hxxps://ybj[.]jszwfw[.]gov[.]cn/#/Index

Analysis

user interaction
yes
max time kernel
899s
max time network
858s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 14:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://ybj.jszwfw.gov.cn/#/Index
Sample260804-rldkhscb45

Score

5^/10

microsoft discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand MICROSOFT. 2 IoCs

phishing microsoft

flow	pid	Process
304	1508	msedge.exe
304	1508	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1508	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303266139597622"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{06648073-8241-42AE-9A05-450BFB1B7A65}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4816 wrote to memory of 1924	4816	msedge.exe	86
PID 4816 wrote to memory of 1508	4816	msedge.exe	87
PID 4816 wrote to memory of 3940	4816	msedge.exe	88
PID 4816 wrote to memory of 3940	4816	msedge.exe	88
PID 4816 wrote to memory of 3940	4816	msedge.exe	88
PID 4816 wrote to memory of 2404	4816	msedge.exe	89
PID 4816 wrote to memory of 2404	4816	msedge.exe	89
PID 4816 wrote to memory of 4364	4816	msedge.exe	90
PID 4816 wrote to memory of 4364	4816	msedge.exe	90
PID 4816 wrote to memory of 4364	4816	msedge.exe	90
PID 4816 wrote to memory of 4928	4816	msedge.exe	91
PID 4816 wrote to memory of 4928	4816	msedge.exe	91
PID 4816 wrote to memory of 4928	4816	msedge.exe	91
PID 4816 wrote to memory of 5068	4816	msedge.exe	92
PID 4816 wrote to memory of 4356	4816	msedge.exe	93
PID 4816 wrote to memory of 5068	4816	msedge.exe	92
PID 4816 wrote to memory of 5068	4816	msedge.exe	92
PID 4816 wrote to memory of 4356	4816	msedge.exe	93
PID 4816 wrote to memory of 4356	4816	msedge.exe	93
PID 4816 wrote to memory of 564	4816	msedge.exe	98
PID 4816 wrote to memory of 2208	4816	msedge.exe	99
PID 4816 wrote to memory of 564	4816	msedge.exe	98
PID 4816 wrote to memory of 2208	4816	msedge.exe	99
PID 4816 wrote to memory of 556	4816	msedge.exe	101
PID 4816 wrote to memory of 1664	4816	msedge.exe	104
PID 4816 wrote to memory of 1664	4816	msedge.exe	104
PID 4816 wrote to memory of 1664	4816	msedge.exe	104
PID 4816 wrote to memory of 1044	4816	msedge.exe	105
PID 4816 wrote to memory of 1044	4816	msedge.exe	105
PID 4816 wrote to memory of 1044	4816	msedge.exe	105
PID 4816 wrote to memory of 1036	4816	msedge.exe	106
PID 4816 wrote to memory of 1036	4816	msedge.exe	106
PID 4816 wrote to memory of 1036	4816	msedge.exe	106
PID 4816 wrote to memory of 4696	4816	msedge.exe	107
PID 4816 wrote to memory of 4696	4816	msedge.exe	107
PID 4816 wrote to memory of 1948	4816	msedge.exe	108
PID 4816 wrote to memory of 1948	4816	msedge.exe	108
PID 4816 wrote to memory of 1948	4816	msedge.exe	108
PID 4816 wrote to memory of 2628	4816	msedge.exe	109
PID 4816 wrote to memory of 2628	4816	msedge.exe	109
PID 4816 wrote to memory of 2628	4816	msedge.exe	109
PID 4816 wrote to memory of 2040	4816	msedge.exe	114
PID 4816 wrote to memory of 3284	4816	msedge.exe	115
PID 4816 wrote to memory of 1608	4816	msedge.exe	116
PID 4816 wrote to memory of 2996	4816	msedge.exe	124
PID 4816 wrote to memory of 2996	4816	msedge.exe	124
PID 4816 wrote to memory of 4428	4816	msedge.exe	126
PID 4816 wrote to memory of 4636	4816	msedge.exe	127
PID 4816 wrote to memory of 4636	4816	msedge.exe	127
PID 4816 wrote to memory of 4636	4816	msedge.exe	127
PID 4816 wrote to memory of 2712	4816	msedge.exe	128
PID 4816 wrote to memory of 2712	4816	msedge.exe	128
PID 4816 wrote to memory of 2712	4816	msedge.exe	128
PID 4816 wrote to memory of 4968	4816	msedge.exe	129
PID 4816 wrote to memory of 4968	4816	msedge.exe	129
PID 4816 wrote to memory of 4968	4816	msedge.exe	129
PID 4816 wrote to memory of 2164	4816	msedge.exe	130
PID 4816 wrote to memory of 2164	4816	msedge.exe	130
PID 4816 wrote to memory of 2164	4816	msedge.exe	130
PID 4816 wrote to memory of 2388	4816	msedge.exe	131
PID 4816 wrote to memory of 2388	4816	msedge.exe	131
PID 4816 wrote to memory of 2388	4816	msedge.exe	131
PID 4816 wrote to memory of 3100	4816	msedge.exe	132
PID 4816 wrote to memory of 3100	4816	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://ybj.jszwfw.gov.cn/#/Index
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f4,0x7ffaa992c188,0x7ffaa992c194,0x7ffaa992c1a0
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,15938054594797467659,16364232981457502107,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand MICROSOFT.
  - System Time Discovery
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,10710275593371013648,18378034923011376880,262144 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,10873354182793445010,7858538517137183235,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,18234956825107896671,10961333068200336819,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,190899410537972426,9058765654260544643,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,4381620666214707981,4861322861129548558,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,7431468158035830102,11850392360975652289,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,6805041223609666620,16607544108223418322,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,17618958151957109625,17661402838685669238,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17487560746957005408,2441419713577598053,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17487560746957005408,2441419713577598053,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6272,i,10939239442766741975,1253430012242525915,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3560,i,15874653873806532430,14244417361576719543,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6208,i,14838349436315302361,17057219387680254127,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,2875753088004181825,5798515615321897563,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6708,i,1458322373718755761,3513644582809624075,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=3452,i,7660282653832265638,7853238123579993745,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,18320208921266067144,9529499427622742627,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,10243848094815484023,3146502586943738327,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,16423377502202091034,29442083563192890,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,4492035844075738202,9022567745870598077,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,17178770906966457584,4864843159870503898,262144 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=1032,i,13346788722566257286,8895359380453662833,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5828,i,9640042652585106114,15860375656367759965,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6660,i,12686404554120033795,5992385215102363062,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7040,i,1017365146608858481,5109569773477072420,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7108,i,7314015859582929316,17739662343077178842,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3900,i,12939323077398125350,658789421938300297,2097152 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=7400 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,7776426531501407739,7492707705000593961,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7156,i,3582599404623805998,14057607689820627007,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:8
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7624,i,2384775032211842726,15128400085015140748,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,8180478140807292827,12190865581090942063,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=7804 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7088,i,902578874387703716,2816135984678128562,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=7540 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,6713226414503714730,16447730675688858737,524288 --field-trial-handle=2128,i,2440088307960397237,1872287113913872321,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
  2⤵
  PID:4180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 03c9714ceda41208919b91db8014de24ae37606ed2abc96a2531b3653937df48
MD5 8c2296de8b61220530f453b2f30415dd
SHA1 2c66c88bc6a0f8267af3c1881fe9195ca1582177
SHA512 c741a1ee72d19a8af3a3823ca6df21b2e3afeeede73da7c80eb421ce9f7370fb162d00a8565078ba3856a8ccf78493a4b12f92955afe287b59ec5f2dc6911402
TLSH
T1E7D023307A3671C0C21E0030E4110B40236E40B230CF43476194440DADB40C1D2DFEC7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d3e7368d5533feee2463da5c6cc4afee2ec571b789a42c2c8e17d5ffa534bcab
MD5 c3a7700bff8e53100e51c3ae62680f25
SHA1 4ecf268966dc5676bcf52e434a9374e44567bf8d
SHA512 3a5071c5d40db8d700d5b412a3233ec92023968556cb054e670d6b66e54135e5d929a56dc07f5688e0b3e11b7ed9622e92b3ba6ef8933f190386ecfe09f0b8b2
TLSH
T18FE0268504C8CA3EA64464CBA2E8970C83E03A4E9EC8E9CE1720888C7013471E3D2BA4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 3ad47949cc2494899fefdb65761639c6714b2062409bc2e84cee20cc98c9544f
MD5 1d1c09497bd4dbae96cebc33fead96d1
SHA1 f9083b4aaf98fc5ba9800e918de5c95ad30c7aee
SHA512 97211151872d41926a3f54b056840475d8b3ea68820622b1cd0b282a7ee3f1f29612cef21b969e76330c35c04f7c397296b18c8e57e103694ceefe897c9f5e56
TLSH
T139E07DA505CACA7EB640E48753F8630C83E03E4EEECCA9CA5708C4CA7003450B7D2BA4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 67KB
SHA256 25b05fb02fedfc6cce6cbb542030d8ab4e66c10b4d7ed8f3f309e7fea4ac9963
MD5 c6d0f9252d7d9a57f18b99cbdf8083f6
SHA1 fd0c5ebfb986e45d9fbc2ee61a563803e6dd4066
SHA512 745f28a5222771f269e95f323e4161fe2b9cefa2eb31675dd2b23cd33508734cff9c4d4290f57f1221d9ff953d834e2a008abb31df662d3720e23f35f2872662
SSDEEP 1536:QH5HZyBokKeTWIgCgEP+MuMtoVJDuUEMNIbU6eVKwuWvz:Q9Z1eiIgCgEluLfIbU6qfuWvz
TLSH
T13A630218A5EBE63A4B1405E4476A804F37154FBC20AE2E6F88CD760D18F17F59EB8C5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 405KB
SHA256 bb90ac8097da7c793676be5885f5cf00b9e5a27e30a878296c59d1b4ba27bb62
MD5 0af3640643657932c2b1de637482ecba
SHA1 363c3fce3a60b5a7149203ef63197f6abfafa9cb
SHA512 cae198a924008b8171580f9753b9c89e629875359b354ce62707e97429dbbdc00121af35aa083c14944cf274b60c1d103a123df475b8c5914834e1067ab5273b
SSDEEP 12288:ube26/DCSTYo5pgiLGQ8ktPC5SRP8l3xri6gXc:uK26/eSVx31t65Sp8rVMc
TLSH
T1AA9423D595D7CAD1DD9B04E6CAFFCCC1983072360E0CA1EE1B12B9AD493F96469B2309
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 4969bbf0f52188f757c30790d1a16b84bf1f27cb0b5ea514d6883b5e6a646675
MD5 df43cd333a2f4bb1d1c87402aa9b18bd
SHA1 995d833afd4c59454a6bcf62024b88aafbc1ebe2
SHA512 46527a18027344edbad45914605133df3f3a54176e21ef95f21a30ae648cba1f4579e44e1c9c1bde840f8921ed79995768ee4c8b8ef2bf59dfb3d6b58b7c6d87
SSDEEP 96:loqUODrX1nqXkVsmfX3nu7OY9aed019XWeJRUeWSRPqJDGGjivtFk8ywpWzbbTTH:3lDzxjLP3dY9y19pRNRQKGjivEQ2/33
TLSH
T19022B77097B31560EBB4B47E19E98E1079B1B6D6F7B32ECB800794B13A6F3A182740D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 16b80a2878c46d848a0f530dbad7104a66931796a3406c343fe84fb201ea4ea5
MD5 9e4e4b76d23d76e65b4f5833610c5d57
SHA1 32c79d94d6e16373a131c399bc90d5b221062d0a
SHA512 50f7b8c83fe3eeaadc63de4a07fb177783d67e11ef1f19effc12c06d5dc09ab122c93b22497bdd4f56dc3110b690fdfd25347b946ead9b5523166c2dc2591da3
SSDEEP 96:fGoEODrX1nqVkVsm0X3nuMOB9aed0W9XWeJjUeWSRPqJDGGjivtFk8ywpWzbbzTg:FDzxZL03UB9yW9pjNRQKGjivEQ2f3w
TLSH
T15412B97087B31560EBB4B57E09E98E1479B1B6D6F7B32ECB840794B13A6F3A182740D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 830159b8041f103f3bebea1e391ec1523daf21679a9a552985f1966de5440180
MD5 98c7332dbad18da577f61babae66f7c5
SHA1 28c1627837d4cedce6f00921533356e42665415e
SHA512 aaf5fc436382fb502b63c9585d033b9b39678f7e1b246be1c6d22c42828d50852d9272324d6950bd8a1bd4115b72959fdb365e45a30d48eea716fd9052a6bab8
SSDEEP 96:so22SBnqqrVsQzfLusX4me+Q9XWeOg40WSh5qJ7GjivtDtywpQHE2aR:RSl9pL94X9ugPh67GjivlRxR
TLSH
T1A102837083B30A60CBB8757E11E94E1479B2B6D5FBB35ECB940718B23A6F3A082741D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5983ad.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5983ad.TMP
Size 3KB
SHA256 b8cc179ee387621f31636160ee63119910c7e0b382d43c27c07d5c298a567084
MD5 05272da2d2d132dbe65af2eeec124508
SHA1 2df8913ad7a57db4779689ca2a353d72b5acec17
SHA512 f8973015502eeff1e1a1b00c5a5c4ecb68535833385bb91571a29af72d61814e2647b7db5209f8038a9996438e500c434fc33b9224767dd7bc847333e0b0dba1
TLSH
T1C3619138C78349A1D76174B290FD0F24787687E8FAF32D85D8A829346F1B351C3682C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 6aa0e5ac5abe81e2c2382ebfd90c4232f90f915ab585df0cd1e782617b8453d6
MD5 7dd8fabe9bd60054f884aa6c7a3ec1d9
SHA1 ab4e06c607821af14c2042fb1fd766f21bf4ef28
SHA512 999326b880624afa683c58839a573de8710cc05484041e44b4c82fe0ae8e6a858d3f007ef42aa16346bbc46591cca171fcbebefb6dbc4640fe691640b65f4d7c
SSDEEP 96:D+Otg5THBzBc5GZUtHzRBo8zEtSg7/GtwQ:Dttg5THB1c50UtTHo8zISg7/GtT
TLSH
T1C691BAF3C7E6426DC91196F09E186F1BCE1D0546436C3C5A85E4AF0BA3F2471E151B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 832cbe02cf1f39228dddf79af89f5c97cf122974230341271a64b084a57e7ce2
MD5 7571bd471502601d65b0eaad1fc43c1d
SHA1 24afc8812e4e00ff8c4c882ca7f78dc9156546a5
SHA512 7ccdf7c2afd56aeeb17c0bf4ce0a1953fb83108ff61ec4dc30382379685b9c8bdba88c7f5f0c4ff67b7ef468b49904a966730c42c77ab831b4758a23ea797498
SSDEEP 96:D/OEpMRG24RzBc5GOtHzRBoizEBG/vtP884Ybqb00MvBABq1BsuBewd3zZIowBGO:DWEpMRG24R1c57tTHoizgG/vtz4Uqb06
TLSH
T13FC18AF743B1866EDA1195F0DA08AF1F9F1C0156436C786985D4AE27E3F34B2E042B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 be9e20ff2fad829a45a4eb5a410b9f01c2a78308ab51fc3fae2abd1856599823
MD5 d94ac013510acf5b48a6d4545b0db374
SHA1 aa998d10229b27caff2ca821479b94f761b87efb
SHA512 72e581de27524ac91bdde792de299a70dcf21daf5af7c1bbac39fc0acded1a4ecb6d4314f7b88369ead4de60696a090eb440cdbd555ef21d5558d3b0bd90bf06
SSDEEP 96:D/OEpMRG2dRzBc5GOtHzRBoizEBG/vtP88PYbqb00MvBABq1BsuBewd3zZIowBGK:DWEpMRG2dR1c57tTHoizgG/vtzPUqb02
TLSH
T12CC18BF743B1866EDA1195F0DA08AF1F9F1C0152436C786985D4AE27E3F34B2E052B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 26017c66ff92f703009f864bb8c724b4af711814833ab59415b1b5446a04d63f
MD5 b52c060ebab53b00edb0d2abd3f34bba
SHA1 6d917260a896b136c8405818a517798eab1d117a
SHA512 40471d855a53de0925a06f46813dc8fe94bf08bd414a690bd918bd598bf4f3f2a86148d38e9f9e0e02c2464453bd6591be956632261b01f8d45654f22b0f3724
SSDEEP 192:Dttg5THRdZ1c50UtTHo8zISgvtzPUqb0060qDuGkFeIoeG3N:Dttg5THRf1c50UtTHo8zISgvtzPbb00k
TLSH
T189D1BBF387E5826ED91196F09A18AF1FCE1C0556436C3C1985D4AE17A3F2472F142B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 38af84d37137947fb7d16ccc4e12ccf244cdc7e5dce8a7cb9b75def2444370f5
MD5 315cb7b51c197cf9d97d52a238c239f4
SHA1 977eb198158960b603b2713106ebe0b7d166f24a
SHA512 9fd607750af13eb073a60b635b12e09ebc4fea581d6fd6c83e0c785844e2bb778ed20216cdea9b52fb6a7c69136439605e94a422dc62c578b7a13acff5ed59dc
TLSH
T1BED02223170230B6AD6C7F83546AFC8FC72A00612822EDD832E09D9C863A8AC4A1B240
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe595fba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe595fba.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 81c2c92ea2ce024f88b3321fc31427101244872b8b7b94967664e3e5260d3d6c
MD5 76e64fff39a60babcdc5f3b82745da5f
SHA1 dcf8a07dd0433671b5485d52cf34a508feb0eecd
SHA512 8d5052015151ed3ea48ad7a07ceaec893927dd7e35b3e92061fe4c9ffd3278b04c7a2077e2e43e6c8dc29d21c31ffe5e1f88257bb1ae6826c4bce76f4c970fac
SSDEEP 192:sxZDR+kD/fYYs3SxWIdpJHW6+WNGYzcqCnIgrJ:sxZDfD/fds3SFJHbG39
TLSH
T1D422A6526E28A47B8CC7D21DFA157F43E6FA5032A5D41E58F6FC961C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c8f21ff0d6f7fd7c1c359838d986f8a5fcc341415e5d5afca55a9231d916c177
MD5 9d16510cd598dd1c317171e8cedf4bfc
SHA1 f5fd931bd5e840a3832b23424201a2f610e00cde
SHA512 8fc0be80ece83f033068e794d750b7f1d25a73132597154b8379081faf986cd3f826554e56a0ceeb6c30558a8811a3521f173112c1e57e750b51af03e34a4c34
SSDEEP 192:sxZRQUnSR+WOD/fYYs9SeI93ebE1dpmp7HW6+WNBeF/YzuqCnIg5UJ:sxZ5nStOD/fds9S9D5iHby/B+
TLSH
T1B142E9126E24683B9CC7D219FA16BB53E6F9503395D44E58F6FC9A1C08EA7CE130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 ebfaf2a4afa3d78b435f990431d1841d94b3271e743643ad588a2ba8a25bf7ef
MD5 68acf424269d390ee6b9ddd03eb1ae9f
SHA1 7ac93efe9c17a1053244abbf068d18cb2a4a5f0b
SHA512 a0f0fe5c66cd4c88564e0de1401e92ed3a3bda2d488a81cc7565ec506c1b08be58f236c290fe1e12f9d4551b57bf25fb22fb31ad88c5d9246cb217704c9fe217
SSDEEP 192:sxZRQUnZR+0cB1D/fYYs9WMI9NebEyddpmhMJ7HW6+WNmEeFHGb/Yzf+CnIg52pR:sxZ5nZjm1D/fds9WVDM3HbqQ/Eimm0e
TLSH
T10C72E6526A20D8778CC7D619FE317F12E6F95023CDA54E5CA6FCDA1C04EA6EE1207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 01f0acb9f4b47010e8a0054706f88437196f9dcac3324cfa6d5c188748929dd4
MD5 d72d3b2a040a851d2aa2cd915e4e50f2
SHA1 d30f5744e5baf5d78b9f9f3594d2fd67c0cd466a
SHA512 ae52ee720fa0c43be4fd3fb2b4024287dc87dfcf4dad6fecf2864965dc324a2cedca9130c1fbe04bda7f47a6ed1bb7eb410abf4fba38fccd3dc023c796d28ee9
SSDEEP 192:sxZRQUnZR+dcB1D/fYYs9WaI9NebEyddpN+hcs2XXHW6+WNmEeFHDJXYz5JYnIgk:sxZ5nZ4m1D/fds9W/DM/HbqdXZimm0e
TLSH
T1C382E6526A20D8778CC7D619FE357F12E6F950238D914E5CB6FCC91C04EA6EE1207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 3058531e04dc3e3028f80bb09439c2bfc839062afab28fafb43854834b1571f8
MD5 383590d6196a9c410221b7576ad1f2b6
SHA1 0623380638e7c372f9c13e95a8e0ae87d3aa48ea
SHA512 6548aac2d99a431b452e5d3af60b5a9f1d1c5574d3d7fafca4e9ed5f48deac274281db9028b7ba446ccf2f86c68ff4ae841bd76ebec390cbf67f3ad57d9b87e6
SSDEEP 384:sxZ5nnXm1D/fds9366s8qMpRiYnazAW8pZS15posJWeT+C+DMuHbjfdXVimm0e:shnXm1D/f034Mnc7WeT+C+lHbtvm0e
TLSH
T144E20942A920C8379EC35D29A93D7E32EAEC50535AD5CEEE66ECC91C009D1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 f3cc2c26b80531aa65ce595db329ae67046e8a562db2736d48a33e2cf102220d
MD5 edf8eaf95e2f5110cbdc7543003024ad
SHA1 987a70776feb2e3eb5dffaf681385db79c48042d
SHA512 1d8dbb07e8f415519cdd93ee586026df98fdcdae37e56341bca8be9acedb601dd13a414f79160c7328471f6653d14c97b9e45bafd0910140b3100c62f0a131d5
SSDEEP 384:sxZ5nkQm1D/fds9WVDM+HbgoZHdXuuIimm0e:shkQm1D/f0WVhHbPN0m0e
TLSH
T1E682D6526A208877CCC7D529FA357F12E6F960238DA54E5CB6FCD91C04EA6EE2207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 9f147264a0b884bffc5bd39233c4c305dbcfe500c327c41fafe1a85ec78258d2
MD5 ac31f29bcd12bc7897861d25a327b856
SHA1 f7384fa797b71dc494c0084fe2caa99dbf8197fd
SHA512 20753669a559270b9a159ed816a06128afc16f4b749b848736f24c1ddd91720ebf74b49b0c188f2f092bcc624367168eceb1bc7e6be4f1b0e032d95ca4d2410e
SSDEEP 192:sxZRQUns1R+5cB1D/fYYs9WqI9NebEyddpN+hcs2OfXHW6+WNmj/HKeFHDJXYz1h:sxZ5niQm1D/fds9WPDMUHb8hdXBimm0e
TLSH
T1A382D6526920D8778CC7D629FE35BF12E6FA50238D954E5CB6FCC91C04EA6EE1207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 07171df5829e0458720a03bcbfc0e0d786b3bac67b398283515a4c0bd9a27de1
MD5 4bc4c3744f9527ad61ad5217eef308ce
SHA1 c356ebecfd879ab205e97dc1cc852732162c0c3b
SHA512 b9b4854ef002c02d8baea8a13b1abfa4284c99af3bd0a9cf1eee303287ac394da334de7daa5d373c315a2bf47dcce9c1a528fb2b48b92d0001dd6f35a1f1de08
SSDEEP 192:sxZRQUnnR+5cB1D/fYYs9WrI9NebEyddpN+hcs2YXHW6+WNmjh2AeFHDJXYzfJYk:sxZ5nnQm1D/fds9W+DMuHbt3dXzimm0e
TLSH
T14F82C6536A2098778CC7D629FE357F12E6F950238DA54E5CB6FCC91C04EA6EE120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 f4d26e9c2f5a100cf9d070df6ae7e91074a152e6c0530f79ac648195abf0ce4b
MD5 ce775f9f40b59d97092920a10850b6fd
SHA1 3afa710b7035425b05ded85e984a3ebeeb14798f
SHA512 537947d086df16c87d3240443b5ac5e187b911b037eae913cfa6d5c50dba2f519dca739b225e977a5384672f603b6af2622bbb77f12fee9906d09441520d5be3
SSDEEP 192:sxZRQUnDR+5cB1D/fYYs9WrI9NebEyddpN+hcs2YXHW6+WNmjus4eFHDJXYziJYk:sxZ5nDQm1D/fds9W+DMuHbWvdXcimm0e
TLSH
T1ED82D6536A2098778CC7D629FE357F12E6FA50238DA54E5CB6FCC91C04EA6EE1207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 ee077238e5af3ba703657277ad44288e11dbcd0f35ed5b3ebd17b2ae0517083d
MD5 b8beeba32f7462e41c3fbba9627ed621
SHA1 f75737afc16d2f43616479e9af4f8a1ba23801f8
SHA512 3158040c81e5f17b050037fc6110c3b67eb8b002907c80403fb1e9f387b502f283172b92fc50bb18563f92677e9dd970894a730d5b1ab11edb42ff6989bd4398
SSDEEP 192:sxZRQUnnR+ycB1D/fYYs9WrI9NebEyddpN+hcs2YXHW6+WNmjCZoeFHDJXYzGJYk:sxZ5nnXm1D/fds9W+DMuHbjfdXMimm0e
TLSH
T19A82C552692098778CC7D629FE35BF12E6F95023CDA54E5CB6FCC91C04EA6EE1207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2533bf03c842e5c23cfdd7b66cdb012750e364c00327f12bf3bdb18431bff023
MD5 d17bae99c20b6abc5d4f2a7e504f2c15
SHA1 89aba65b30cb5a15cce242169e88d70d98484b3c
SHA512 7c8579eaa221544da73653c31c2a3ae76ff9833a62d056e4071787a46333e51a33e6d8dae6f66272d6e202e5d86ae70eedd462db406d2b4ce90f8b9d651b75b4
SSDEEP 768:D3k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBIroyaYU:D3k7u70WvqiEau1jai5LA3Bz0U
TLSH
T119C2E93B740CCB7E4F801E9DEC566F976E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 b655c4b78fef94e028afe293a92a88e3d30c1f803f1bce7605310d13e1ed0ff5
MD5 b20fc1cc272512faa2f3604786d3aa36
SHA1 f84abdf1eab402abdb88225254282c9cbdc7daf6
SHA512 bb7a7ba4104e37ef9d4b3cafd16995728219c0758ee7336c5667ed67eb04edc5ab05ea3a75e6e95394cd4f1de7f4e90a461e168c22239e3b971ed0cbe2f569f8
TLSH
T15E51F84E8C4B1DEAD9BD14B26CFA1045337A68EE4645DE0F769DE1303CC332D2E54105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 aeb5a8743a333d80ee7f5159edd0e911a7a931fef938e514c8f7343166d50697
MD5 3ff32a59b3a9dad34501cde963ca6410
SHA1 e57a26cfb007bc55ea7d0e95a3a909f004baccef
SHA512 28fc2f3fe8c61b13d2425db9ce44c4bc3deb39eea96cde643f3435df0ddb09f5026f197467927682ca666a455579bff0730876f1eed5526f68f5e2ba27bfc914
TLSH
T186A0021907C0144BC14216F075D701A526246A10A301374EC293928CC874A69859318C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 5f380db6ac1aa506f0bee794ea40e5a045af8aa0f5248ad41b35c6ef93bd9b19
MD5 e67d9186fec5cbd4a56af4fc49ab85e9
SHA1 280008c6decdc2a469cab3c8b9114bfdbb953805
SHA512 9c2964c383e647ff80226824d1d2f74553ccf21033036dec9be864175eb082afaaee850d8846378da8c8d01785d2dc4fb6d88646bdd92bdfced55282745f66fb
TLSH
T1C6E068BB2DFB1824AC6F87C238B065B0818538188500EC4E3427A28730F2361280AC21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\6ca5559e-eac5-47be-9e02-49eb918930ff\index-dir\the-real-index
Size 3KB
SHA256 2bb58c76bc2eb9d968ce68530b7faedd1d687026c04c154f1909f1436bd93826
MD5 1c4d75d32ac01738aa379196db4031b1
SHA1 31a267943cba5896b465d181dee1a15532e28623
SHA512 5fc6a6b02ebb39929f5deb7cda9d613c99702361b1ba9ef062f70d0faaffaf451223c1ed3708393346819a1da6cb81c9158b3d93b42edaa183e07d1318379af9
TLSH
T19D71F901AC89A534C5D01532D47CCC65F70B3BCDC7473B9910ADA4A4A9A7A1C2F07082
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ba516.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\6ca5559e-eac5-47be-9e02-49eb918930ff\index-dir\the-real-index~RFe5ba516.TMP
Size 48B
SHA256 ab122db8ee7617331eb5e8afeaec8f12dcc1d3fa1810e011808c2cef13e7472d
MD5 9ad9ce2ad886443984b9c6050a3b59b7
SHA1 d106b9d041d6ab1e5e2d6eb0bd2888c9ca559086
SHA512 c84a1c2545f15552940bd8a1b74233b132fc40680a6cb33edbaf344ed7ccc598224af3a9024a6a5a97a0fde46d144bfc175d5006b4f73408b72ab964b91065bd
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\bc059642-5103-4bc1-8dc2-b0813ba83427\index-dir\the-real-index
Size 72B
SHA256 0d2aaee8d5205a970b06ab42977d03a30bd341b711967caccdaa57f83e39583d
MD5 eea5d059804eacf20fb01f36287bdc25
SHA1 49817fac5c934120df9aab7322f16805b6b63d48
SHA512 213c13473f039036f8bf2c82d1f429bcc384fe6f5af85ab38d9f5fb2d9abb76713ca13b2472db93584582d0021b4b6b476f997a4c05f428f1e72b16c3dd13464
TLSH
T1E6A002504949A021E4A6C6F955B20A9E732658990342030780E540848861650C111033
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b8cbc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\bc059642-5103-4bc1-8dc2-b0813ba83427\index-dir\the-real-index~RFe5b8cbc.TMP
Size 48B
SHA256 487549d00890f2689291622c50a5250ca074f9eda22d9063c160da305b73da40
MD5 db202514439e174653e93fb1b1270500
SHA1 1f4e0081dbf55f7b47d55fea8df0bba6458cce8c
SHA512 7590ae0a02596b4333a5130d94f2e746e986daf6942cb8b4a85bb0671483e61d23b40e5c28f8d0b848147fc3461ed748ddf819a735bcfff14227606acbe65b4b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
Size 386B
SHA256 832fa85a170b794cb160b0fb44399e3c6d5c31d22105433fed496137b45c4056
MD5 f73610e21e59437245fffad54aadf8e3
SHA1 b7e2e5818f26634f95822e0fd8a77ab0e8b6d0d6
SHA512 638c6c6bc6d3c57f1d3403aca8e033ff4c769ef3ed52868c0f4e96440a1ff1a0e2ebff2c41aca01b76732103eee70eae0be59ad4396cadf7bf77241405cccde3
TLSH
T190E0611675325121D7A115DE15F4E55CC83F2D435D40CE984084F101087E5564593F12
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
Size 383B
SHA256 5a2d6053d617d15c1a25ec514db9b88c250d92a39c68f42591ebdcee6a872941
MD5 be766f241f79e2d7a41c45e35bb4e666
SHA1 e67b928f924e12032a3ac9a927b7775f3ddbbeec
SHA512 d8be81c2e9e62d6400066e9cdd3eaef16f064c107a3d470a91cd4ecf854f3687f8d55594a4244e64c3e231772f43a8b84f687b1532679ffee5a9f67d42b5afb0
TLSH
T14DE0682632335221DBA225ED19F5EA6CC83F62439D40DEA880C4D10308AEA6645A3F63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5b3e9c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt~RFe5b3e9c.TMP
Size 195B
SHA256 58d9f75a2962247d1f1ebe3ef38362bb37c1971c6a8f02d22bd02c7f15e808d8
MD5 2e47963bfa882a5475590f37c14ee4d9
SHA1 02b746945821eb9375b8e760e2c79544c8c6104c
SHA512 e072e2805689e27861876d201389a62d9b3b217179fbc4f5013f952fabc8326ec5c75fdba19cde61094c088476f93ea20bdf382005de5239822a33a97551625d
TLSH
T174D0126A94325252CB9015DA5EB2E6C4D87F1E475DC1CCA98488F6810D792568582BA1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 641c7878a4ce21864853769066126f03e584e2c828eb19a62d79f763cbcf456b
MD5 25d58529cd2358de91693e2308d3b01b
SHA1 c05b9cd0503585067a54b5be212635c8274223c3
SHA512 6ccad842def9b14a4f9049724019e1f06b39195bb80013c55b518f14fb300c60c7f7116280b4f7cbb8917174ba8afb1db19747bac064466d8e266e5ed97d8408
TLSH
T15DA00260DB8B9441C90516715A66B160BBD09CB9020623054FA990B88CEE5C451D5102
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 5ef4d94214bf7ef768b28f1743fc06997e096bd02831054952147183eba902b7
MD5 27ab4ab6627fd244a36f572d7537e12c
SHA1 0f12aabe83ad1293391b913c03d209901fd29d85
SHA512 5b89bff4b2bc828a44b8f7be804c82c6c366ed9f8fad6463e3910bd2dd5d1025d467ac192e6d7b49ee181e5c1ff0bfe507ecd88dbce9627617be21ae396b38ef
TLSH
T1D1B02411440D5003C40103345C5750703F3C0C543F0113114C54D0744C543401153305
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5954cd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5954cd.TMP
Size 48B
SHA256 c9e51cfcb79bb8facf486238aef335d9764131c195db0caa637a83b65e7b61e6
MD5 5de8b81d215118f62de6b95a90917106
SHA1 573885c549479a10f3c17c1d96772f33cc135ee3
SHA512 39129ead81acf9bb0695d86dc7ac44e501d2e25c858d12031aca18a2c2107c5589830f9b3c108b672cfe080133e0ad30329b4f788d9bc1b983874c8aee16bcfa
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d259faf30a2a3c0884affbacaafb2c006f334a3f3376c6ed2757fbf3d27edca5
MD5 fd39ba946106b29206530e5155e46aff
SHA1 4a39d297ed69af9f49cf28a03ce8886adf434141
SHA512 ff20c88de12f95b2624064740c4bff09b72299f6f7caf0697db463f9862bcce4e7b655c59f318fa2616faeee9972281ed8ce4fd0dd2b4c38298a2dd61867b757
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTTIIjK1Kc7y5CI/KT607BIRKKa:KIbCKcTIwK1K6aCgKT6EBiKKa
TLSH
T14B91850A303A0E55387E298DA69696365F4232A33014B56F7FB840A11D6BE254FFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59afbe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59afbe.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9a063d2daff04fabfe8b0321a102a24d28aaeb2e7b442d43d1e753d0607b252d
MD5 d810d88b5355445fa0f91b85711733f9
SHA1 eaea81c52017a49c1e4d37bba775de18790c9864
SHA512 ed65103bf1e90ce2c83970837911927845d4173842fd2909e7e8605572534789fba197f197f819b86fcb06d3841b568aa3874a485a564cff51eb780602873ca9
SSDEEP 384:eZcIhsN9fTPo0rjSjbMbH2Mdtp5CEJreihVBeRs9JKgqijUOp:chko+OjGHzpheiDTjKgqmUOp
TLSH
T126929E314C75A937A9A6B581F48637078FF89027F6C46FA4B2ECBF1C01A66982317817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 156c125fc685c750b63303e3fefe324c080b1302ea2097fa79942eaad89625ac
MD5 f6e5e5ecbd90f62263657f54c263e116
SHA1 83de5fca5f602ab222790762cfc5c1a4a52c1d2b
SHA512 48e3681614718893f53cac01e84590857f090df563c409eb982957ba854854a8d691d24fbd04b998a64b6cd8701579e25098bec02557182cc007570531d0ecc7
SSDEEP 384:UiFiZcIczsNH8TUNTUlIlfTPo0rjSjbMFH2Mdtp5CEJrnihVBeRs9JKgqijUOp:vFQgOwgJo+OjEHzphniDTjKgqmUOp
TLSH
T15AD219F248E7953AD9AD6743E77D2E028EFCC067B5809A50B3D89A0CCD561BFD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 1f1e6ec67c467e7f0ba88a568f427e041e895f6e35877cebca404eb429807d83
MD5 cc45a5e5a18f83746b1d2a3a6e6e5aaa
SHA1 1f93f81cec3d2a61f796d3751e30a6b1000bb3b6
SHA512 e5de3b8c26317a651b459ff5ee3c7c2d3495fb55510ecf576e92dfb26ae8243b6ccbc3b5de4daf63cda41ba3a16320d1e8c997bb19d50b167efcbd9f2db27826
SSDEEP 192:u5LsN9JTewotOyINJp9GVBbO/S3miU1N3H8BaGBPKK7+FdG29p9hFC1SJrMdNtMe:ysN9JTPo0rjSjbMbH2Mdtp5CEJreihVm
TLSH
T16D524C329C755C375DA2B185F44636039FF89167AAC81FA4B2DCAF1C05DB3A81317817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 45259d6d16e628e9bf3d0e1f1d54c4901c161770ecc444237907e6479e92d002
MD5 22a902c5dc0162ba52fb0e1ef1e04cb5
SHA1 8d1c0ed11546c453e94fb5ff6bea38f340fa50ec
SHA512 bec9005a1b4f5d68a572c9b3f1f3aa6efa9dbd0ffa9d5bc9332bafd674a1b9a4d70f2daa84a4eb30ec7cfcaddfa2da61928f593d8e67eef8dd6e6724ae75d0da
SSDEEP 192:u5LsN9JQwotOyINJp9GVBbO/QmiU1R3Z4aGBPKK7+FdG29p9hFC1SJrMdNtMqahU:ysN9Jpo0rjSjb6nGMdtp5CEJreihVm
TLSH
T133423A325C795C775DA2B185F44636039FF89167AAC82FA4A2DCAB1C05EB3A81317817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 214f1bb46f9a702dfd6645ba5d49197230c750cc787eab076212682b0aeb0cb8
MD5 b8376bfc4d14ace29cde473d3732c4f8
SHA1 f62d621e6024dd0857d25c0b1cbcc56a142819a9
SHA512 b5dd208a22151b1dcddfa1398347c337bbc4e5de17bb2a5e05f911300b145f8efd7e3788905c8570915e521dee8254cc82b6335f0973b5e84c802ee801268cb0
SSDEEP 192:MONY64BAQmiUyK1lW5GBPKK7+FdG29poaDtDUxU6:MONY6eA5HWLdtpRAU6
TLSH
T11D021935ACB96C7B9EB2AE45F58637135FE8213BE6C41B54EAE85B0C019774C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 49fadc948b6a0a245caa379ee2928b1da10fc7beaa41802fa23a02067c285144
MD5 add041ddd9e884d38da23ffc82b6b9c8
SHA1 37174a819c5dce6c510b51a1613e7ef93c9cdf86
SHA512 c954bbf4447836a8cad6179535b8c3e14613dd0e9d6edd0ee8addfc1d9f4af692d12d62c0221ded448c0e74449758a3bbed4a287db4f1e418c2acb1e0d1f877e
SSDEEP 192:EONY64B1QmiUyKlS5GBPKK7+FdG29p9hFC1SJroWwtMqahVU6:EONY6eTNSLdtp5CEJrOihVU6
TLSH
T1BB121A31ACB96C3B5D92B141F48736035EE95227EAC96F50F6DC6B1C01EB66C2306857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0ee0478d3f03ef98ef766dc654884ea77f080e7874f57b0700131227dd63e3c2
MD5 f42defa79ff714b47c9c711d5079d917
SHA1 cb6665569bcbcfe0d47ef41321148a613cdc2a95
SHA512 00c9b5f8e8d94488d62cfe8ab3a1193d6f0dcca0313562af05ee020851b1385d363c50ec6b40f2a32660079a49fb70c20af8445731823d9d1bfed91144b30913
TLSH
T1DAE00403731045FDC01C033000C7131433F7C174037113154C0051503D131010D70F41
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 740545ff24423cefd8264870c7df8b3d13c51013f91794a5679397f637c9e36d
MD5 fb752c88bc91b9366ebf00a5527ba9e0
SHA1 08025f071e6f7f6b26cd92364278ec1ca9dced3d
SHA512 21a649f603441e33e3fbbf5d952ce8d3abf740dc12d84ea4c0cf828907f519ddda7fefd6ab9c1358c07814f0f046d110fbd11e832a7d2a301c8e56abb5b76d04
TLSH
T133E00202A31045FDC02C03300087273426F6816402B11615491151543D233011F70F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0202800a73472b10d223765f0dc642100c817fffe39c58b334ab5290c0ca3c9c
MD5 6718e9cbfdfd2d88bc5fa7aef5ef67ad
SHA1 9d8d3fd186a983a79288c83c832f85f2ded8361d
SHA512 df86f61f7a053b4c8e9384879edb7c8549313bd4e2aaf0129c6675bde1d5d0c91c580c1bc7c0e3fe8fbd01edc5f637289f2183057e2935f64481e65fe7071f4b
TLSH
T1B2E00112A31045BCC178073020D72B396BEAC16512B21B274A3153993C332452F74FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 366c3161cc61e1b0d584020352bdb46c35692993ed9dcf182d602ac6cb6c8511
MD5 9e1fba38c8be97794d6cf1217ff8bf3d
SHA1 55586b032ac2b1a98d8b777310a3dc49743d2fe7
SHA512 0256cf1e45c02c2a97a9932bb68c644fd73a98d909e0e9d066c9b614567c4356509e98d0a0aaea99e10897d23a4a1858c4b949993fa17ce2d75b70bfbe46df99
TLSH
T16CE00112A31045BCC1780730209727386BE6C16512B11B27492152993C232452F74FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1996230cdf5157a2eaf06af562c3f41a7fe01305877186cf7bbea0ce7bc2b603
MD5 ba321182fb7429f35cf16d7f4bf639c1
SHA1 8fe62ef068414b0359f2bcd42111a6349793f3d9
SHA512 a0b4b8b234e6cf9bf2195cc316bad7af645696bf8a34b7217f7f0c2f3c5abb6bfa72c814e2f512813ef7df411b2496a072d1db4505a2c324926e19d8064f2c50
TLSH
T10FE00202B31045FCC17C033000D7273867F6C16512B11B174D1153953C232451F74FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5b49e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b49e6.TMP
Size 392B
SHA256 fb06796728a3ba7fd40c0affaa60149dfd81b3f7b2135dc8f10e81fb5ad63889
MD5 8a1086f5fe1ef0db88f6c1394d5dcfcf
SHA1 9b1334567e3a22ce870b3fd36f0fbae563a446ec
SHA512 99314b70073c593d4b54809f848fda226ea805ef73c0cdac5c516a98e45219861ac0b89a627116b4df711c5c546a019ae8f3c4bbee06d63461f605ddc4e0f3b8
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 22827758b4e2a6895a1173b0f197f8746b7b1b90f29fcd16935b159cd4a00625
MD5 93e98ea8b82b1fcd934674d502773981
SHA1 ca7d5b5d6d8b5c1006a2ce437b8e0ca7c83e53f5
SHA512 2b5393c9d3837183cb8aec4033b8b73bb1a865cecd60258fc1476d40e2610e4b2c73617bef0b0b01d2fe103ed49c724a2f11f3ec2d5e9389c3fbd5960f285061
TLSH
T1D1411958A6F91148B7B77F1AABF6A86E447A7D372F0BD45D10010E4F0632A00C971737
MD5 SHA1 SHA512 TLSH

Submit Download