hxxp://youtube[.]com

Analysis

user interaction
yes
max time kernel
448s
max time network
438s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube.com
Sample260925-vrexbas14q

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3804	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{6624DDA2-134B-48AD-964E-EA0B0169B5C6}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{3956C30B-1BEB-4BDC-9853-1D290E23BD54}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of WriteProcessMemory 62 IoCs

description	pid	Process	procid_target
PID 4148 wrote to memory of 464	4148	msedge.exe	87
PID 4148 wrote to memory of 3804	4148	msedge.exe	89
PID 4148 wrote to memory of 4648	4148	msedge.exe	90
PID 4148 wrote to memory of 4648	4148	msedge.exe	90
PID 4148 wrote to memory of 4648	4148	msedge.exe	90
PID 4148 wrote to memory of 4996	4148	msedge.exe	91
PID 4148 wrote to memory of 4996	4148	msedge.exe	91
PID 4148 wrote to memory of 4980	4148	msedge.exe	92
PID 4148 wrote to memory of 4744	4148	msedge.exe	93
PID 4148 wrote to memory of 4980	4148	msedge.exe	92
PID 4148 wrote to memory of 4980	4148	msedge.exe	92
PID 4148 wrote to memory of 4744	4148	msedge.exe	93
PID 4148 wrote to memory of 4744	4148	msedge.exe	93
PID 4148 wrote to memory of 4568	4148	msedge.exe	94
PID 4148 wrote to memory of 4304	4148	msedge.exe	95
PID 4148 wrote to memory of 4568	4148	msedge.exe	94
PID 4148 wrote to memory of 4568	4148	msedge.exe	94
PID 4148 wrote to memory of 4304	4148	msedge.exe	95
PID 4148 wrote to memory of 4304	4148	msedge.exe	95
PID 4148 wrote to memory of 4892	4148	msedge.exe	99
PID 4148 wrote to memory of 4892	4148	msedge.exe	99
PID 4148 wrote to memory of 4892	4148	msedge.exe	99
PID 4148 wrote to memory of 3724	4148	msedge.exe	100
PID 4148 wrote to memory of 3724	4148	msedge.exe	100
PID 4148 wrote to memory of 3724	4148	msedge.exe	100
PID 4148 wrote to memory of 3192	4148	msedge.exe	101
PID 4148 wrote to memory of 4840	4148	msedge.exe	102
PID 4148 wrote to memory of 3192	4148	msedge.exe	101
PID 4148 wrote to memory of 4840	4148	msedge.exe	102
PID 4148 wrote to memory of 1916	4148	msedge.exe	103
PID 4148 wrote to memory of 1916	4148	msedge.exe	103
PID 4148 wrote to memory of 3744	4148	msedge.exe	104
PID 4148 wrote to memory of 456	4148	msedge.exe	105
PID 4148 wrote to memory of 3744	4148	msedge.exe	104
PID 4148 wrote to memory of 1920	4148	msedge.exe	109
PID 4148 wrote to memory of 6084	4148	msedge.exe	119
PID 4148 wrote to memory of 6084	4148	msedge.exe	119
PID 4148 wrote to memory of 6120	4148	msedge.exe	120
PID 4148 wrote to memory of 6120	4148	msedge.exe	120
PID 4148 wrote to memory of 6120	4148	msedge.exe	120
PID 4148 wrote to memory of 6128	4148	msedge.exe	121
PID 4148 wrote to memory of 6128	4148	msedge.exe	121
PID 4148 wrote to memory of 6128	4148	msedge.exe	121
PID 4148 wrote to memory of 5516	4148	msedge.exe	123
PID 4148 wrote to memory of 5516	4148	msedge.exe	123
PID 4148 wrote to memory of 5516	4148	msedge.exe	123
PID 4148 wrote to memory of 5760	4148	msedge.exe	125
PID 4148 wrote to memory of 5768	4148	msedge.exe	126
PID 4148 wrote to memory of 5776	4148	msedge.exe	127
PID 4148 wrote to memory of 5004	4148	msedge.exe	135
PID 4148 wrote to memory of 5004	4148	msedge.exe	135
PID 4148 wrote to memory of 4120	4148	msedge.exe	140
PID 4148 wrote to memory of 5896	4148	msedge.exe	141
PID 4148 wrote to memory of 5896	4148	msedge.exe	141
PID 4148 wrote to memory of 5920	4148	msedge.exe	142
PID 4148 wrote to memory of 5920	4148	msedge.exe	142
PID 4148 wrote to memory of 4572	4148	msedge.exe	143
PID 4148 wrote to memory of 4572	4148	msedge.exe	143
PID 4148 wrote to memory of 2092	4148	msedge.exe	146
PID 4148 wrote to memory of 2092	4148	msedge.exe	146
PID 4148 wrote to memory of 6020	4148	msedge.exe	147
PID 4148 wrote to memory of 6020	4148	msedge.exe	147

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffa7632c188,0x7ffa7632c194,0x7ffa7632c1a0
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,8508213869683576944,3198995160337496379,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,8028678468730439711,742882419437133466,262144 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,10533635702686619884,10068373018811321730,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,14881410297841622860,993954919925351241,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,7281858266784612674,12742948469446712925,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,12998539044851827574,17196951137042735638,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,8118046307160245868,8279543517703463486,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4248,i,8596691933547553163,6107965901639240913,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5308,i,2113406546750861572,6242446051217161090,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,9528215099777265959,18155587462800165345,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,5195840194974643959,16756587365783847632,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,3701651913224530620,9655323836865466185,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,8324939729571065958,2847285084658740190,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,4654471024218508607,12385067929973823531,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  - Modifies registry class
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,15825807190351428312,3876982365649021173,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,15825807190351428312,3876982365649021173,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,1535153313790562549,12758271823896415896,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6972,i,8099485656532424177,6078474107707327706,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4328,i,8309604939042227474,5790317188366003089,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4852,i,10701985963621639957,14222864644740345644,2097152 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,10372982165488194284,8754351969667122637,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:8
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,13825133407916061287,5589825253518020721,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:8
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,2440742195942288064,17552723955868706564,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7236,i,4108803944689673509,18368733508533031515,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=7208 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,5418063462515714034,11649095628642435435,262144 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3196,i,9485352974672806167,13813552181892115979,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3372,i,7304843745161404498,692174520051629833,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,13418266670801865756,4951092498329313568,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,4041201699669638513,13948945524764839647,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=1304 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4028,i,6547867000783921702,13227378209185067149,524288 --field-trial-handle=2312,i,11245317330540888157,8513011573654414412,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:6020

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d33d6a5243d4834cfb4efc7cc2ca73575729d07b2aa3761c02804ab72b1e7959
MD5 964b8acd8542a55245fce611261a9382
SHA1 1daa8b7fd2a8894e2e53b609c16e7c30c4a45198
SHA512 389c589abdf15945cdb7a195275cbb0ffe368ef2e1e3f9e0d7862fc86ccc39d162863192a3ffeaad296e114007ec263ff8d07204e7005285521834b7deadb1ad
TLSH
T178E020DE08C6C26D67446447839C7B0C93D4374AE2CC6F055F0C844C79411C0B789591
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 57KB
SHA256 2168e40addf9b9a8cd53f709085ac9949ad58e37c7807a7964b30be6a1553d7d
MD5 4e067a1516fbf0dc5dd5b7c62378fa03
SHA1 fcb6107dc67dc9ca55deb5d425da057b534eb1d3
SHA512 57c8fc0df16ea0cb3a7e619af22201b43b42faf76e71d9e9c62ed936987b8dc13677f0e0a12b2d2a18d05cd884783bc93fda1c66e517708c69a12ef120a89843
SSDEEP 1536:7ke+J1x0IFA3LQSvEx9vVbpcd9O4VFb3XpPK7Oae0qdp1d0mVn3O:ItJA3p89ryOEp1oIq43O
TLSH
T1A5430295674DB7B5A4BE84170C8926E8C87B5233807CF2D4A38A489F833BD567F8A614
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 fb41b32f53716826449ff26b3d323baa2c5afc45901c428e86870c76e5099574
MD5 4b31768740d79c6dcc2ff5a018289214
SHA1 c66563103137f0a3d411a2283be22e17f678dea1
SHA512 270dd6ebd80a23a5ad777be1830294830f135d4a78ddbf769ad2b90514f93fcebd925da2b5355c0ce6c6f38127cebc60f1d066c7f71d4d41642f253d582c9196
SSDEEP 96:8Nf3YQZNYKrKO8s5Q+ZI2il2cVV6bHvZFQh47:8ZNY/OrQiI2il2cVKvZFQC
TLSH
T1C391F71462C0B788FF98AB7788CA1D6B7F3048FB06436F291A28D4356AC73B444E0278
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe595097.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595097.TMP
Size 3KB
SHA256 4a62f2513a8566910789b87043c3aab5fd99280d93cb0d462cacd3116ff99fc7
MD5 2229c03c5b0011fa3564d6a605e7b479
SHA1 0d48382f1390c6b38e964b2488f422d5b602921a
SHA512 5c50844225e5d7e1d1a913aa9534e952007fb4cec34a5a0ea29fcfaf9eae00c410c60779092dfc4bff3ae7310d65d4c5aee6b8909dccd8d305b5304ef85cc583
TLSH
T1D961824465A07B9CFF68873398D42D8B7F344DF319835F690868D87AAACB37550E02A8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 701KB
SHA256 02b4f618ff70cd6a2672ac4cd509126a70a4c041d3466003a099b093f6b8a29e
MD5 3c8bdb7450fd8729cb2135029a00f6e3
SHA1 1eacb2c1dcb3ccedfcafd3f8c374611ce4d7e9ac
SHA512 3f47df9033af8895d85ea29a85ac1edbf1fde403a539f395978054fbd0023edc19959d185d6c6b8d325b5389ef81b5b3d02a9a03100991a8b7b883b9e656829d
SSDEEP 3072:7PeTcEcTlX+iRwoDpq5M5px1z5CcQtqup8NvQ6ktqtdjWy3vf5V1LWvbq3zjIouK:h+oPBvopK
TLSH
T132E4E745B1AAA3C5B86E430B16025C1AE376E6C486593496BEF17E0C27FAF463F0C75C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 353B
SHA256 aaeda4cf415e2ff103b117f688c7a4e1872c84f9048343347a9aeee333909b28
MD5 33aa88a2f4438f8bc30e8bb10b0c1856
SHA1 fed3eeec7ba08d59009fd78aa07a2676a0ad0989
SHA512 bf2a2342f7dbaa58ea959ff6d87704cfaa6bf21526278c2a71fefab169ae4df80dadab5569e4a3cf1e7e6d319e25709d486c187933869b19e26458a241c9a1f3
TLSH
T172E0682CCCCEC11F126020E610347B0ED297A34EE6CCAE820F04E8087446088D06E152
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 f88581d7dab5ac5824023f1f418e79e49312f70dc50a7434f9620e8665d8d06a
MD5 5a010c065798863f21239bd61736c649
SHA1 3cad389fbcbe5a4d3759820678594205f4269279
SHA512 e2040edf6da4e5cadd1af0beb8df215aa97eb812bc3506293469c696ceb0ae8c0174627ff95e2799f0ba9a6c824c8c0304559a36addf924b592e75bdb6902431
SSDEEP 192:DOBcb2jxw7jklVHy7YFCYJ1JQO4n2LWrWbWJWXKv1PxwX15inrsajXDcPm9j9ebx:DOBcb2jxw7jklVHy7YFCEDQO4n2LWrWp
TLSH
T14522BDE3C3D4862DE81116F4DB58792ADE6D0E6887243C39D9E9EE4B63D5031D341A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 0b06d41af2016fca6e96023bae582629c1cb90146bf257595ca3ea0de4a958ef
MD5 8ad0c4d817e038e1f23daf3964a24935
SHA1 36e9a6d01661a68236b8739733f808283c6df8a7
SHA512 66bf22330d23dc67088e2eb5ff62cf8f60741df4c16a70e343c4af72865198a04133a21e0f5732e68b81022176c2e912e7c37fdd9363a9c1c76f7ac4c7378aaf
SSDEEP 192:DW+pcp3JolcmHVPi+/wyJuJr0+eJ2LWzWbWJWFF1Pqwq5qvrSjWDRBm6cwGj46o:DW+pcp3JolcmHVPi+/wqWr0+eJ2LWzWH
TLSH
T119F19BF383E0832DE82166F0DA587D2BDE6C1E6483683C79DAD5BE4753D5032E241B4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4c26df43af07a3b6d16f04fe09761347109694c14b2599f3a52b9665ccc283be
MD5 6173ab6e4e2d6c41445de8b8c45d0a3c
SHA1 b352904178423eba3fcc7952ec08ee15d084f7a8
SHA512 d73bb783ef808a5ac4b24638842f0c3f3ec1f5d3cf227d50a6e6cfaaf01a338702ca4c1125b29a4fcec8c2b2e3076a054fee44553d2adba327a9773bcc0f7c94
SSDEEP 192:sxZ1RWWq/f/ss6yU1Edp0YjmdHW6+WNnbh/YRPOeofIgrJ:sxZ1Tq/f/ss6yUeWHb9/m4f9
TLSH
T1AA22B8566E34B97B5CCBD21DBA25BF13E6FA4032A1D41E58AAFCC61C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d24706820ff6fba7796eaed066c07aeb179f3f41f678c13fae175f731dfb232a
MD5 84b0aac8a12a0cf444544301b72bbf13
SHA1 7a8a12cccce8e57ab0a2da1e9637f1134efaf8c6
SHA512 c4c5f75c023284048e19f164b52e166cd13abe7e2bff93b3335a6c712d63d6ed12fc85ed6787aee6e75d1406576da28dd3308674325a46cdb8d8e5f5c64d5025
SSDEEP 192:sxZ1RWWq/f/sv6yU1Idp0YjmdHW6+WNnXAXYRPeeofIg55J:sxZ1Tq/f/sv6yUGWHbwXm4fV
TLSH
T1B832C7566E34797B8CCBD219BA25BF53E6FA4032A1D41E58AAFCC61C04E77DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 653049e03f50e70ff9d0ae33aa161e13a3235e94c5c81b7f9b3de0da8e44e6ca
MD5 0cee9c049f5564f7b9c26e8c88a6d78e
SHA1 94545d72bf7dfcb9f6e7986e5b0d9ba5861d6bc8
SHA512 a8680df58ffb63960f7835d201e29d0094c6bf11dd38743d18dc7da0530caf38afd298d8882139cfe2cfb6bada9f6a398a527e7bb19ad97fcc12117b4d3d462a
SSDEEP 192:sxZ1RWnq/f/svlyU3Idp0YdmdHW6+WNnAndYRPpeofIg51J:sxZ12q/f/svlyUYAHbUdmRfl
TLSH
T17432C8566D24657B9CCBE21DBA25BF53E6FA4032A0D01E58EAFCC62C04E76DD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3614dbc80a7618c532236db1868e9e2c5fb000d1bac25405a8c72e63f2ecb34d
MD5 d4ebdcdffbf1284ad715d8505fba0f96
SHA1 612a3a111b67d5d79a1fda98f952f98d797ef297
SHA512 291b3d12ee5f9af3cb2112289dd6a95b34e813abdbcefefce0f68e52895d932b4d563e80254d3b5c1f326f9c5d7e2db837070e57b83db60985d9629c22c6cf9e
SSDEEP 192:sxZ1RWnq/f/svlyU1Idp0YdmdHW6+WNnlI8ZYRPAeofIg51J:sxZ12q/f/svlyUGAHbnZmafl
TLSH
T17432C85A6D24757B8CCBE21DBA257F53E6FA4032A5D00E58EAFCC62C04E66DD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 25KB
SHA256 1b73d38b6696c268a77e4d0eafbaeaf44c5dd32fb0a0d17c73b579d703daa36e
MD5 5275bb91b70c21a88a850a766be6a3cb
SHA1 c078a2564712b82b4fad1678920c124ce8b879cb
SHA512 422b2d8d13de063e3025a2a289993bce13f1cff9041f3a97e1fd6c58c66d2f1d42c77ea7e8dcd91793c3faa065caecb8a272035a825b62776d7bb204c490e171
SSDEEP 384:sxZ12q/f/svv66sjqMpRiYnazAW8pZS15posJWeT+jyUYyHbUdmlGl:st2q/f+v4nnc7WeT++UrHbUm0
TLSH
T177C20709A924D87B9FC39D19643D7E33E9EC406261C5CEDA5AECCA1C01AD1FDAB07817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 322458e7111d82ebe9da81950ce25d621274c268075ac0dd12bc199d3ebeeb0b
MD5 d8313b8dd6e7d930624b742ef234c90d
SHA1 e981f644c8845176354c5deb9c807047cb6e8090
SHA512 a6b593d9ccb904fe297b1a87b237bc7248dabe58c6ce6b2fc3ec1cf6cd970b188e02f2705f1b69e1fcaba39930534b0a07ce845b06060c8442f85da6e831d2ae
SSDEEP 768:qUK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3nro3+bN:qUK9uzYWvcQWsu1ja0HL7Q303+bN
TLSH
T100C20A3F640CCB7E5FC01A9DDC5A6F973E9802D7A6588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9d5a101c-ac1a-4534-998b-b66cf8b62411\index-dir\the-real-index
Size 2KB
SHA256 c71eff5bcf4b72c84e13f9eb6337c72cf50b56c5442473356beb1eb9ace36f8e
MD5 f65dd1d0cbb5a0de72f6d8a256e49920
SHA1 d3a6a421e4338c37af83228c2133dcff63f7eb03
SHA512 3bc6e0349c6f88bd9cecd24439a7a9d5bc78ec2a2a6f72433f02b4c7088a6b88d2d508d4b5d64ed578505af3926f7b0163ff618fc36ebc7e5eb943d5fd3c66e3
TLSH
T10C51624CCC90A7AEEC7561BE1C9819B243752D39FC98C3929058F1B674435B81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593cc1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9d5a101c-ac1a-4534-998b-b66cf8b62411\index-dir\the-real-index~RFe593cc1.TMP
Size 48B
SHA256 a9dd06bf751c1f36d0bb264691b522f9212e7a3dc5836006af20bd116f769bba
MD5 0f9a59547e299ae08c94d7a02499a627
SHA1 1236aec48b242a3299ff21d5b3a1a7a7b10aaef8
SHA512 14fee1351f03410457548b534787227b6d04218f3e37f0f829be5ab82c5aa1511ed97ba42375b5c61ff09a91427e440d7a74edd1a7b18a46b0d3720c6f5e0cfa
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 ed055e8890896b5ed3bffe2ba99e2b7476bda94a247a1355cab2fa72287115d8
MD5 dce7748a5381eaab173e4fdd918d0f83
SHA1 43ef53de0f9b2313fda6c698546dc3aea58cc3f4
SHA512 93b03c0dc6dfbacb7b38d5adc842d4ce5dd9fb2128cae5ca2cbee829444dd6311777c74f15fe986eff7eeb328798fe711a5fa226174d0d1c762af37fa285ee10
TLSH
T16ED0A9A652248A5A1E709B89202852BEA61AEE488A80DCF8D980F09A38FCB13C501925
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 283B
SHA256 90aebe15922ff44f7e4dfef7b8df86082d300a06ce0f9e69344dcbe5ea7334f7
MD5 0ad29ecaa71ebdd9d9304e593514a1cd
SHA1 268db89692195fe1b1b5cffdc0f5044b98206626
SHA512 bf5bd1c2467ce75d738e817b51e8833dfa3170ceea2bcb09356bc338c4156e8a4ffc1c25631e4133db11de99121712eaa98dbde64750a54ae9d746fcb939252b
TLSH
T1A3D02BBB952004868F338B9A783736DF9D6AB8088581CCB4A548B00E21BA7174652D1B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 360B
SHA256 db2c2fa3c1353f0b030ba34df3767de22852148e56ad718a85ed38c2bb9af3c4
MD5 81f9ee4e613f11d57579da4b47bb87a5
SHA1 ba656886eaf1bb5cd50200df6079491ad01530d8
SHA512 f059d611a0811d7eb46eba6aca15164681435432148d8ebd6014f6f3fe60ccbfd6257a150157cecc7073d50943a10175715825b8df282bc0d5139aa862a519fe
TLSH
T131E0C07A9331444B6A73CF9A7436319F9A657804C080DCA8C884F00E34F93038522E2F
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 188ced9c10d1fdf4b33514490766434cf07b2e8dddf8e646976f44a840292662
MD5 eb4c57323c013e2203f8a59d21690aa6
SHA1 fd47bc7ce031ff453a58b9c637f9fe117fb4d26c
SHA512 a58e12aeb6499ab1c312d098fc9006074696ddae770f1b209d937498792e993e2783e1aefc4ec8573985831c29d5549b9685200e667469c1a915b1d083578de6
TLSH
T16AC09BE74514499B4B34DFC8303C576E990FE15885D0DCF4E104D00B347C7234551D25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 276B
SHA256 a369bc06b34d839be158fc4f0e03776499064cf84bc6418dd646bed7f86e7aa6
MD5 7c4d7cb9a458329c7bc5b04e2e6e08ff
SHA1 0f2a733ca01b0ff826b514456d357d4d9034aa1b
SHA512 3fa7db98f4b85881b914134e99beb608a4e97b2eab9da6d1a3db14bb721f4c18303ffc49b4602963aec388e6cef04e0c53c1350340ff938146e5702b1a9e145b
TLSH
T13AD02BBB9510045A9E73CF99783636AFDE5971048180CCB4D588900D247A7135552D1B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 3294a5de61839b815614abf468d9995ac82b0ec346cc3b40672ede7fc9fdeb0d
MD5 3801024aab53fbd3c9af21b31b78453d
SHA1 8dc350aaf968b1639637c43760b5c11670616715
SHA512 65e6636ac7c7badd6fa3ebfa2d3b28db3f6a6afaba99b7e6f6e21a3b9795e66d81020a12bf4c904ff2d3c399bc28e99a3c0fd0750286b7d4dbc48c83e75f18e3
TLSH
T1E5C09BF75915499B4B70DBC83038676ED90BE15895D0DCF4E504D00B317C7234551D25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 2753f51db2d303483b92580e40ec75c7c4a3d577454d06def5432b907aaf6a2f
MD5 8ed78f876b6254cce70554832a485d04
SHA1 4aecb0a11fbf66e25dccba4eff7f5053ce2c5f3e
SHA512 125e34fafac9a92570279f4f3e10baa2df77d8c2aa548dd7ee6404ca14678d43da5ce8d03481dd4674c98d367ff08615324c85345edafc160a39cf87fefb343e
TLSH
T1B5C09BE74914499B4B30DBC8303C576E990BE15885D0DCF4E544D00F307C7234551D25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe585d3e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe585d3e.TMP
Size 137B
SHA256 072d252a7d22395cfc03c29e61243a16b885b3243b316c8d9a500dc3427f25bd
MD5 45e430ad4cc24198372838fc32ae887c
SHA1 f26da1c580c654bae55ca57ea7254df58326dbb0
SHA512 b748e129e7c01e48bad6182c7dff509e7f7d0b67e1298226672851a6c399c1e9b4077b5d4a7c727448816c3e49b7475e2ae39b9d116a2acae27f6d1367dd3228
TLSH
T1F2C09BE745148D974B349BC53038579E991BED5E88C0DCF4E115F00B303C7238551D25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
Size 1KB
SHA256 ca800dddc4f61338e6076e5a0ec4decab5e4b6d0989c9e0242619f294e42dcec
MD5 4d85ad028dcad6fa557fb9d652d2b88b
SHA1 4ea8cc3d647db5b18ddbf4bb4776500081a4c226
SHA512 0560177df1eb6bb6c68c0891b844086b4bcfea2d23395bcca43d871f77e4891c21a22be3593e5358d9959b19796c93bc26660ca2d8f9ac429aa9f66d7d73a448
TLSH
T1082150831E934F97FE94633810392896B731A2CC03547E1FA2FDE1368C86780BD89998
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ceae4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index~RFe5ceae4.TMP
Size 1KB
SHA256 31660cd52194238040183cc221d594f60064812c2ec8541db4cea882f0116258
MD5 c84097256b77ca993d4282315fd304be
SHA1 14be2e83e2c0fac8d5ba90f55493b07ca1e7aada
SHA512 15091ed93a5482e86631d69c1f279144730a4452b82b1eb5dc952b3868356a05ad2c988c85b1bc51a45348dab9cf966b6324b7679ef46058744cf7f14f782ad3
TLSH
T17B2163A241630B6BFC442376496D68D77335D54853943B0FA3E7A03ADC81B80ACC6AE0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 9b2b72481ff90a1353648dd8c9e0d02a1dff5e2f2f01d511b0199076230c89ef
MD5 6eddd384329ba6d3d222507ca1376f97
SHA1 95c34219e8652f22eb9494fe08a93e512fd713ae
SHA512 c6c16ee91bb804648fb7e89da9c3fd096fea22e63a76fdc17873496638cc5be26eed472d80b77e329e241e07b3719c15bbf70acd79b87bf99eb4a87a0f1a249b
TLSH
T1E0E0C0F73DF21D10ECAFC3C2243549A00011B844C45C6D8F507E939312A173D3405C65
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 8fa99455168bb5c90cb203ba9f3fb2a53ef8cbcf48ed1debf707f504302747d6
MD5 bede4b682c136e8d3bb72ca7a82d7e5a
SHA1 20513958ec71151f0c37c3a2e913012fb5cad00b
SHA512 851fa60c36efcf1792ffa336d0fdbb2f54c8edd437dbb0e0d532e8699aac98e9f2a62dd0473a31d40c97e1a05827fcc379df7ebe0a7e4cfbd367f0784c015b26
TLSH
T19EA002A512A41056C50027F0984241DD3B6048D4115222514EFD80D4A952548B21B054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58af65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58af65.TMP
Size 48B
SHA256 9e14af98b08ff989ee7f161edf379775b1cfef2fc521bc69c31e7487d7226a36
MD5 6079ba8d4286bde0a0d428848c0dbdb0
SHA1 10d7793f7895157480fc935b4eb977db627e287b
SHA512 b9878510f19179bcf2f856f4fc7d836aed58d034301974c3a1d40f8719bd117dc94dd02cb400ac8109d2407b82f34f834388612eb3a2b3346e7d038a5ae9eafc
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3d9f14d9179f199b9bcf5c2445cc6c0667703dedf2cdf7382e0455ed27d4a3dc
MD5 371dbeefc1d24006424438d6699987a4
SHA1 7080f54a29a6177594dae658eb6059f087dc03a2
SHA512 8a3ad7074d99e85dee9ad07bbf2ba4009ba04ceeb791a87800a7ba7c77db2f16b1661a8c65a23377b4927da29471d093ef56bcc80f06e5ea4b239e94e6c88830
SSDEEP 96:K0m5owKVmK3/yR1/hBx8VssaNxKC4afxeXvkNo04KROF:hr3/yR1/hBeVsRND4afUXvkN1S
TLSH
T16891E91235BB170079BE291984B58B2F528231B33058EA6F3FBD54A14E67F584EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0a2040d9-5b48-4f21-84c8-ba514e2b2c54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0a2040d9-5b48-4f21-84c8-ba514e2b2c54.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fbe8424a5c976f079f38b23b2c165b8354cf08307a18996e60aa97536fa0097e
MD5 8af17393dfbf1cfe108b69376340d9f4
SHA1 f184d6a2f0591a883b74bce19619f91e1b38836e
SHA512 16f8979cc5a65419ade53a924ea29735e2b11d10bc6843d44c38ea0addc032e566a3d34f61ef9bd8b16b52e6cde6c41fb5cfc21390d3801d93cb5750e31e5e26
SSDEEP 384:aZcIhsN2TswqZSKdOjTVY9di9rIQtgOIwZOyxoa:YhReQnSVQXsc9
TLSH
T169828E366C782C776DE7A101E58B36038FB88077DAC66B90A4FD9B1D01DA5B8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2e05cb7647dfb0b520d6883c5311f985b66ffab083b54f62c9b7d1d0eb4aec81
MD5 032eda60d07bf5f66d74e6318e97041d
SHA1 4f8cf3d44ceb79a97290baef0f2a827c256e3321
SHA512 8990e80ecf085fc7ab7c73ae2da13839056b506952bf693a092e4e1724da210619addac5c568ed9167ef49a3e1d647c161d1178afac0939b7612841a1031860e
SSDEEP 384:EZcIhsN2TpwqZS/G2OjTVY9di9r6QtgOIwZOyxoa:ihRSGNnSHQXsc9
TLSH
T1CC827D3A68782C776DEBA101F58636038FB88077DAC56F90A5FD9B1D01DA5A8130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 90e42123991466acd6b078b6e5814f95d35a7d646662e6a546bbb439c58c748f
MD5 9ba189e407e1634c10421fa45d11c5fa
SHA1 8363b3446a0a4980dcee25fbbe03213b67f0bf12
SHA512 da341086d543ba96b4969804e06fb1d5de53e6386f2b9135b01bb7ddefc7a7089ba2e13a2fdab5a49e2906bca4efcc2d199ff48445973d120ea6bd7edd0603ca
SSDEEP 192:SON06ygpQmiUyRxtOCTVgLi+FdVsLzPIVU6:SON06lHetOCTVY9diPoU6
TLSH
T1BC02C739AC783CB78EB36E05F48737179FA4116BEA562B80D9E84E1C01D766C2306C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 26c3855990b419575f520a3565f5039b0dfee1ec36bd88abb024da8cb38482bd
MD5 bb4301100e69f39c402929985cbef7d3
SHA1 011507606a8bbd202bd7e5b8d8118ac32f6dfc4e
SHA512 2c850464c14e6e0fca6117faa690f6c92641a9e749902d8e043ae035b8092985c8d0adc90623b8b44142db22d3b9e18a21cfb1e533f29014cc6f7562e2c905e0
SSDEEP 384:MiFiZcIdzsN2t8TUNTUlIlpwqZS/G2OjTVY9di9rSQtgOIwZOyxoa:3FQlRtwgsGNnS5QXsc9
TLSH
T189A26D375CA85D7BAEFB9A40F54A32038FB84077D9D5AB90A2ED9B1D00D61EC130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4a7f2d8f2582dd75b5cbe948b057a472f1ee055ae1a3fe9b04d514d697987a78
MD5 08b9cbc74492837a69e63083ea6c0fa0
SHA1 43f3f77450f9dda2549dbe0543e529050001f887
SHA512 23a0e192980dd55db8161756ae698d5186e6414b5afe444c45288ddb23bb154407c4863b3c17d42acd08c66ab68aed6b677e71b1282e7ca61ca6f0d2a7654033
SSDEEP 192:SONyS6y0QmiUyEx/OCTVgLi+FdVs9mQNl3Ue/HU6:SONyS67j/OCTVY9di9rmQU6
TLSH
T11E120939A8787C775EA36541F08736139FA88167EA867F90E5EC5F0C01DB6AC2306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 153f2f347c1e71faa0b533999e890bff748ece5c99c2c24443ae102726d7a65f
MD5 8db82f042e8ce754c0e6c6bb6e718a64
SHA1 e3d033695eb53673da87fb76cada799d260d4e72
SHA512 93beb3e13fc9f6c60a53889ed888db7851c73a2e9512d39f6d272b865bd081b17c9de81f28bb29aeed49e7495b8eb8a33ae48247fa300481b2ec9f4cf43381a0
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe58f26a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58f26a.TMP
Size 392B
SHA256 fe944cbc4d5e53ebe060216f68158e47e4fef4fba086084ee52b10027cf11802
MD5 52dcd75b689a2e3fb5a5f5fcb2d3b2dc
SHA1 8ad9be3c874fa2eeb1c1203974ab1e0775b92aa2
SHA512 ee088f3ff2f435b78947569d2e1433076f98bd022ea91fdcd484f23dcd66a79d9924d4274b3514ac0fcb9ef0d7fb57217a281814ebdbd79cf182aae13a2a6fc7
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 db42b3540d59f209cad8364e7be7167764b0d8d30550de3793deb0612ebb9981
MD5 fc155762438059913a88b9d7523b0a48
SHA1 c04fb2a3646f815b2f82491b4f4c9a93adc8cb20
SHA512 099e3ce9d778a189a587ef0f364e8d12a49fd65b2ff64008334d4d2e8b5977ad68e7c34bb78d634af01d354975ae3a555f00a5c635e8e5c3f6b54a028e58f3b4
TLSH
T11C410698B6F91144B3B77E5AABF6A8AD487E79372F07D49D00110E4E0A62B44CC71733
MD5 SHA1 SHA512 TLSH

Submit Download