hxxp://youtube[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/07/2026, 08:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://youtube.com
Sample260703-krss3aaz5p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3632	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275422465050293"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{45C1444A-1B71-4798-955F-208750D0BDF9}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{6CD0AA8D-8A0F-4AB0-9112-84D328A25243}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5808	msedge.exe
5808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4800 wrote to memory of 5060	4800	msedge.exe	86
PID 4800 wrote to memory of 3632	4800	msedge.exe	87
PID 4800 wrote to memory of 836	4800	msedge.exe	88
PID 4800 wrote to memory of 836	4800	msedge.exe	88
PID 4800 wrote to memory of 836	4800	msedge.exe	88
PID 4800 wrote to memory of 4660	4800	msedge.exe	89
PID 4800 wrote to memory of 4660	4800	msedge.exe	89
PID 4800 wrote to memory of 380	4800	msedge.exe	90
PID 4800 wrote to memory of 380	4800	msedge.exe	90
PID 4800 wrote to memory of 380	4800	msedge.exe	90
PID 4800 wrote to memory of 4444	4800	msedge.exe	91
PID 4800 wrote to memory of 4444	4800	msedge.exe	91
PID 4800 wrote to memory of 4444	4800	msedge.exe	91
PID 4800 wrote to memory of 2504	4800	msedge.exe	92
PID 4800 wrote to memory of 5024	4800	msedge.exe	93
PID 4800 wrote to memory of 2504	4800	msedge.exe	92
PID 4800 wrote to memory of 2504	4800	msedge.exe	92
PID 4800 wrote to memory of 5024	4800	msedge.exe	93
PID 4800 wrote to memory of 5024	4800	msedge.exe	93
PID 4800 wrote to memory of 1568	4800	msedge.exe	97
PID 4800 wrote to memory of 1568	4800	msedge.exe	97
PID 4800 wrote to memory of 1568	4800	msedge.exe	97
PID 4800 wrote to memory of 2024	4800	msedge.exe	99
PID 4800 wrote to memory of 2024	4800	msedge.exe	99
PID 4800 wrote to memory of 2024	4800	msedge.exe	99
PID 4800 wrote to memory of 4608	4800	msedge.exe	101
PID 4800 wrote to memory of 4608	4800	msedge.exe	101
PID 4800 wrote to memory of 3136	4800	msedge.exe	100
PID 4800 wrote to memory of 3136	4800	msedge.exe	100
PID 4800 wrote to memory of 1724	4800	msedge.exe	102
PID 4800 wrote to memory of 1724	4800	msedge.exe	102
PID 4800 wrote to memory of 1724	4800	msedge.exe	102
PID 4800 wrote to memory of 2540	4800	msedge.exe	104
PID 4800 wrote to memory of 2540	4800	msedge.exe	104
PID 4800 wrote to memory of 4944	4800	msedge.exe	105
PID 4800 wrote to memory of 2116	4800	msedge.exe	106
PID 4800 wrote to memory of 2116	4800	msedge.exe	106
PID 4800 wrote to memory of 4480	4800	msedge.exe	107
PID 4800 wrote to memory of 4480	4800	msedge.exe	107
PID 4800 wrote to memory of 4480	4800	msedge.exe	107
PID 4800 wrote to memory of 2372	4800	msedge.exe	110
PID 4800 wrote to memory of 3948	4800	msedge.exe	111
PID 4800 wrote to memory of 3948	4800	msedge.exe	111
PID 4800 wrote to memory of 3948	4800	msedge.exe	111
PID 4800 wrote to memory of 3792	4800	msedge.exe	112
PID 4800 wrote to memory of 3792	4800	msedge.exe	112
PID 4800 wrote to memory of 3792	4800	msedge.exe	112
PID 4800 wrote to memory of 2892	4800	msedge.exe	113
PID 4800 wrote to memory of 2892	4800	msedge.exe	113
PID 4800 wrote to memory of 2892	4800	msedge.exe	113
PID 4800 wrote to memory of 6064	4800	msedge.exe	124
PID 4800 wrote to memory of 6072	4800	msedge.exe	125
PID 4800 wrote to memory of 6084	4800	msedge.exe	126
PID 4800 wrote to memory of 5408	4800	msedge.exe	127
PID 4800 wrote to memory of 5408	4800	msedge.exe	127
PID 4800 wrote to memory of 5408	4800	msedge.exe	127
PID 4800 wrote to memory of 5512	4800	msedge.exe	128
PID 4800 wrote to memory of 5512	4800	msedge.exe	128
PID 4800 wrote to memory of 5512	4800	msedge.exe	128
PID 4800 wrote to memory of 212	4800	msedge.exe	130
PID 4800 wrote to memory of 212	4800	msedge.exe	130
PID 4800 wrote to memory of 212	4800	msedge.exe	130
PID 4800 wrote to memory of 1708	4800	msedge.exe	132
PID 4800 wrote to memory of 1708	4800	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://youtube.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffef85fc188,0x7ffef85fc194,0x7ffef85fc1a0
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1772,i,7531098157637065848,16516053610057743064,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,2429981007617749147,8257320653310031675,262144 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,13081445917390067181,12414994473788546507,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,13654964156136845282,5344961232222520994,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,3650966383538721106,13417061083236636201,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,9135132835797905063,13766797622520137673,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4164,i,10985521364489712393,12033653068438368217,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4992,i,10676781681495442637,12446620161427375891,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5280,i,7027252112185889148,12667293054757234810,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,18047184864683152046,5532413718009995954,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,13501299725475165573,18414644414986251924,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5468,i,13116858218730415589,13917500273139201459,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,17562200484212497374,5961440571164476071,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,10719892509647236066,12761570117154432127,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,7769572713483594314,12330830484182333462,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6824,i,10058414617753388670,11189842829392400065,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7196,i,14292329751164706815,2033973227458070955,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7216 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7196,i,14292329751164706815,2033973227458070955,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7216 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7412,i,5437123932792001588,10911882426625229549,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7424 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5816,i,4483516109787058846,9125024859587183873,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7720,i,11814064973070333515,9627038860870785775,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7292,i,8922668478352116826,8359495961407935937,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:8
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7268,i,2935119902691775531,5335584490646126871,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7276,i,14575018984947698003,1459893465238832955,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:8
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4888,i,9888845052662504924,2892550860114100841,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7432,i,5443952877039926827,18089268685414395041,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7464,i,6962807142434792005,17756934200242902306,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7896,i,13569083589460317943,18014776745483991827,524288 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5460,i,11185263608253265156,7948589235639032734,2097152 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7536,i,8259048004105217057,14289556128652483208,262144 --field-trial-handle=2200,i,12935436671913945137,12333871499333082573,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 c9f8f02b55c48f70a3a7a9bb7741cc832bfe393d5e4ff08060e7e466e07c2103
MD5 83611e0926620ebabb74891cfa7ab12b
SHA1 56ff7ca2a203573d5b80622fb5c2684c036b352a
SHA512 eca92539b8b608064d87af7da9845b7934ad91444f993c58feb8665d084d255043cba6a62a51b4299a9f66c89ce02ff7bc643cd88349876257c5b38b3937fa85
SSDEEP 96:22FGPPzEMnsgant68Q8jwTL+cpqkVDWvCg/Zmue5XZzl0Tcu:22FGDbsfM8Q8jwfpqkVqzMHnvu
TLSH
T1C2020D3483ADC691DFA1477941F8091671BCCBCBF80BEF4601607B3E578B38952ADA62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe594f7e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594f7e.TMP
Size 3KB
SHA256 e97f59e273abcd76fe5c47f30d9b8c2cd1ff2063494715d10e0993f3645c1546
MD5 e5b4d5d503262a4b955228a19d5b3ed3
SHA1 08cfceddb5222cdced80d93366607835e7ec9c0d
SHA512 4fa8d7ae0a9b5873975473c3e118e286136edbffbd7c9f78c3604560d6be2691c17c53913e19c8f3a8c729cdc79dd65ae6906efc89a7d254d580c5c4cf1bd558
TLSH
T1AF710939C50E58A5E7D1133291E10157B87D86DBF803FE8551A0BBB717E4713869EC87
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 c8010ab482ba438d3dcc2bcd3d5d9c747ead0e90915255109a20bbfcd75051b4
MD5 4e409c39894ca59a847ce5ce25f8a972
SHA1 917fb466ca15d142de149fcc0f6222cc0c16401f
SHA512 e9e9c363beccc714f46978262a8174305516885ffdfaebc3bd02cbc106544d755d191113d093a842c9b4c4f956d7b1380fe93dc106545e83fc24d2bdd8b5b91c
SSDEEP 192:D7OQi0Npn1iDhdSZwbeDdvc5atocZCO/kP2av/vu3WEVo:D7OQi0Npn1iDhdSZwbeDdvc5atocZCOc
TLSH
T1BEF1C0F3C3D5822DD81156F0EA147E1BCE6D196543683C29C9D4BF4BA3F2471E262A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 4faec9d4af691196356a3a2faeffdbea23d881faee834c5591768e6974463736
MD5 434fd3aeab7e018e1c0f0a150d4f47f1
SHA1 941b61be85f12d6f20491207a585e67138bae9b1
SHA512 462ec01a0317d5fa855a15a3f536c0f1e549001ebd8665eff15859f8563660ff27307258e23e4fe476e9e15a4cc68904844bac59b59bc92127b14de80bbcb613
TLSH
T1C5D02333360574B5755D3ED99055AC8FCB3611780C02EDD521D059590D3245C8517145
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58c80e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58c80e.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 edf9d0de461193edf4e534c32268993044d1c3965577894a09987a625e495e87
MD5 e723c5303612ff953e00765000507aec
SHA1 64b2d2a26eada974473e5c287c016c4db7213b4d
SHA512 8e8b120732abf83a788274440b5f23446c3b6397e1bc9c4e1f1429dcdb5e96c55cc2236ef17b551b2e09d9e552f6bb6a2fa3f1fb24ca1f61773f6c5640d52c5d
SSDEEP 192:sxZRrQUngR6yM/jK1Ml8MWOD/fDsXd/G+pjVbqWhdpm57QujHW6+WNB5eUlz/YzK:sxZR/ng8uOD/fDstzpsqczHbiC/DZ9
TLSH
T13A62F9026A34697BCDD7D229F911BB67D6F50063D6940E58AAFC8A0C04F7BED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 bd6ad55520c98340840fc30b63e644ad2d7b02c5232344e8973116e9d9f5d6e7
MD5 99c755fb57a3132e843d8193d97c2264
SHA1 5bc17830e3baca58363da7f63ef67243ad214008
SHA512 bb385074c00a0afa1a5290759feff4b273a229fde14e27ae398c16804f0dcd432cc7fe6e24c802008441dba40e79c047bd03227ac4db20209e1f14ae8514c7f9
SSDEEP 384:sxZR/nz8sm1D/fDsRzpEY8VHbS5C/tZ4+v:spPzFm1D/f+z8VHbTpv
TLSH
T10A82E7526A24997BCCD7C619F935BF27D6F400639A544E5CAAFCCA0C04EA6FD260381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 ff095071bd434af528f5176c9cc2372dc53e18a6b161b150ee2355ba5dd968e8
MD5 d02c0a9740b9a74d892be06de3588a34
SHA1 a534ca3c56a4135cf09db099c63dce84ec0a42aa
SHA512 a81f1952e0d51ba48a45c947c69e0ed9598535c9c291da71c92f595766b858e8d43d2cd01adae0a080059b4216ed946e3483985155c03e077abe332d1cfcc093
SSDEEP 384:sxZR/nz8qYm1D/fDsRQpLY8eHbSQa/GZS+v:spPzLYm1D/f+Q1eHbqYv
TLSH
T11A92E7536924997BCCD7D619F931BF26D6F500639A540E58AAFCCA0C04EB6FD260381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bcbef22c4dd0006327827487f6963cc2342e8adf379d83c476f2737d68b9d7e2
MD5 0c97bdb3e30c1b09a902e40b55dc19c5
SHA1 e06bccb74592176c2b70c49494809ff76126720b
SHA512 7e081eeab74adcc4619b04d962b075ced7bb4c509d6f6d14d000452482168e60cb0fbdb990974a96392818605bcb6ed54268aa58668f313689b41bf46fe11395
SSDEEP 768:OxW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjxroIvijYw:OxW7kf0Wvqidau1jaa5LA3jKcw
TLSH
T16CD20B3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB7EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0704304b-ad21-47ba-8f00-54cee103d3e0\index-dir\the-real-index
Size 120B
SHA256 05b81a15ac165a3810e9ed8e60eae22231d502338b4cfa6828b6767176e4a406
MD5 d4a453ad3a4ea7ce9a726c74a28d5d0d
SHA1 6d413f1a3751a49dd7a008049b89dae091d03cc9
SHA512 e77daa7ce5beea16e438f88b60476535ba1bec5a2d4a5131c604acf368cd2a69748055e333047245a20023ada0bad6f313dd08b0631581250eaef11748888c98
TLSH
T1E9B0125C83741680D40145FD5A81168154631E21F985024F80F432B1D0A17CB42074A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591ca6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0704304b-ad21-47ba-8f00-54cee103d3e0\index-dir\the-real-index~RFe591ca6.TMP
Size 48B
SHA256 cd19a887a196e325e404ee72714139226742a3449d72450424b145239ab8a5b8
MD5 d2663253458e31a06745410ab014b145
SHA1 5ff03ca4e4a45525423bca01e56e55a0c288f37e
SHA512 77131d6eb91934e8696c539ccca2f3f25361e27f1b8dab537176f3761a12676a03a2442e02f371af3883fa00c923c1f8b3a80eb8c898720160c6e4256d581bd1
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 f431cba9d92c9cf9641025c18cc2085afab80ac7ff96b3e716c2018997a5d584
MD5 662dc8f126d938988190a3cc69d98828
SHA1 a7a217d75f605098834eb4e6b68c24f9f3ca2261
SHA512 7d5d8c495c6b7c95f85ea85ebcea310982e94768d50fde669640e27888a6a7951e8339e9e7c64d04c402eacde5cc0b6f8ca78e3e22c1aa123ee4296f58f8b0bd
TLSH
T133D023E97131CC5E5B3197C42038149DC11F9D28DC82CCF0954471132878B03C003937
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 0a63b2e6dc91ca1d46128fbed8ef96d9ab7966a2583805715cfd0f3ddeb072f7
MD5 556f9617bdd89986e5d8666ee2ef5f80
SHA1 65260d57107bab802a982fa3676f93e64ed38652
SHA512 a8ff41f58429082fc4f71aa56f1e1a66f6014380bb98d3ee9f0ffa2ae53e306e641d101d3fb0021959c0205dfd4803b924757776518880789d74f7a2e2b5ad64
TLSH
T173C092E36410CA9F4F31ABC825386E5ED61BA25CECD0CDF4E148A5066879A13D803936
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 131B
SHA256 b1f1e08fedd080e7d5ffdb8e5bd65c40eb7118517b3520e9879bca678fa28eef
MD5 92ff132ac28137741b74936b7f21ef88
SHA1 7709181068521e231a3f2fe127c72b84640c3afd
SHA512 e7c4e4590fc1095bfc5c8b3a6277f4aabadc172b661e74038bc981343152225ffe9cb947af6715c0cbea13ec10dc64a9295faaee4ceda3baedc1f780b160dd3d
TLSH
T1F3C092E364108AAF4F31ABC82538AA5EDA1BA24CECD0CDF4E148A5066479A13D813977
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58847d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58847d.TMP
Size 137B
SHA256 86d6ed7a1eb438ac9d1388a929ae48d76d508b020db438a87d9f5ad78fdbc926
MD5 4f6ffc7e63617ccac83333025aa5f954
SHA1 bd2cc63311f3b3ecda5c6d5c00a6426c9fd66c52
SHA512 bf52b8f9522ea3d947543646b9fcba229c41df6df0b5f3d587888edb45627f63a22b68febb456b960c687d0bfc09362936e43c9c3f2a6ddb134dd846d62f07d7
TLSH
T1A0C09BD32510499F4F3556C425385A4DD51B5D5CDCC0CDF4E54975467474613D401D36
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 1657810d53c7270ddaebdeedba96e9ca9c13fefc6fef3743a5c7008946693eb1
MD5 24544ba8121a1075ec338b95f5ac17b1
SHA1 a39bb2e704585883d15e0cd50773678bcd05594c
SHA512 02872539d9dffa23a173ec5125ce1b7c8846b3c7fd1a667dc2de71aefad959144d1d51bc430723ed055a6895843a3832683b82f618fdfc66dacacb48f5800109
TLSH
T1E951C55F8C563A97CDAC227260B504C42B35B8DC6A845E3394FC853CBC8B32824A935A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 1KB
SHA256 7c26cd28e58ecb6050434f3be1bff76e9d81e2db675d35df6d5f53fdb0df3bcf
MD5 6cc4fee29b10b0a9a0d7d560cc2095fc
SHA1 9bd93fc6c6d66619c829b7aa25cb2b2830ec72e1
SHA512 b0cbc6c924ed1b1cdb6ad922c78b6a268c45bb0d9e07c817629092c7dc46fca54b220556bc9d7e3c445d88ed4dd8193a3b395a3069acc7f4838d42fa2510e365
TLSH
T1A531518A8E40D56FEAA444F114B761E937B0C6CD172262A38C7C363A7C6736A1E4F19C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5864c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe5864c0.TMP
Size 1KB
SHA256 32ca240b7c8b70362c989e5548bde8ee866890cec4e97274c8e4a5867806980a
MD5 c23e812d48ad6cd9956455ac8def8f20
SHA1 be93fad6ee8a4fb3b1fd3e8e6c053e9207f13884
SHA512 f0d6927ce05dc09db1ad2848e0d81ff1d4dc13bdad2619ca58bb26e1c1265266832385270b5b2a90b8cba5be7a8c11e7110eec58ce75f439eea017e7e445f9b4
TLSH
T17C31638A8A418A1FECD440720997A4B83379D9405312B787987C663EBC757BD1E5F0D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 445492f4822c1a5575bbce4bb28d7e30fb44b407207412f1f39c510076b4ab71
MD5 1bb528475032b0d57d9c0e252064e5a7
SHA1 160c79a50826e81d767b0873823bd6ad766d463f
SHA512 ba8fc211af6f29862ba5405d5a72a662a9b93bb7b0824eb97258984cb60c4e34ee8555b044c1a5b1df13b97c5abfa24c276304db611f6abb413a489335984a20
TLSH
T176A0025406C4C211D20317F426E7D141B3D149100211170E61DC6848C8A15D9494106C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 00295be26aeef2f44c2d606c076aa0cf72cba81e8fc5fbc554f0b931a7ad99e2
MD5 bfc0481d5d2d24b2d6cff0cb35d89e4e
SHA1 c2dacd8931907bb92552021b3ffba6dbe85cafb2
SHA512 928842ae26f78adc30430c012eb2276a91d2eab1325daa0fe88e98b07c8bc3629b083ccb9400656e80e5f1c1467ad86429d4aefec719ee7aceeff64a85dedc16
TLSH
T15CA00411CFC10017D41717F115570FC15345CCD531055307C4D1144DCD71F444D7100C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 af45a02750f4447b70a6007a2d8ef36540ae0b61154738fe2b1825e38fa46996
MD5 04dc3932018af4e13bad16f6aa16b086
SHA1 2c4f90401ae38359e1eb2f2cf3166a9413e9c467
SHA512 b8cdc63afa5be5fc012e104d842b864609ec63bb85a5b56048fad8ef155c2db4aa6b1598e048618a43bcc891ba2b4dc8ea50a15b78e49066837a09c5dda42674
TLSH
T1EFE0D8BB2DFB1824AD6F97D538B169A0818539589504EC4E3167A29770F2752280AC61
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 40f7fe23ede7ffc8865301e1b4a673c7b5d9e34afc542bf3dcef79708e4b8804
MD5 27fab845befb65915da781a40440774a
SHA1 279517f9d6befb823e18264d3af2122d76acf33b
SHA512 a41d58d0c15533a1aacd5d482115fa6619a16f6044793bddf01074a0b0e89287626f99cae43262bda72c57ae3f32dd8e27af592ae9ccff11f2ace25b81e5f7de
TLSH
T1A3B02451CC4D40F1C0104375745144CC3014CCCC370F110101FC045475103C04405401
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dacb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58dacb.TMP
Size 48B
SHA256 ca8296bacb6f7b18c457ac05cb7aa2f876c5cd56813f9d042e5c77e9e69d528b
MD5 1d74ed9d7266662693ad61ca477156f8
SHA1 4a9f854f7af81bf594a531862e7ab1db75699edb
SHA512 4acd102ba3e8dbd15f1ea4f24d9aa006a9a2a6c4273dca43ae06a8c1ba91dd2d59ab8a915cb42ba1ab7e4ff96d141fc2c3c29523d1598bfefff39acd2449261d
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a2bb24b0b47adf7f4f2b28fd8698824efc673b85d660094418f3cf1bf212b7d5
MD5 8d051e0a9eb007c3daf1dc0fc6944a72
SHA1 3aeb1531e8a1633be411edb97b747890cb9e120c
SHA512 e23aec4762b315460525fc6501e49a05f07efa862012f0edd2d0bb85144e334a6be03d95080129eab412b7e119441b99016eebd5ceb5af897b9c6369b4c8ac73
SSDEEP 96:KIbCKcWVce7KKcE2WBiKC4SstY826ucWKHHgEcK4JgOccM8nmMBg:sWVc5BVBstY826uDKHAEgJgODM8nmMBg
TLSH
T1BFA1A51BB13A1301383D6D58B56B89765F8776A33108A8AF7FB814660E67E124DFC8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594193.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594193.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 4c4a2612dbc0df2500ee5cd0716b534bda65d63dd61812e869ea634cf4c62b28
MD5 08dab51b17953ccc612a35d5927f0f0c
SHA1 ade55d8a45e5fa67cd906afde7193ab51f8e3437
SHA512 fb1f9be2e807839153fdad39437567149124ceeedfde781b3713713ab4451936adf0378ed5fc39a10397bb14842861916abf5d4d313222ec9ba6fcc52f222849
SSDEEP 192:uzWLsN/07Tbe7LTBbalawmiU1+/iROaGBPKRV+FdGy5gk+2VdNnq+U8:9sN/07TbEpbf2xzd5L+2ZJU8
TLSH
T179421A366C74AC2B5EE2A255F04736139FA4412BA7C42F94E6DD9B0C05EB3AC130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 6fd612dfdf7d5793cc781ddd5c873ab96fb4a256db4c27c5cd207a100eda95a6
MD5 2fb31ddb77d15267fb3a6a793fe4ce84
SHA1 fe182e1940720cb00283f448c83609f7b01f4999
SHA512 d3943f30bd57930b29d14b40b633143b0539c904f80ab3b24628e2f08f782d0f8a45fbb6ddb141d8fee9620256b5148ff5346e371f71d00a656b276f6965c757
SSDEEP 384:4iF1tNn/s3n9SXzsN/88TUNTUlIl+TbEpbfJxzd5L+2+JOObjI9G6w7OQ:DF1j+9cBwg8UVZrl+J29Mt
TLSH
T198A26C335CA49E3B9EA69B95F14A361B8FF441BBD6C46A94E6DCDF0C02D72EC1306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 513abf5589e1680e224f7c5568e4a8dd36389a88a0eb5058de87d0c479edd5c2
MD5 ce5fe937b0c5e2b3f50fe48a1edfd615
SHA1 6d005dfe5da7a512f2fb69ffd568aeee3a7220b5
SHA512 7d6ee5c17b153311ba0e9d7bb9695aa8d36fd66c8a9db7085f2f6b3de2ebf61188bd9f21e4b3a1e1aeb1faec54e78defd18e29409f3b3bab2214b91dbd57706e
SSDEEP 192:MONT64BAQmiUys1TW5GBPKRV+FdGy5LaDBvPSU6:MONT6eAzlWcd565SU6
TLSH
T16D0209356C787C6B9EF2AE45F48737175FA8107BEA806B44EAE85B0C00D764C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 533165a8f5e43d365b39045d698cffbcb60d1b3adb5615542bd953ffb3dfc8a0
MD5 933c98bcccff08f92cae8b714c80454c
SHA1 ecadb9e92ed9b0f9b9f793bb56b46c8387e59b32
SHA512 00ae32c545b10056502a4f64c7d52a15b3d3881be63649c5312a36eb6318cd32386aadab38c490d57c6bad7b1278e0bd78ebc9b829af70a2fb6f65479b1bcfb5
SSDEEP 192:vkONTB64BnYQmiUyvTic5GBPKRV+FdGy5gk+2wWwnq+U6:MONTB6e4qfcd5L+2WJU6
TLSH
T1A3122B366C74AC2B5ED1B555F08737175FA4423BEBC46B44E6EC6B1C01EF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 89dcf5940c3f346cc312d67f2192d091871ee08d81c3f364177a608c9e8021ac
MD5 70d6d62dbc381377493f176e83e4249b
SHA1 cd9b0f815c8569ee56b9057312803b5a1ba755d1
SHA512 a404337bfbe0e08b3c783643f4acda35d28c33624065db5dcccdf428d0c8623febaebc155e35a09267b21201053bb8071f41c6d906ae2cb818e5c56a3be8656f
SSDEEP 384:1tNn/s3n9SfsN/0+TbEpbf2xzd5L+2ZJOObjI9G6w7OQ:1j+9U+UCZrlZJ29Mt
TLSH
T1EE928D326C656E2B4992E665F0473A1B8FF8827B93C41F84E5ECEF0D06DB6BC5302406
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1b2ece3fefa81476d45f1872a348fa0668584d627f4f5bb4ace98376334dde1f
MD5 b4357a29fe2b0655b5263b1267f731db
SHA1 90dcb587fe02f4241726d38badcc3d14a7e07149
SHA512 5d155f61431b383b9c90a256c6742cd6a104efda7d55b22c2f9acad8836c986ae73296076077843eaca80ed3eba3cdfb76526dd3a96364a48bb24584a71f470d
SSDEEP 192:uzWLsN/0JTbe7LTBbalawmiU11Jid8BaGBPKRV+FdGy5gk+2tdNnq+U8:9sN/0JTbEpbf1m2zd5L+2RJU8
TLSH
T166321A366CB5AC3B5DE2A655F04736238FA8412BA7886B54E6DD9B0C02EB3AC1307416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0af89396a9b179e17747be2ce77bab30070d013ccf558dc4736f71cc1377c61e
MD5 57a064f0ee6d69b21b6d19e7b35428f1
SHA1 d9d77acd87ef1dfad07f6cf18677b42aaec07574
SHA512 2b88248ed9ead60204a91c68456bf51d675fa268510acef85616ebe700083d162d7c984a813196517e0ae7759bfe3e2784e23a8dee91bbdc694a68f8eb9977fb
TLSH
T1C2412B98A6E91148B3B72E5A9FF6A86E487E79732E06D45D00110D4E0667E40C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download