hxxp://aia[.]nylinsure[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 05:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://aia.nylinsure.com
Sample260808-gfdcfsca35

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4524	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306414771225850"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{7A285740-1F3F-435A-91FF-A465B280CD5F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2196	msedge.exe
2196	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2320 wrote to memory of 4476	2320	msedge.exe	84
PID 2320 wrote to memory of 4524	2320	msedge.exe	85
PID 2320 wrote to memory of 2100	2320	msedge.exe	86
PID 2320 wrote to memory of 2100	2320	msedge.exe	86
PID 2320 wrote to memory of 2100	2320	msedge.exe	86
PID 2320 wrote to memory of 4412	2320	msedge.exe	87
PID 2320 wrote to memory of 4412	2320	msedge.exe	87
PID 2320 wrote to memory of 2156	2320	msedge.exe	88
PID 2320 wrote to memory of 2156	2320	msedge.exe	88
PID 2320 wrote to memory of 3564	2320	msedge.exe	89
PID 2320 wrote to memory of 2156	2320	msedge.exe	88
PID 2320 wrote to memory of 3564	2320	msedge.exe	89
PID 2320 wrote to memory of 3564	2320	msedge.exe	89
PID 2320 wrote to memory of 1092	2320	msedge.exe	91
PID 2320 wrote to memory of 1092	2320	msedge.exe	91
PID 2320 wrote to memory of 1092	2320	msedge.exe	91
PID 2320 wrote to memory of 1076	2320	msedge.exe	92
PID 2320 wrote to memory of 1076	2320	msedge.exe	92
PID 2320 wrote to memory of 1076	2320	msedge.exe	92
PID 2320 wrote to memory of 1436	2320	msedge.exe	96
PID 2320 wrote to memory of 1436	2320	msedge.exe	96
PID 2320 wrote to memory of 1436	2320	msedge.exe	96
PID 2320 wrote to memory of 4808	2320	msedge.exe	97
PID 2320 wrote to memory of 4808	2320	msedge.exe	97
PID 2320 wrote to memory of 1240	2320	msedge.exe	98
PID 2320 wrote to memory of 1240	2320	msedge.exe	98
PID 2320 wrote to memory of 4484	2320	msedge.exe	100
PID 2320 wrote to memory of 2292	2320	msedge.exe	101
PID 2320 wrote to memory of 2292	2320	msedge.exe	101
PID 2320 wrote to memory of 4080	2320	msedge.exe	102
PID 2320 wrote to memory of 4080	2320	msedge.exe	102
PID 2320 wrote to memory of 4080	2320	msedge.exe	102
PID 2320 wrote to memory of 4320	2320	msedge.exe	112
PID 2320 wrote to memory of 3544	2320	msedge.exe	113
PID 2320 wrote to memory of 4920	2320	msedge.exe	114
PID 2320 wrote to memory of 1676	2320	msedge.exe	119
PID 2320 wrote to memory of 1676	2320	msedge.exe	119
PID 2320 wrote to memory of 4692	2320	msedge.exe	120
PID 2320 wrote to memory of 4692	2320	msedge.exe	120
PID 2320 wrote to memory of 2196	2320	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://aia.nylinsure.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffa9ab3c188,0x7ffa9ab3c194,0x7ffa9ab3c1a0
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1928,i,15808879885951797271,10811132544792232591,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,6836229975391063952,13081313558007757375,262144 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,8661538226890861618,17650106437097726162,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,17951493889589490873,11733890871118342114,2097152 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,13745481505803740560,6503524684407247176,2097152 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,14934574990675438073,13507268325400531795,2097152 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,7832214927589972787,4360892580760010965,2097152 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:2
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5144,i,17928283871447682333,17571464032415198207,2097152 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,10878170746669588525,18303946415294655133,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,12904393826262761972,884395290769324293,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,3710982946812685165,3352753082130831307,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,3710982946812685165,3352753082130831307,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,10350143254802816488,4338324386918059192,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6508,i,720213784051355323,14896445374937997244,2097152 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,12074578594911818641,6845376340817441268,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,6344237238555107382,16202388990375657338,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,14272283886065636515,495897928543536078,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,13531947813757945810,3006793114473742148,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,13847739293327603506,1470039031093078766,524288 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6324,i,18411336836129579530,1834454647198935571,262144 --field-trial-handle=2332,i,14513391869719884111,15854667330999861880,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2196

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9267ca39fb50d75e1644d2a3d696dd6ccb217e6bf9e7569d932cd90aa7ddc3c6
MD5 3053e2c309efab6af094759a328116e7
SHA1 5d7903424cad814547aab0b24c905523966a4e3e
SHA512 e50de13a7f8638a26ab1291ceb7deeec0ee240e218416f04728511d55351ed30af33ec0e5c0080501730ddff8c78a910c56192116e7e3b1043719f834e9a713c
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7G:fwUQC5VwBIiElEd2K57P7G
TLSH
T1C9B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 d2d3730ed1a89890178b53726dd6dd26567dfa4034f410c4b554af33bacdfd82
MD5 a4ac8c17a8f78b41f7ef7f1a429573b9
SHA1 fb5473e733def8d5eb3556d01b8bb55d8b7f1795
SHA512 ecb7dfad04189a0f36a66d024978caa08b101dab03fc57886c3d35e9c02077a2a34f22ee4bb302ea0a7ba26e8063813aa4f234ce16347464cb746dc78dbf2fd6
SSDEEP 96:fVihVObEVRAEDCZKmi7WQ73+kuja/fo7Sx6LXq8Co+Eu2St6Ds4OW+5oruaOxClk:NSm22rPhI4lzLrDwxSel
TLSH
T187B1A5B2D147D4A4CFE340754AE4C52130F126DEFD8BEE422F9E4EBA164E3D369A6204
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 d9912f571d3f9775aa2f8e63e08168a24a1fc728bbde0d5d8c8b4a42c5c2c8fe
MD5 fa32554bb3b8b4b3559fbf73f0cd52c7
SHA1 7c4f887373e5779605b0c5db97a7fc27da76dda5
SHA512 667526ae57f39fc422fba68a2f9ad3a79c224089e15d28ee7d8cc87288aefbd8a806f1f6c5575cfa9e0adc3155208fae7e67ef04bdb40448ec3cdfaae4c3d35f
SSDEEP 96:DoOjkjmB8zBjLj8j7j+jEGjpjmjj1BRjmjHjTjc91jzjBjzBjBZ/j+jCjoj2jmjb:DTIaB81HgHagGFajxBRSDX4vFplliOU/
TLSH
T193A16AFB83B5856E991159F8AE14DE1BCE0C0619432C3C2689D5BF1BD3E3422E116A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6ca57c940e0923b6c951e60c27f4170356cc483239079c3f269438674464a3c2
MD5 f304784c026c832c6ca59f0c98e9bccd
SHA1 b3a64554535a1f7fe55669c37671c75eec9fc434
SHA512 f1032840d5527da163a18bed0b8af585e6b1f63f4864bc607b0385f3c8b4746a4385ae4cad5bb384fc7029c5428669be26d99845d0cddd7ef2a7a614f0f2ae50
SSDEEP 192:sxZARRyM/jK1Ml8UQdk9/flscZpuljVvIdpHQHW6+WN9B3/YvP4sDjcIg5ZJ:sxZATq29/flscYuwHbT/YDkd
TLSH
T12A52F852AA349977CCDBE20EF945BF53D6F50473A2900E54AAFCDA1C04E6ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8e2f286480044888bbcee3b4b53f31296b1b8cab6883f3338e6252a4242da9e2
MD5 a36186e347e85b3812f8ea41d3100718
SHA1 28a30570f8b9e73a2fa19cb6da6b29291b1c9dfe
SHA512 ce2e3cedd8cf28a4b17dbd74b0ac7dbaaf2d233ed16fa1bf6a6bd4420e36b84f8d3ca2a19a6546f6f1125111c9a37cd2afa96a4c30ee43887289ef7df2da9d80
SSDEEP 192:sxZARRyM/jK1Ml8Mk9/flsKpu9jVvIdpNQHW6+WN9B3/YvspKDjcIgrJ:sxZATM9/flsKMuyHbT/KDk9
TLSH
T1B652D711AA34A977CCDBD20DF945BB53D6F90473A2940E54AAFCDA1C04E6ADD2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e160c7d6ecc99189c11ea4f7ff7c04296f89a038b864a3b2ca872b12f9313ef7
MD5 cd174f8bf4415a6a96967ebe1041276f
SHA1 607d48fe3a8cc979ac2b0d77e59c82b6f7ec4ca7
SHA512 bda4a2d3e887528b47c66992f10e97df18e07f975e86262249828dc1d9c592e6e77086f96935fc82c71785168cbf3117bd6a1d0b54e6fb087d645def43ed4706
SSDEEP 768:BtseJ3xWvhfwn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppOroiOCpJ:BtseJ3xWvhfwnu1jaVcL88pFjCpJ
TLSH
T1C6E2FB2B280CCB7E4F844E6DEC266F966EE801CB67984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\999f86ad7cf9ef986482baa2cbe4e4a41a264395\index.txt
Size 143B
SHA256 b73d772ee99af7ac6526c2f2bbfaa94d2acc38ad92900456b88465df619570f4
MD5 d85f86038d102f5b5a09417741a34a13
SHA1 1b772d7bbf62277f40b0e0b2598c4f2c724f97ba
SHA512 2225b4114ae0b25e2bec850aaa947e17d02f48e85c1eb3e890cbc6ace83b25e02538a23cfb50697b63b8db2eb3840a3c9fd471f89c0db8844a71b1f424c428e4
TLSH
T166C08CB7E1AC8368CAF44E8109B824395B6954192DC2E0ACE06A81B1CB30866A05B0A2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe588f5a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\999f86ad7cf9ef986482baa2cbe4e4a41a264395\index.txt~RFe588f5a.TMP
Size 150B
SHA256 e7fbb3d49144508b460f21d77544bd5798484bd040d1447f8661f67fe5a82240
MD5 ff6ca6ff1ca9fab921b27226e72e0df7
SHA1 b65a7e33c8484825188c7f2a8d652d13a8e31ef8
SHA512 1bdca8d5c5119a4c68fc2dd34fec482cc1283302fc789bb2fa2c55d388a37ccf862ab760758ffc25d52df64c1b345a20564d4c6d5c400c7d044aeef050180160
TLSH
T172C08CB7D1AC4768CBF00E8205B818395B795C1E2DC2E068E06AA1B1CB30827E05F0A2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a0852dce53c0056a691e8c71b7d73624f8bd9c29396fc0721857a990c4414150
MD5 a15eb075f80fbb2d35ff786b407447e9
SHA1 d13af9d05fbf47379f655613c987ae1f600ae967
SHA512 12cd731d0e50f02bf158ba56bccf3f41597000e6d8164ea5a640c83512cf2229bb920a5d986a4121edcb510ba36098f141ca073d934202901481d7649b0010a4
SSDEEP 48:KYHIhKggkXypQIzKpisnypvKLfhVpk5V0PI0nkKDBrJkX/0aUhFvobPxZB:KYH+KggmKQIKpieqcAKN2T
TLSH
T1F7916912353B07427CBD2458A6A696379E413793341479AF7FB840624E27E622EFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6113d32b-4b2a-45e7-acf6-86d1e9a2de1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6113d32b-4b2a-45e7-acf6-86d1e9a2de1e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9c359fbdf97646f72f25e12216278c1660e02c67085fcb20b8e731c5702ba634
MD5 222058b7a9751841fc80f72c68e5a88b
SHA1 13ddb360762baf3729180712d32961da829fd828
SHA512 32102701cb95c30f26cf6ea39b517c2c640e21e4f423e6957e9eca4ba231ae48a86206fd11a7b71763bee2e2859c5f5a048fd3210916a8a61b06ad29db69c501
SSDEEP 192:uELsNXrQXliSM7KhaQmiU1+D14MTA++FdLCgFd3Ea8z1ZqdUMZ:xsNXrN7aWGqNdtdUzYUMZ
TLSH
T1E3421A31AC749C37AA93B546F04A36035FF4516B9AC82FA0F6ED6F1C06DA3681307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 e66421f577246491da525d41eb122a1d4b33da659e5db8972fb843118c9ac423
MD5 ba06c296c8a9f25df2f98bad3cca2708
SHA1 b5761c5e2353c567685c6be6f02577af1af2e8f7
SHA512 1a59ffe654688dc2c234ae7acc8a00c0c6721dc8d652104306feee9a0487f59ce0dd041b32febdc8d2d3a5ca44e8da58e370fcbf1ffe5ba4a079c51298b32a0c
SSDEEP 384:1iFiZcICzsN+8TUNTUlIlKN7aWfqNdtdUPYXC:8FQKRwgqZEBUPYXC
TLSH
T162B2F9F248E7843AE9AEA747E77D2E024EBCC067B5845A50B3D86A1CCD9617FC306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 2220cc29d28cf85e9a31eea37bed794f71a9a5ce1c2ac5e11d57cfa87f663ddb
MD5 5517bd1630f7d032eabff9f407cafd78
SHA1 251ba67e8ad24c3a83321e7bc789495428a981d8
SHA512 52ecc52fe4edf332ad05e69b10d3a06cc652be4cdad65654314f41965695d2eb895be6f3dfddcc1b7fea6c2045b99477169a7c021a52aaa41d9a62534b62ea2b
SSDEEP 192:uWLsNXm+QXliSM7KhaQmiU1+D14MTA++FdLCgFd3Ea8z1ZqdUPZ:/sNX5N7aWGqNdtdUzYUPZ
TLSH
T1184219316C749C37AAA3B545F04A36035FB4516B9AC82FA0E6ED6F1C06DA75C1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 095da0d3d87b8df094e8508f1dbb868b9ac5db842d85a7549c465815ec907c88
MD5 b8dec3d735a569c1e46876e55c2a3266
SHA1 17d1a0f8fdf916418cd00516fdd01e5251328d0b
SHA512 444951abc2c9b41137be5aefec6505157713780ad497e215e12c7559865f96e88c9318e0161daacc1dd56f4e542d0513c09db9ec850c4791c558cca1f833d4e5
SSDEEP 192:u9m+xasuheOwQxMlrzsNXKQXliSM7KhaQmiU15D14MTA++FdLCgFd3EO8v1ZqdXC:lZcICzsNXKN7aWfqNdtdUTYXC
TLSH
T16EA217F158E75836D5AEA307A77D2E034EBCD027B6881A50B3E96B1CCD9527FD306806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f9e53b58229a2a3343eca4eea9cc38bbec762de262b063629eab173e0afa76be
MD5 e1cd06facd6a5f4bcd593e06823b3596
SHA1 f4160f3fbe477da640065d4a6cfd55babb6d26dd
SHA512 96cd1efa02cd058798559f2c2d0a37873b963f782ad5c1eab969ce5f2f5c353e42c5d9a3d5f3dbec758ce4a2f4aa8c0e3449acf2bd30c1ad6e103e5763261176
SSDEEP 192:lONF6vMtPQmiUyynThTA++FdLR847I4U/u:lONF6UtRpT+dVlU/u
TLSH
T1CE020935AC786C7BAAA7AE49F48A37175FE4216B95D05B50EAE82F1C00D765C1303C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 a1caf4fc68fc8a9c42ad6372f88e2e7a21fe23bc961edd569d4544b4ebe424eb
MD5 f13853f43bc11be887d2bd9e898f17c0
SHA1 cd8b48db159fef8ce95eee700c872c17d8ac36d1
SHA512 6c388ac78a57e0b0679322c093c36cf95dbd8a82a0887c54c8a9d400d9ae259c9bb6f3599759e2de707af7c0d9dd831284dcf6ac1be658141bedf73189b1ae8e
SSDEEP 192:6ON66vMfPQmiUy7n2hTA++FdLCgFd3ET80IZqdU/u:6ON66UfR02+dtdUkYU/u
TLSH
T1FA121B31AC68AC27AE93B546F48A36135EF4916BDAC46FA0F6DD3F1C01DA65C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 f250d8dec92e688fb03c856bf64723824c2a91eb19c0f72ae9a86c3ac9c6c9d1
MD5 c5f8327e5f734fa32b042caa4dfee2c8
SHA1 0a5ba03540e5225ba62d75f93d67e8a604f5b6c1
SHA512 1a85db7c08868ba2419783bb7228c39b08b5199eee8a3974321bc2034b28935cd59c4f69e070614ca7b79df2d2c3c1ff88f58f1786cf2fb7ec7f812cf932dd4b
SSDEEP 192:uWm+xasuheOwQxMGsNXKQXliSM7KhaQmiU1+D14MTA++FdLCgFd3Ea8z1ZqdXgYy:AZcIhsNXKN7aWGqNdtdUzYXC
TLSH
T125625B715C749837AAA3F14AF54A3B035FF4902796C86FA0B6EDBF1C05DA6681307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 6a087a16a8f8394631594179dd39ffdeafc0d87d1d0b872016438817c3536442
MD5 b7c1455d76c3e857f838cc6179de2d09
SHA1 ce51df180afa31595462b6c37ebc31c01f06f037
SHA512 1b83dcb259093648fc8257e38f556c97f157d20a11ca565780e27e90fdb68fbb18799041076fb41cee33e789447bc3bcc29ee3ad8fa4a15c7f52ea19c9e9fb70
TLSH
T1C8515E2CDAA5EECD1474DBECEBD0B137350E6EC57627221D9D0558D10EE566F84038E0
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e7ba4f707a2feaa5f9255799eb65cd64db5b9b568e97bb8d0c78f38790383efd
MD5 9fab35d5090b02b9eb046e3d30a5488f
SHA1 a9252f7a2c60fd963ddfc65210fa0ad1ca4c00f4
SHA512 cd1b6fefbef1388baf83b0040b9589f13f3904551cadb7c45d3b2e853615079555c4949d0357f191376cfa64f41ea9ebab595af7ee1e998202e5935f2ef0bd00
TLSH
T136411759A6ED0148B3B37E5A9BF6A86E487FBD772E06C45D10110D8F0A63B40C9B2737
MD5 SHA1 SHA512 TLSH

Submit Download