6CAD4E706C9DFEF8C0F545674B1F78A42D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\000003.log
Size 8KB
SHA256 fa00cec249740736d2336146ae7f4074cec0d229acb0890726cdabcccd8f4aa3
MD5 2ccb57d18f2f51eca1cd4eb119ccf466
SHA1 8e3fda6b72fde9655be3d85beb42d8de811d8a3b
SHA512 3de48158d3c99af18e0891d35a733e19b0b9ae985eb4714a4781ef6886c53a00b53bf3e58ca398f7a9c1b7033d68479fc17705aa16078dc48d78fb764ecaaff4
SSDEEP 192:OTNFIq+12ys1dbBa1iyRf11RD1S6mh1sIn1EcO4F1e47:tqWvgdNi7Rt1RBSbTsI1/RHeO
TLSH
T1ED127ABB76446E17E02559B52F630F94537A6EA0FC44952AF0C5B3FCD1BC984DF201A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000004.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\000004.log
Size 421KB
SHA256 3d8e1cf925e66c213c0eb1a1a3350245a93f7ae850724df7bc4ae4f9ae784a63
MD5 c80c646372bdd81971da6ee86a4d4158
SHA1 72176502d675176a3493ba75e767e1e3aac5b901
SHA512 f0c411cad7de4c1b0517baa2913027ef1db12ea798f4e3d07b2e0a5390049a92015333971a7f88bcbbb87789713cd45576512114a68dd7c3452cf47b57b2d72a
SSDEEP 12288:y5ccnP+ceMccM0cc9PncruccBHccgPcYk:6
TLSH
T1A99480F1FC969E196F88AC643A73A46278F6DDB171AC7C9CE00506E2107C21ED79853E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\000005.ldb
Size 2.8MB
SHA256 aff76520bf105e7f4e5026e8d4ffe3632b11814dc666a1e259dc2b1cc13c9961
MD5 0de7425c8fe61fdee767cdef404d0b0e
SHA1 e08358069cd67dfb68e7a8965a54d813fc882316
SHA512 e5225887b3b041e2d3805bae1843ff4e5577ffc0f325ac47e856461aadc570eae828634587a2247f26c9ccc727e7e5ee7e17054a019c444ea4dbc1719bbd0daa
SSDEEP 49152:FyfntEs5WER8ktAbKFUiNocJm4dSJtNRo+2wWAUzfZdd/25ch4a+yr2MS7r7OHlE:v
TLSH
T1B7D5BF7ED1136003815C8B9F5A1E6009C65A82799EA996FB211BC7AD3337C7D9AFC370
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000007.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\000007.log
Size 464KB
SHA256 4ff62ae1dfcb2378385bf05a2155770c6fe9cb0c7bef38719141a67bf50be999
MD5 3c6eddac70d0e4fd3601ad6e4127749e
SHA1 3adce921948974f7d36a3bc15a50eae707141a5d
SHA512 6e0703dccce3f905301b5ae499e78fd2e4dc1d8de7bb1d357fd3a69b7548a17cee32ebd6cf2a6b2a0d9f62b118bb9feb33f57a699ace78999bbe64cc8903230d
SSDEEP 12288:GKxM4+7Kx04+rKVRg+aK3R4+FKxj4+XKxc4+IKx54+fK2R/+B:GK8KWKIK5K3K5KRKT
TLSH
T1B3A4CF3AD1566003F25D4F8E76597000430A577199A852BF161BF27C233ADBEAAFE3B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\000008.ldb
Size 3.9MB
SHA256 bcca591b27209715a6ab51b9fbdb829623d753abfaebb1acb012cc01689cde42
MD5 1c8a075fc44fcafa1700c9f52cf9a00c
SHA1 26b47847c082b37da81474660dbe3a6eb5700478
SHA512 699da1069efa767409aaee8fca88a2a0a071354c81d377b043b9c26e53fcdc567b35c1ee004ba20e3f634aba888e43d9a0fa33215f0d8cd578fb216b5255a625
SSDEEP 49152:B1UKMQsh8TAE2+b6EznkcCm2ijzS7uxXcUd5EuSbkynq0D+OQjvmWIHv/Ash22mM:4
TLSH
T11616CF7AD1566403B21D8B9E76597000834A577199A852FF021FF26C233BD7EAAFE370
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 553c2063c4549021d5c167ac37eadb4d337096ce379123d15e97bf731e85f9a5
MD5 51c879b1dfce12f881145a5749eee0a0
SHA1 4eb16f3c46c989f5eb6351a09217a0b39ac4c986
SHA512 c544655d8773ec91f0105139ed2e94990aa724cfcdb27e1822def2d50aab6e0ce16f7d7dae4865ae766ce85454722e05f04525f77cbf793a4b6b0d49ea8bf6df
TLSH
T1EAE02B5478CDC51F7E58215382687B48D29B3ACBD789BD822FC0CC28B645050A5BF150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 335a44cfe3f0f0bda91c0a86bcf73593639c0ac023359632844ac6c2cd486d62
MD5 f710fb7701dc398b4d14697ffb45efe9
SHA1 1e0f63c1e58b4f193cb06adaedba530fd48490bf
SHA512 1c51ae023be6f99d00430defaa2c9763e77afba66eea706742ea7ec6f51bf5e54804597fad4187beffd32af9e1a71d3a2af58e628350eda3e0ca94cd8c65cd21
TLSH
T1FEE02B5494DDC91F6E682143432C6748D29736CAD789BC423B80C514768A050A1EF151
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 6f8d1e1ad00b98e9a84964549d876e69aeeaf8cefbbdc7565796035c87aed94a
MD5 32230a17d65848e622c00811bbff483d
SHA1 934a90f301d5f93b017c4389b858b8f5d1cb415b
SHA512 60f1e4b47a3de755d75e1a874253ec882c61f26fff29b272ff500169a48bcf30e607352a782c2922b268a299eceac18a72f5e0de4023c43ec000d9c664a69efd
TLSH
T130E02BB054CDC51F5D7411435238B78CE2937ECBD789FC521F94C4547943064A59B250
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 6274ac1c6472a8b0cce561f29853a4f6784cc6edfddd1036b9d769ae26d23e9b
MD5 d2b4cc2b8a189275bd4163e293a78cad
SHA1 ae95f8b905d2d2f34c6c760ed46884b3b2477c49
SHA512 38247012a4d4c36fca99429a80b29ca71ec0d7e18fa490aaab567409ea7237a3e333c3af3e4ab70ac311e938d9da948d22813e0d8189845b9678750241556f15
TLSH
T101E02B6495CDC21F59E421835235B74CE393368BE789BC826B82C8A4B646054E19B150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 efe1b609b8f48a9eff9cbce10717d2916b4d22fcba27b3d3e9b95e19cc5015d2
MD5 62bc2f6b8be5a531e58b7d02d005998b
SHA1 03ea19720a11e9dd3ba0b6c1ea014d053caa496b
SHA512 86cc4d4f2e26d7a0231c96b2e383f90b1098a9cff4fc32037e733b81a1db40688832ecc196f6d8b30d00b8261875710c526f3c1072d3beec991797db66d8dc1b
TLSH
T187E02B5464CEC59F6A6415534334BB8CD293768FE78ABC425B80C454B682064A5AF350
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 d968209d65657fe68dfa9a0f12692d2b1dc4c3098ecd8de7d98bba3de8b43814
MD5 78f15a097f3305090b725a776eec43a6
SHA1 b21b184bcee85dcfa9fe366f7c11a04dcdb080e5
SHA512 843fd0742abd8c5164ad9e3d9761c17fe42383d4d5755f79eda24db0c55076f4b2f1a703ce4b775e05a14c574b380ae2f355d1156d5f324d2331902cc70659e3
TLSH
T188E02B6454CDC17F5D7492834239B74CD2A3768AD78DBC465B91C8A87542054A1DB150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 543B
SHA256 2eb13775dea8279620224e21220a6b6471348f2420757ed5b341ebe6cb15bddc
MD5 6caf32e0e17b435e966410ebdee60b1f
SHA1 0e018319e8bdbe718869cfad1e6e0f9eaabf03f0
SHA512 5ba0b13d5a1750ff864239a99920d0956ed2bb1f78dc6474a01414bd9e1fb6c0c38aa896fdb08194a499e7743018f1347f225ca899ee50ac761a43fabaacba03
TLSH
T119F0A6582ACC819B1E66128390A6BB08C0533AC9EB0AF8D33BD4E29C6502010A6BF4A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 6892620ead6f8e627a0e2e3c6f9df982ef464d57aab8e5d2c56b9b9ff7068d29
MD5 1b30ca553f3894fab7c41ab048278589
SHA1 74cdd3956f73ade64180fc4bf9d92c89bf7e365c
SHA512 aadd4590343a1eb62c24b762052416a03e3811ffff6fbd077cb267e5e5f617b01e9c5d8f3e49e5839cb2cef0712e90c0d7be13c6e84db9685f322f5a921e5ae0
TLSH
T199E0AB1444CCC11F5DB01183423AB74DC293368ED3CDBC925F95C4D47182114A0AB050
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 f4550b8c2e4c2402707a7aecbcecd29b356142dd8ba65e286bb26164746c57dc
MD5 0aec97c56a8060587dbde4cbefe5f5e8
SHA1 8a7af9b33a2752339bab626b1dbca33aa9b67038
SHA512 63c80a340eab5f1d0ed3810cd400291298c51bd7ddae7384acc56b31631ce96ed476fc376958e0ddbd52b305963eb01773afbd9072be98212339c11e7262b793
TLSH
T1B8E02B6C58CDC11F69A411576236BB4CD2D3368BD78EFC532B81C494B583058E99B350
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 36d3932cbd1130e6475ad603598fef1ce1e305df6f9806fb86bf6034a6b06fd8
MD5 ce2ed2ff609f597c3661743564954cd8
SHA1 a3455c34f2cfde49afcc35708fada90eb0a6506e
SHA512 ddf180c186ca652367e4d3ab881f1eb419e2946968edbccec02fa4342603595a91307b281e979095cb12889126a308ea5b286bda68ebcb5be048280864cc486e
TLSH
T15AE02B609CCDC11F6DB411978238FF8CD293368ED799BC461B84D454B546090F2DF150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 cd10a3aba165473a089fb52b7a28c8447600226176d8cef4c4a0062832088132
MD5 bf43d2f39db0de51558a429c4b026e8d
SHA1 e8f5cdccae413c8772bd587922705caf63dff8d4
SHA512 00b818182372eabfefdefb837ee989728b3b588e784965deb845944f4b7da47589a4e6fb63276025916e0e78ab088aa11da206c81630af4d5ec04f99e6e27472
TLSH
T1DCE0617855CDC22F5D7411834638F78CD29376CEE789BD522B94C554B542050F2BF5A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 c54dcd338877a15195de5fa2f10b3234d0b6dc52f63b6202a4a9e7bfaa21f37f
MD5 bf5ffc922530b8538b95ff299355f055
SHA1 8884a763276c174218c6bfba7e062d1bad0e7a11
SHA512 d1b3862f564bd61078477bd3095749888292400f4979d25745581f22fa76a6e2d9c0b67d7a14327ef8d625f1a711491a4a2c18add73cd9a1966a6e12c61cbc77
TLSH
T197E02B9054CDC11F7A6412934334BB4DD293378ED789BD431B80C498B543454B5FF150
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 e7c88579f734401ba1a693a8c14598f74468edeaf81dde80a6675debe031d31b
MD5 cf1485561485512f1c054c35fba576b5
SHA1 d15630269b71fd3b2fd11d9b6b8cdb16e1f50b6b
SHA512 06cd3b324ad04152c275a50aee85c30eb6b9422b675870427b670cd7b720eee9a0d7ca888ed1b49be38f6e742d9a08dc1516c0c9f8440ff8951271a6079739ba
TLSH
T105E0F13C44CCC51F7AA8110341687B4CD69737CBD38AFD423B80C824B286020F09F380
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 e85ff8557e6e6aaf53e9eef50dbdb22acd4d7f74b26296b267cf7c39096c0544
MD5 4cd669323c852f8cd8d50a1a9867515d
SHA1 2fb360b7ff99f7baeae6567bb89ccbd1f95263f7
SHA512 bbf9e775d76248f2bbce80d80d53b2b9184cb066706b0531d8607e9ab57ef86429791384c4b82c720e33c372cb1a131cbf084a574669ef0feeacc1d63b50067c
TLSH
T1EBE0226C58CDC21F6E6421936234BB8DD2A3368FE78ABC826B80C898B543064B1EF550
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 543B
SHA256 017d47a13ff8d475c764808563eb43c44b3e215480b6785a58b930f8fbefbacc
MD5 a9c813993a35b874a37a75e9f8433a6e
SHA1 289c4ad03512ad8dfad1bd43c04904649716142c
SHA512 4bbdbc694b3eb696cd07aa833f21a0015c34db21212119169bb34013cc679ffeeac36ff95c1c544a254479aca02eba1eb0ba1df88fa12422751b8a07d5a5df98
TLSH
T1E6F04CB595DC856E5EB06343D132F78CF153768AB749F8923BE4D1AC664D460909B090
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 1f4e0ae82a5f908b2c67bf92abc009bfdad048b603ec51e42b3a26218516453b
MD5 2268083aba2d18617023f34295fee36c
SHA1 fcb860c53eb54c4274414bce1fc4c218831bae63
SHA512 5adae498cb912b3caf51d82b4ae818aa28f191143a79b8c336d8395610cd15cc2948ad4958c80667663c363f04366d4cdd0f0de3a61edc8cd520cad2bb8af0ca
TLSH
T1FCE02B9458CDC11F6D6411934334BBCCD293368BD789BD422BC0C958B542060E69B660
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG
Size 378B
SHA256 c6496d20e245b0c48f2c65917bb868423ab3f98379f1f22cc2840e138b325bcb
MD5 e32a2b62b2f2edb508670bdd22025dd4
SHA1 59a6186c4248fb5e7244c251d9769c321e3d3bfd
SHA512 ed243ca996903cebce67f8cb8433790d54f01465cb4a6e684c726d32412b7d960d3ccc9eb044532c1920e77fb71dffe7301f738f8b15563782676ed0a3022518
TLSH
T1BDE0E59099CD811F69641153C225EB4CD293368ED789B9421B81C4D4B586468F2DF660
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old
Size 337B
SHA256 9c7cedc6e0a794838c409b0cfd2462529b3042f743c4792541bc152ae022d3fe
MD5 0415b7d028d8c5e67fb94d58d4ccfef7
SHA1 22cfd173e8a9c0330fa9dda545733083eadc3403
SHA512 a69e544772a2a6809580cec2a4862e0d4ecfb87ff86dad0d5984d0d6a43adec354e8a1617acc26a027cbe50f256751f1f13c525a0882313b40085fd66f76fce9
TLSH
T1C9E0C01484C8C22F265811D35024FF4DD9AB31CED787BD431FC4D9187546154F0BF140
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old
Size 378B
SHA256 1ee00ac087e9a243c69553ff627f35e61c68fbc22cfb9f48653ffa9de176e054
MD5 6e8f96f8df16b8d5868e69c3d6d0edb7
SHA1 d68892be6cdc8472e9c819133aadd24914a0a5a2
SHA512 646d3d38a76d8e6f26b55268beb22605460ac17aa24b29ce4e6189133214bedecaa6d87770f500e6a18cc8ccfd9bdaf28d6fb98c285929f0f2e9a6426c09be46
TLSH
T101E02B9094CDC11F69A41193CE34FB8CE293368FD78DBD866B80C454B583054F1EF190
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 185B
SHA256 72a98254d98bd70653e72ec2eef725afdc760710f2de789fb589856007a08020
MD5 d22c6c9bbf0d75695a46dd8407317a70
SHA1 74cc3e7192290a55a0e00e75c81046186832af95
SHA512 8a8baca7f165baa87c279fdd5d8d3b619bd19039cf3098515ccbd15fab2b56737f040c812b6144901d2053b2a4654f0e9a054c92d7186c85f3cdd9239c60514f
TLSH
T1C8C012395B3A1C95F2364DB019BA0954C35606444401E78331AC56642020341AD8909D
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 103B
SHA256 14d6f89669b52b2956b6200bca22ce795f13a277ddfae0e382fc0890dd04ab03
MD5 3994b1108b9ad675442cd517168c33f7
SHA1 b84c69fb867f69683d13596b934ae8086fd7038f
SHA512 3e851ae243a599e89461f03d660a57dca64021ade8984673dbc8b1045e91850b22985abf83de4f322db157e0c4f3e2865eb01a79dde6eafc709f5e5ec065e322
TLSH
T10CB0123A4B591CE2F2754CF01CBE0110C32503444001E2C331A8176820102419D4905D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9452e3a991ba0bf36821cf5377e710e186ef472c0fc0e46502d0f2ea5ced659d
MD5 ca8ef7fabb3956f1b68a6935652d2038
SHA1 09fc2e42bdf3935e1864d27470db94c567e8d249
SHA512 73e3abaf84dca3427de5d96d77c622cabec2fbe0c5d69fc6822895cfb3c569d578cb0e312bf01417db239224127a822876254290b7907fe61276a619d793d765
TLSH
T14A41BDF783B085AEDB1196F0EA146E2FCF5C0111536C3D9A89E4AE17A3F3471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 26aadc1435b877cf48b51fe943168969265aadfca28664b1a03bf0429268501f
MD5 9f1f93d416e5a729a94da1259600f351
SHA1 a8750356da38ae25e225a3808fd1512da0f69e61
SHA512 f5738f558474ef49ac5f89e0c34492c1e44382efa2d0fe1150ea007810c3b7184c340cd89db859240e955bf818dec7d5b329d8b48be4f2f65f4b9bbdb9e5df82
SSDEEP 192:sxZhR9yMqZjK1Ml8UQXFI/f7sO0JKTGJwyzodpGo/W6+WNQVidY0hoFTv0Ig5l+s:sxZh2q1I/f7sO0JUP7/bDd5d7+s
TLSH
T19272E8066A34997BCCDBE209F945BF53D6F94573A1904E449AFC9A1C04E7BEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 cc2c8666a942851a98528b8c37138020659fc64c88e0cd85d98a08534e09ea7b
MD5 55fe599d2b1c79bb21edee0e0f9ae5a4
SHA1 1c84814e114b14f587cd6f77e7a41f333f164a67
SHA512 59dbd75e8f57dc65b48828b0d8f47c223024b2ce3f5963220dde3aa78661e3f9ddbc74094e19b43ccd928d8d7441c5c8b99b3c5f68afd2716292cd6938421dfb
SSDEEP 192:sxZhR9yMqZjK1Ml8MFI/f7ssmKTGJwyzodpGo/W6+WNQLQ/Y0hCFXB0Igj+IJ:sxZh2dI/f7ssmUP7/bj/5vj+s
TLSH
T1EC62D7026A34997BCCDBD209F945BF53D6F95573A1904E449AFC8A1C04E77EC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 bb38d2843fac1676545fd1dbf46602eafc3617f0c3745aa49a1031db89ab22d5
MD5 c258ab0ffae4e902108528daa451bbb7
SHA1 94e44101cf4854bc8266cb0bf62310392e8e9398
SHA512 3ec692d2f7ea16ccdd85ca60febe9a9af8d14ee54e97dc94bcb3cae8992bb419a44865ee591a8d960ffbbb2f42a725ba3cb82349855708e5bfdcf7a2377fc549
SSDEEP 768:wQAKq8y028bWRmj1QWT8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3L4Ll/f10EMEroSO:wQAKq8y028bWRmj1QWTu1jaKL4LpfiEC
TLSH
T1FFE21B3B284CCB7E4FC44E9CED276E8769D802CBA7588D5447FA494C03CA3EE511A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1cdccba37924bda_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Size 9KB
SHA256 ca4ca0a848ba6cdef26c61071f494764317a52a84f02d6de8db746292dc4c1b0
MD5 3cef5a3f8367b0b742ff2c084a34cabf
SHA1 29cc1b0fc0ae9592b0330593318e5b8b92bc6994
SHA512 f8c5db173e966f9fe1639d9705804e83f4c98c15f71286d38b2ac59bbeb61fa16e91bee28d18800af0e765767e7b46b52494985cc8fbdc923944f6a14b414f41
SSDEEP 192:0Wh3gi6qTDy45eyHLhq/c1FyJaMJngvBm7g6i6IxobF:1lqaSngY3iEbF
TLSH
T17C124D4EAFF53032C52319359F9BE1133D76510B2053B90A788FA3ACAFC027197E9A64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1cdccba37924bda_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
Size 4KB
SHA256 55d6dd0e6f3aad5b0d9fb50735c49242bb4da9b269fef9d9abdd556deef541a6
MD5 ab25f9fe4e2b89d6dd19e7a6efe4ac58
SHA1 d5188e76884536aabca22545a70b7c2cd1704dc6
SHA512 dc6c7892d07afdea387715d8d79996da81af651e141b74285d3811ccec72cb75392ccf9d0f82c9b61663d36912318e74c5d02bddbe4e21e3724f81ab97b99537
SSDEEP 48:NJFB0ZRG72XCB7HAOEQxHvmk2K6PuNGS5ZDiDwI9d5MZmEg7iDHj6XUFRYY4Sfr3:NB0ZSsdK67Tw5Hj6SnErSWWxS2jLY0
TLSH
T19AA1846583A13927CE2703FF95A6452633B5480D3FC3C35A649263645C323F76B9AD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 4ca52d9d65001214bb46037e7df62f65ff467d607fe28357c45bb7bb72b3c262
MD5 bea0455b96bd4d19af8e5ecb040a8b51
SHA1 fea403660a25ceea1af74f1533f3d7a34714969b
SHA512 49cc6bcffc4df631be0a2eb43cafd0de44d1fd1c8565f21adccaaaa1c805ab3039285c61912f053323169ac4bc7bde2d0419502f489a5a213438d8e3c37e3024
TLSH
T1D5A0021049499171D842177118A751503351589141071702559192BC9CA2285554612E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5836da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5836da.TMP
Size 48B
SHA256 617288f818db0a4ed872dac1ca3a650f53dfc10effd9d499db03c80f94ce0fa0
MD5 4586e10d06777a59dccff48434284fcb
SHA1 ffe2f33755f1df238208dfd43bad9361b7cf3262
SHA512 838f0d9079c2f8c90deec53d10af374401f2c2ac36dc2c1d5eb05a9932efdae6d679ef4bf3c4988d3829c9dea8b11254b3587e8c7bc74ccd812a658ee8057fb4
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 22KB
SHA256 e77ec2067ab595cc4933e44202bf63c35682ab75b8660214ad774fd4e6ff43d7
MD5 be37fc5e11db746669c72b37ae10ce49
SHA1 f6542b02ad9290071363f40949dc0eb53cd21ec2
SHA512 7e79f1767e4569609aebb3102f067c13aa68df6668450fa41d7d973b20265511bd6fe6c491b42b843a4ae3153b5687759e18fcc976111970c1f45a33d23ae893
SSDEEP 192:GD9R5VJhn/iVJnZFGVApBPisTE/3oNloNPSF53pVWFQ5xfSsD0PnY9JFlPtv0F5J:GZLVDJjEDPV0/Zdu3E
TLSH
T1A7A2780232BA02023C7D390C92969B674A42F5633069ED7F7BB940B64E67E125DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f5e9c46d-fa44-4572-b3f9-09f56f7dd51e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f5e9c46d-fa44-4572-b3f9-09f56f7dd51e.tmp
Size 414B
SHA256 b1f108ddd8e4df7b25c845b256a7f90c48c5f89c21fa3f17121ee7e9a9a756be
MD5 c4814342bd7bda2b5d28d4a17d20f5b5
SHA1 142b13363df66623bccf92eaa2ece0322887f585
SHA512 d1aa6fe2827344188d13eab65419925fc5913f4ee464f16bedae4c0ec7bf34d0bb859e411a9490c35f70870a750f3ebe2c87493348388ffbce60b1f9f3a18f67
TLSH
T1FBE02BA6CD22EC3B48FD2B1990605746E70413972B41490F3B3DC10D8FF163E4549C5C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f6654da14363af7dae353496e7ca728e0d25bd5889dcdc0c2a80f7f6634a1b68
MD5 8eb2974994d1cca6ed8a605246b90a00
SHA1 6aa7f11b339a0e11ec20fcbea7d14ee36ec119e3
SHA512 0f631ab741d53f46c050f09e6bf7b81850792df14cb8fe8250cdd0d2afe36825281be4e3c8a3b152717c4c62114ee4bfc07d6ef48b282fe6155f1efee414ef84
SSDEEP 384:nSiF63yFaeO8t38Nt8TUNTUlIRgPm3ek32nn98574Jfb8G7vGSMW3rEe0nr2Yq9y:ZF63Izht3OwgaKekmyxGqSOnaX9m6yMy
TLSH
T193D25A32E860DABBFCE74ED6A74A3643EEE04213999C6AD8D9DD5D0D008B1DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 864f4e5432ca672da5242bf08e314264cc2dc4c40d76f4160e6c879a0007f40b
MD5 d8d3a84ae1db3e75902ac45183c191ff
SHA1 524b81de9aaffb15626bd60bef5a9e4344e5c796
SHA512 6d72de2a1ca1ddd36328be14cf07015c25d1e6a809e9af690b9e5aa799f60c3d461271f7c8a9fb7f67c78fd9324ec1cebe039f2b17aeebeec32d0832b9067dc2
SSDEEP 384:nHiFI3yFaeO8t38Nt8TUNTUlIRgPm3ek32nn99574Jfb8G7vGSMW3rEesnr2Yq9y:CFI3Izht3OwgaKekm5xGqSWnaX9m6yMy
TLSH
T1B2D24A32E860CAABFCE74ED6A74A3653EEE04213999C6AD8D9DD5D0D008B0DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 fbd287bdafc9f34ca062ec3024e4a9acf2df0ab3189fbaa155dcab879bca000b
MD5 4df6b54a85029a33dc550d2dd2ecfdcd
SHA1 dd18c6b9bf55453975e2cf7469b4466e402017cf
SHA512 02f85e1b03e97016f85aa01d9bcb80b1ead5f47b7a50fb290468fb2ecf3b4934ba7f2ff65046d97ddb051b12377dd6dfe659416cd0c5ae381c9ef3b0e2d24afe
SSDEEP 384:npiF63yFaeO8W38Nt8TUNTUlIRgPm3ek32nn98V74Jfb8G7vGSMW3rEeGnr2Yq9y:AF63IzhW3OwgaKekmexGqSQnaX9m6yMy
TLSH
T1D0F2D5F198D38577E89E4B97A73D2E029AFCC113B8885994B7D91D0DCC860BFD30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e1b3e4a0e282576e125fb7e5de60d0535c9711b06b894820b33e1b6c9cd767f0
MD5 36af0c2b434d37439f2eb77f00f73626
SHA1 64a0355a92bdbd135bb878fbc179bc2386541faf
SHA512 ca744f539303827017aa41a70cf4641a20e16ddc60936642b30ffe5d9728746f516acece19c7405e056dd4408244f85a798203c3974683af8187a6fc7fb2bac9
SSDEEP 384:nHiF9CcmyWCt38Nt8TUNTUlIRjPm3ek32nn9q574Jfb8G7vGSMW3rEesnr2Yq9mV:CFccpt3OwghKekmsxGqSWnaX9m6yM6P
TLSH
T123D24A31E8A4CAABFCE74F99B74A3603DEE0426399CC59E8DADD1D0D009B1DD170B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f07ecc53ed865307f134bf034e624f922eed70004a72a657b54a60cccf84a7d4
MD5 786ee07ccfea2f2209ba2389fec71d37
SHA1 db892d842632b3aa370f79ba20cc1ef3ebfc5d5c
SHA512 0b1c5ea4b6d86f514705c3f41f2b34aa91fb6bec58101243849cf868836567daea9df883a530d75b71b60a7ad4010b2d643c57b26003ee418aa8a1d09c3558ab
SSDEEP 384:nHiF63yFaeO8t38Nt8TUNTUlIRgPm3ek32nn98574Jfb8G7vGSMW3rEe0nr2Yq9y:CF63Izht3OwgaKekmyxGqSOnaX9m6yMy
TLSH
T178D24A32E860DAABFCE74ED6A74A3653EEE04213999C6AD8D9DD5D0D008B0DD130BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 2713d472ed63f035b92d3cda7e06bf7d05bb93434195e4c4e51fd19d770af06e
MD5 b6fcb13883ccaf35f347664c3df2b16e
SHA1 77813fcfcb4d8ac039bcdea4f79c3f7c4d6da1fb
SHA512 9b0a922bfe982bb862c93b7d790e8c679d917a755b4d9b042494e2cb749706c53a980fc84d338f392b1606d54fab1ea1026cac40642ca27f3c26651d4e04952b
SSDEEP 384:nhiF9CcmyWCs38NR8TUNTUlIxBPm3ek32nn9kA44Jfb8G7vGSMW3rEeone4KV8pa:IFccps3ewgPKekmLUGqSmnI8p0t
TLSH
T1F5C24A32E864C9BBECD74FD9B74A3542DEE05223998C9EE8DADC1D0D009B1DD530B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 00c033d8ef5bd436dfb7661fe78dc3b0bd27138d135550c6136582f7611494d5
MD5 7b4ab37dc45a4c496265ff579ca4dd4a
SHA1 c741a05af1faff4934652f8f520bcd20bb79ec20
SHA512 f19258644e92e67b433d6ce00c21d80e6bc6873972fc46187b4f6885fb7a5307aab1d10b77123b460a9e76190490104910d8ef55a0cc10be406369a57ee037fc
SSDEEP 384:n3iF9CcmyWCs38Nx8TUNTUlIxBPm3ek32nn9BGQTs4Jfb8G7vGSMW3r2de4KV8pa:yFccps36wgPKekmugwGqSadI8p0t
TLSH
T101B25B31EC68C9BBECE74FD9F74A6A02DEE01223959C99E8DAD85D0D00971DD170B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download