hxxps://vr-hands-v2-8[.]en[.]softonic[.]com/roblox/game

Analysis

user interaction
yes
max time kernel
1799s
max time network
1241s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/04/2026, 20:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://vr-hands-v2-8.en.softonic.com/roblox/game
Sample260418-zees1aez4s

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
325	discord.com
1225	discord.com
1227	discord.com
1355	discord.com

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1406	ip-api.com

ConfuserEx .NET packer 2 IoCs

Detects ConfuserEx .NET packer.

resource	yara_rule
behavioral1/memory/6416-3189-0x0000000002430000-0x0000000002464000-memory.dmp	ConfuserEx
behavioral1/memory/4996-3313-0x0000000001200000-0x0000000001234000-memory.dmp	ConfuserEx

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_733551909\Part-NL	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-ec\el\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-hub\hu\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-shared-components\ko\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_920898519\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-tokenized-card\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\wallet-webui-101.079f5d74a18127cd9d6a.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-ec\ar\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-shared-components\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-shared-components\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\wallet\wallet-checkout\merchant-site-info.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1191678111\crs.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification-shared\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-shared-components\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-tokenized-card\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\wallet\wallet-tokenization-config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\wallet-icon.svg	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_877001067\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-hub\ar\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\wallet\wallet-stable.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\wallet-crypto.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification-shared\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification-shared\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\runtime.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\vendor.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\Wallet-Checkout\load-ec-i18n.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1952128025\edge_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-ec\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-mobile-hub\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_670019079\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1952128025\edge_tracking_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-mobile-hub\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\Tokenized-Card\tokenized-card.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_733551909\Filtering Rules-CA	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-notification\ko\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-shared-components\el\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\Wallet-Checkout\wallet-drawer.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_670019079\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-mobile-hub\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_794234441\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_920898519\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1345294583\deny_etld1_domains.list	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1900	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134210182856954266"	msedge.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-600123060-2148212387-2211176695-1000\{480D084C-9411-42A3-858C-24CDFB460D2A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-600123060-2148212387-2211176695-1000\{7D1E66A7-512D-4419-B8C7-62F85A27C863}	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Xeno-v1.3.0a.zip:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6012	msedge.exe
6012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	6416	XenoExecutor.exe
Token: SeDebugPrivilege	6148	XenoExecutor.exe
Token: SeDebugPrivilege	4996	XenoExecutor.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe
6120	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 6120 wrote to memory of 5100	6120	msedge.exe	79
PID 6120 wrote to memory of 1900	6120	msedge.exe	81
PID 6120 wrote to memory of 5068	6120	msedge.exe	82
PID 6120 wrote to memory of 5068	6120	msedge.exe	82
PID 6120 wrote to memory of 5068	6120	msedge.exe	82
PID 6120 wrote to memory of 740	6120	msedge.exe	83
PID 6120 wrote to memory of 740	6120	msedge.exe	83
PID 6120 wrote to memory of 4324	6120	msedge.exe	84
PID 6120 wrote to memory of 4324	6120	msedge.exe	84
PID 6120 wrote to memory of 4324	6120	msedge.exe	84
PID 6120 wrote to memory of 5864	6120	msedge.exe	85
PID 6120 wrote to memory of 5864	6120	msedge.exe	85
PID 6120 wrote to memory of 5864	6120	msedge.exe	85
PID 6120 wrote to memory of 5960	6120	msedge.exe	87
PID 6120 wrote to memory of 5960	6120	msedge.exe	87
PID 6120 wrote to memory of 5960	6120	msedge.exe	87
PID 6120 wrote to memory of 2188	6120	msedge.exe	88
PID 6120 wrote to memory of 2188	6120	msedge.exe	88
PID 6120 wrote to memory of 2188	6120	msedge.exe	88
PID 6120 wrote to memory of 1068	6120	msedge.exe	89
PID 6120 wrote to memory of 1068	6120	msedge.exe	89
PID 6120 wrote to memory of 1068	6120	msedge.exe	89
PID 6120 wrote to memory of 3948	6120	msedge.exe	90
PID 6120 wrote to memory of 3948	6120	msedge.exe	90
PID 6120 wrote to memory of 3948	6120	msedge.exe	90
PID 6120 wrote to memory of 828	6120	msedge.exe	91
PID 6120 wrote to memory of 828	6120	msedge.exe	91
PID 6120 wrote to memory of 828	6120	msedge.exe	91
PID 6120 wrote to memory of 2044	6120	msedge.exe	92
PID 6120 wrote to memory of 2044	6120	msedge.exe	92
PID 6120 wrote to memory of 2044	6120	msedge.exe	92
PID 6120 wrote to memory of 5940	6120	msedge.exe	93
PID 6120 wrote to memory of 5940	6120	msedge.exe	93
PID 6120 wrote to memory of 5940	6120	msedge.exe	93
PID 6120 wrote to memory of 4852	6120	msedge.exe	94
PID 6120 wrote to memory of 4852	6120	msedge.exe	94
PID 6120 wrote to memory of 4852	6120	msedge.exe	94
PID 6120 wrote to memory of 4712	6120	msedge.exe	95
PID 6120 wrote to memory of 3932	6120	msedge.exe	96
PID 6120 wrote to memory of 4144	6120	msedge.exe	97
PID 6120 wrote to memory of 4792	6120	msedge.exe	98
PID 6120 wrote to memory of 416	6120	msedge.exe	99
PID 6120 wrote to memory of 4712	6120	msedge.exe	95
PID 6120 wrote to memory of 4712	6120	msedge.exe	95
PID 6120 wrote to memory of 3932	6120	msedge.exe	96
PID 6120 wrote to memory of 3932	6120	msedge.exe	96
PID 6120 wrote to memory of 4144	6120	msedge.exe	97
PID 6120 wrote to memory of 4144	6120	msedge.exe	97
PID 6120 wrote to memory of 4792	6120	msedge.exe	98
PID 6120 wrote to memory of 4792	6120	msedge.exe	98
PID 6120 wrote to memory of 416	6120	msedge.exe	99
PID 6120 wrote to memory of 416	6120	msedge.exe	99
PID 6120 wrote to memory of 3836	6120	msedge.exe	100
PID 6120 wrote to memory of 3836	6120	msedge.exe	100
PID 6120 wrote to memory of 3836	6120	msedge.exe	100
PID 6120 wrote to memory of 5604	6120	msedge.exe	101
PID 6120 wrote to memory of 5796	6120	msedge.exe	102
PID 6120 wrote to memory of 5604	6120	msedge.exe	101
PID 6120 wrote to memory of 5796	6120	msedge.exe	102
PID 6120 wrote to memory of 3896	6120	msedge.exe	103
PID 6120 wrote to memory of 5656	6120	msedge.exe	105
PID 3896 wrote to memory of 3160	3896	msedge.exe	106
PID 6120 wrote to memory of 2568	6120	msedge.exe	107
PID 6120 wrote to memory of 2568	6120	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://vr-hands-v2-8.en.softonic.com/roblox/game
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7fffab06c188,0x7fffab06c194,0x7fffab06c1a0
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,6136973979952678531,6528706249996637600,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,14489263271402404075,11774631314751785564,262144 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,11918071864093966719,14415346549246882537,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:13
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,2164276213700352572,7924467880307212777,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,4839700975330806847,15394071971949110255,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4892,i,3131770576630530474,6588106542773186840,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5044,i,10299310292328755846,13159156176112378367,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5304,i,17735890393503047953,2797297571202485141,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5452,i,319536949478214808,3978094153783113876,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5684,i,5513253229338759335,7428305042247969956,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5728,i,12121737302419339643,9018488454809997208,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5008,i,17555691161943771190,7958410721474353947,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5904,i,11686508984066934592,3169256082812014394,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4964,i,11401710184124238587,10495947035685519895,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5080,i,3430710686206226017,17377593400228526648,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4952,i,17068528394065203793,10748050981643946787,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4928,i,18389503794585177304,282309759843105732,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4856,i,13158090639333033589,422604199745710303,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6904,i,7320083359787201015,6684323996192109001,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7052,i,7958112094269207863,2061809558534547895,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:14
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7056,i,3684515383355889128,764157350693184585,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:14
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,8659910393046399765,12767665677906464372,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3896
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,4286254166444008170,18055766678669587936,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,4286254166444008170,18055766678669587936,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=8020,i,10868849941959757576,305328001848051592,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8148,i,9443775690421404914,14660097642041378040,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8348,i,5629414544338383122,18136265228062099688,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8372 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8300,i,224268463697377837,2434064312646744180,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8820,i,15481415871089584578,13939317328170320974,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8436 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8920,i,14357658791999398985,1838601371234734419,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8944 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8180,i,4994358122763983135,70213470747635382,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8224,i,11504695095763245760,17328367574835087222,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9048 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8260,i,744399149836191204,632712603651278451,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8628 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9504,i,3582836439050838490,9509323891097620197,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9500 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6392,i,16396876390809810620,3444082946154824925,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8856,i,11113022000277496432,16622709521155596380,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,6131496357550065317,18039620384692412418,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8704 /prefetch:14
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,15412381568571743210,14185385777962503384,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9500 /prefetch:14
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,9892773737461496365,9050735236946129474,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9360 /prefetch:14
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,14294177901397525893,12245140978538253791,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:14
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9264,i,7813108768034672629,6619158223165459642,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9508 /prefetch:14
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9440,i,6460435622919784709,65194419565198829,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9432 /prefetch:14
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9484,i,2232321157224829401,11002689741655488509,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9324,i,13864398060394757155,7253038782794313900,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9500 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8808,i,16675942769801985592,14863684876893818115,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9820,i,5440754711163682262,11398330862143902901,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9724 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9916,i,11059815255351833086,15099688132759811034,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9880 /prefetch:14
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7892,i,12264523125732947186,7905760219255462233,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9916,i,9980580559364363613,7639560371443025745,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7300 /prefetch:1
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7204,i,1081860852354248801,14926710267420267350,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:14
  2⤵
  PID:444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9468,i,6387852258750492518,6860639295732986518,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8252 /prefetch:14
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9416,i,17673650364345569483,747170981723152594,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9960 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=10112,i,13434962080062369587,3224792612385852578,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=9896,i,17623717837013277818,15935047867818643209,262144 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9444 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10184,i,5991950167234585152,16620878157123203410,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10252 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9960,i,15751016883431374863,2606551317936588269,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10096 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10368,i,5318992142476294783,15785582030230579552,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10372 /prefetch:14
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=8232,i,12977921800779837069,15763202590739569317,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7600 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10488,i,9434504547873630479,17747075267386497155,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10260,i,5676107269944794546,16801395037918714107,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10248,i,16543517923613949888,7654894238096102702,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10496 /prefetch:12
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10864,i,2228783805782451207,5790742883873823009,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10020 /prefetch:14
  2⤵
  PID:6700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,667912801104574351,16651078296057819918,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9896 /prefetch:14
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,2099752694146765086,3761556399047851995,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:14
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=4204,i,12747472184284721333,3863901743742393445,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8160 /prefetch:1
  2⤵
  PID:6312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=7892,i,3112261469233315534,13030717404961241603,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=9240 /prefetch:1
  2⤵
  PID:6388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=8148,i,1340017096124150086,3125141436941296781,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8660 /prefetch:1
  2⤵
  PID:6772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10160,i,5041203630384922623,9658679464301783852,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10308 /prefetch:14
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=9896,i,17347571535920379178,10628910697889670428,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,8126904893093188368,17341681524182176114,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10164 /prefetch:14
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=10452,i,4919503411688231959,154121958600368136,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10436 /prefetch:1
  2⤵
  PID:6280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=1032,i,15977039096306334153,2232582495796874140,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:6292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=4168,i,10451012412194036927,10217851211572843099,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10368 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=9108,i,6831358547824957371,4883978730721941727,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10388 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8408,i,17323174240863067826,3975177387058329209,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:14
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10088,i,7672282384950177407,2480831000631067976,2097152 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8684 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10268,i,11332600151586201287,8667045618004891128,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:14
  2⤵
  - NTFS ADS
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10412,i,6477245149945705984,9837861534873453461,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10112 /prefetch:14
  2⤵
  PID:6724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9616,i,645356271662297066,18135729638165269729,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9396,i,10585350347888405054,11523896321329293901,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10892 /prefetch:14
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8264,i,7465398190584362186,16503393882228430616,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:14
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10796,i,8354106299211015959,13091764000918992145,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:14
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,8870389844068216612,13206273278630324058,524288 --field-trial-handle=2212,i,12213691361512636339,2057597697225943102,262144 --variations-seed-version --mojo-platform-channel-handle=8656 /prefetch:14
  2⤵
  PID:4532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2708

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6896

C:\Users\Admin\Downloads\Xeno-v1.3.0a\Xeno-v1.3.0a\XenoExecutor.exe
"C:\Users\Admin\Downloads\Xeno-v1.3.0a\Xeno-v1.3.0a\XenoExecutor.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6416

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:6640

C:\Users\Admin\Downloads\Xeno-v1.3.0a\Xeno-v1.3.0a\XenoExecutor.exe
"C:\Users\Admin\Downloads\Xeno-v1.3.0a\Xeno-v1.3.0a\XenoExecutor.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6148

C:\Users\Admin\Downloads\Xeno-v1.3.0a\Xeno-v1.3.0a\XenoExecutor.exe
"C:\Users\Admin\Downloads\Xeno-v1.3.0a\Xeno-v1.3.0a\XenoExecutor.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 71f86f37b013034051fae2e3307728bc40653c617383d6aa85219dd8ea093ca3
MD5 2ee9c9062df63fee32f65bc087b93005
SHA1 2874f6b34fdb5f9ff64aed6e38005f7940050b27
SHA512 99729f971f840d780b0e5404260284b048d532cb0dbd20969536cacd61a2d2c52568d6b9d96f6f0168b93eaa3c7236b49d8aafb6138d1b1fcbe89990c6af5af3
TLSH
T1AFD08C4821F66CBAD09ACA7219057B0A2959EAA79E93AB2A39B36C784C4300115911F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d8c0ebc33f7882ac8aaa0f941413384749c7672a7744de3485d53f3d7a832ce
MD5 fb7d9391eb1040937b5c31ff61febe79
SHA1 0be0bde544b492ac590e441f96bf8d0a378d3782
SHA512 d4a405f080afee18100d407e824cc3366114b1acd56307d247bc25ee87ffaba37406581a2dfcfe9320df4d014582f86fd300e9f67a54b4fcd2e471e1358c493d
TLSH
T1AED0804425F15CB6D046C57115457B053955D6A79E539B1A35F36C784C4300115511F7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 28ba0db1d3b9c9812f4db216c6a239dc7bf79501a70217ec4d4af35acf06a88c
MD5 7f96a31717389c667916382290a72c63
SHA1 69b53001dc3c87cbe37bd8002eb9c3e8b7e27432
SHA512 c041bbb084da0fdc92c57377b917d46ea251114270bfda9e164675b69296729e4ccc8ef804c29f055105a9223868639813ed0713a04f05f63e25d3a476cb8ae4
TLSH
T153E0D8CCA789C6F59990F70BD659935891A03407BBBCB67B32CA60867690242F15B5B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 a866d1787262a60bf5df49649bae05836f83f93e13fa753aa5fa8a6680f66799
MD5 15545182357ef2bacace75ea0c6646b8
SHA1 6ea415c633a05b6097b959bac56a4591293f299c
SHA512 ed39c41ae761f69be29a89ef4291939f687256cb7aaf61935cf4f7c8ecb8654d59d0f1ad02aeb723dea4ced8619d7dfd852fdf00a21f4eace20081ea169f8d7c
TLSH
T109E0201CA798E7F0C18CF646A06DDF1C202670159DBC4DF93747B0CBB49020AD5494F4
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 385B
SHA256 57848a268faa61b7621206b2a694d3a72c65054995bc03a003933538d6135e3a
MD5 66e56536cbba5b6617ccd223e73ed9aa
SHA1 3603aac19f66af364c22c0c9f5b72448fafeed2c
SHA512 01f1a85653535bb1ea4b910164e2256c5d393c8f4d7d9a53eff936287e6671707fd529aa26e8b9b181b9783f9e9056cf5ff1d89807b38cbd3a17fa20a342fef0
TLSH
T1F7E09B6EBAAC6A8ED2E40CBE97B6B0400F5802E1881BDB270520BDC036916E46F75124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d7ad3beb26084e9e61bb76afb3b71ba81444cf40b9769c907c2ac3b113d6b1b3
MD5 3304ea19c7c5a15602a11a2c19a04ec9
SHA1 c03ca23a1d3ba6e09d27a123b2863531f0ea5fb2
SHA512 2d438baeed1062249fbef197c34c442eed097a6509d17d9be16ee54018ecd8a40b1efd8a3d513afc20a6a386d7a8ec1fc9e570dd43a7637ce96ffa69fc5a4f42
TLSH
T161E02B6ECC35DC3709F9072921500786FA5113271640A54B3E3CD20C8F75A7A05DA81C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 138KB
SHA256 74bc24617f0b6a6866aac66aaf3c10b6e5e39222df8d1986daff93acfaf323a5
MD5 b9ab1de30a62ab01a12282ce8d82960c
SHA1 e3ef3e957316b107fc2b076004779d9ec985ec68
SHA512 95529abc90394a7c78d6f590d35bcfe89b4b490f2ee05a500c0a172b8bed18ee869844fd7c9ad462e5254a9cbf9004f7e1474434e5046b97406e97b6deac2dc0
SSDEEP 3072:tyC8x2vLtUbi6FohC8lrEeq4MY0rm7D14ajIwidFH1W7JMGT+:tyCA2vLGvFo8mrQpAyajIPmJMGq
TLSH
T154D3130E0E515218840C69AC9DC0CF3D0765ED953A98C3F7E3B87B862ED21FAE768C65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 30KB
SHA256 b0bd11a6f1706c1429a1116d04ba61865eb0d7fe2bb758ada82bf3fd2adf260f
MD5 d24f5adec21ce1ffb7d1d06fae3c2ad9
SHA1 4c3cab12bfdf0ecec5938f531be1c565090866f8
SHA512 a2e1ac01df67628183ffdca1e5d2ded239b3323eaee68fa3cf66855993b79be2e565f1d1b2a98fd917d926981116d02baad0abcc1a931aebdafa2c11d05877c9
SSDEEP 768:SKhTIwmDA1Wi9GEaCoGh8FfjnJcbj1mwQnaZ22bpwSs:SQd0i4AZhUfDJcbhTQW22CN
TLSH
T164D2F14B84592E5E4430ACD227DA7DB7E0006B59DD8D178DBC784187B3B6302E4B9FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 22KB
SHA256 24b9e57a381b22ed6a0f8ab0087bbe33693d0c4abd91a244f7d10e8da0b7d0b0
MD5 38717b4d2a91892bd149bfa34a92cc63
SHA1 d4fc8df6c4285a50742528053d644ceadb50d2af
SHA512 1c7e93b6a29154613f8edc01a064647562de5498fe001fdc2a990b358386af2c000e5291060128e142ec0f4469f9a226204efcc26d2fe88f2e6ee0a21fff1a36
SSDEEP 384:aUzyuTFoIAVR1qu5Q556l4PTHconrEU+8FodjSXHyVmWzTqAVeXwLn:HzycobqEQ5Yl2FrXzyjSXIRVZ
TLSH
T177A2D1344D4D53C7E45568DFA0B03F4778C3851CACAC65AEAD2A9F298E69D6A3C0E482
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 73KB
SHA256 5a6fb2d84993167eac2aaeb0147e3e75a845f6f87492ca62ac8c93dc1445c0dc
MD5 46673ece170741eb05cd83233968c000
SHA1 eb1542a9e277dc35bc46a14f1e26b9d6ad40182b
SHA512 3c36fc5c72b5f50f39ac5c7aed99800de6ca29f9cce428ffe67e2b34e520e5ab41c8857ef4446b70b035ffa60763646909cfa639085185e6de45084fa7b06e29
SSDEEP 1536:JZz9+BUVYe3Wtpdv64OIXJWp0zlJBiQLKyXtAqw9RSV6BU3/QwsRBEub4m:H9+cYegpdv64OoYYZLKydAqiq6BU3U
TLSH
T13A7302E472FFA4CB22718D3FE5A99B803C95DADF9226249981433C1321160EBDF155BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 62KB
SHA256 ac519dc6c688b135703f10532417a2405bd5fa0de3bb66b1222542332c33f54f
MD5 f03c086c2de19d9e77fa745ffabd9fa6
SHA1 0d62d6232982af7461355f16b712746a2e82361f
SHA512 e548d133dbaf7cd752ab37211c341d8c3ed1c6878b4bd0514c01dbebdc7f297ecbe82235f8deda35824302e9aadff9dbf5376cf73887393d8bc708b9fd0dcb13
SSDEEP 1536:+894fXs5vYLBVxQWDTLClg8eQqi0klz1/8s:+89DYLPxQ83f8AlklzVF
TLSH
T10F5302BD6564EBE00B59F0D98FA25FE12040B5C20BB7EE8653C0854BEFC5247AFD5129
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 31KB
SHA256 ec6693e71cf153a726cd27ea58f6d74f939cf65e5448be432f27f115fefac60b
MD5 f77eb55c57095e0ce3c26c2497209682
SHA1 0aa6ac281e3ffc3e18fe55a7fd5727029565d204
SHA512 10b660c49e8ebe106bfd862f2b50f639dd16cf2a7b420068a85f960007c7afa3e72387dcddc3573d2d8af6f319b7d9fed38a2ed2885f025ea4b3245c846b95a7
SSDEEP 768:w93nhR5RlECMZ+QBYmwO+36Tm5gAb2qZvDzMJX:mn/5RmCMQdm4D5ZbJHAX
TLSH
T141E2F19509B187774D0A9CBC4B28B0FB06A3D432E5088494F607D031AB9B9E75AB0EF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 21KB
SHA256 23e3ee7f519a90823d1818ce0238da4021eaef8ab73f529ebec522eee99315bf
MD5 ea36283a5b25f9d7a0f2bdacde5bdc6f
SHA1 136c21ccb383a16fe026f24bb7d93aac265550ee
SHA512 5219f4d7dcb2309de7aa913f7d2ab13510b2b31face17a2008109812c2a6c94a597a386967f2b41dbd8ecd7f42bfea2144aa5b5ae9f137357f33e9e2719a4126
SSDEEP 384:XiDBk/eny8gkR9L/JSCt4jTUH3Xad9xAV5+xdGpYg25pxL5J4MHZTOqpDt7n:wk/enydw9LBSCtqUH3XCwV5+xdGpk5sa
TLSH
T1B9A2E18E3D5243D324F881545D3B5664294B39CBABBF939562443106F223AA97BB2CD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000135

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000135
Size 68KB
SHA256 0274a299b3a81687a5192c4ff424872941d24a0b986035abacbbcda16ca5210b
MD5 d67f112773e898f90e775e65ebeb6385
SHA1 86b3728d490c3c6a6a97809f6b2eb7c2eb19cdf3
SHA512 f6e93b614653bc993daf4e0391000efe6286f78a9cc7d15a5836501d3016f5801c7cde8e8f875f2f1d6981dedc0946dfc87b83133cbecc5af92de3b122999823
SSDEEP 1536:fInxmnkHNVx/Uur0YtX30S30zT9HQG4TGnzmC4:rktPRbn4zTezG6/
TLSH
T13963011299EB3F1CBD0EFA80BEAD35EA0325C995A652A3F5073453E72425B60C025D6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000136

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000136
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000137

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000137
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000138

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000138
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000139

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000139
Size 36KB
SHA256 e13254529ac3e751547b147370179c4d434fe7ba18ff1d9bfbffa46f24b7a3b5
MD5 80a87cddcb7f5d4b2b116a732e3ce664
SHA1 71de97563eab27594c391557f052c66372849208
SHA512 457c1e6ed399e0887ea0bfc6a4c9ac17e7784e6b53d63575741b4644c2994e3e96f52362496de2937234736335eb337fda040523d9cc2377ef02c082ac3ac695
SSDEEP 768:fUxP1KsHQelvHotCt5UmtkZnkWd+lfbPC4NoXtzKZb:8bKolv2Ct5UmtkkWd+lTq4iAb
TLSH
T15403F128AF3BB4B30394B659B9418B296A0E987B9E51D07D7CEF4421754DB3EE07B310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013f
Size 23KB
SHA256 4d374f815118157d4ec62c285937df74fec28c75d9eec110f48d3e04cb321ba8
MD5 ce7b262351203b245322fe75044fb61e
SHA1 46fc201fa3a9a56cb91f3a08f4a380f6d2283e0a
SHA512 0af2f8fa0171107ca26b73d1eeed9599c0b67953e163441bf65dc3a5bae5c9aa82bdcc54255996e8d1d472db1b09ba3286859d595619f1706a8e61c464081dff
SSDEEP 384:zApz2RXdsOYVa2CE00K/4dJfoLdmiJo0zADElg9jIKauH6CwJ6k5zRv2LbFq:oamOTZE0hAdJfoxmiJ9zdC9SpCwJoFq
TLSH
T130B2E1833404A6947BFF27130CF66A08E6B2B67BF63273054465483E42B52FA5B5977C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00016c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016c
Size 1024KB
SHA256 e06259491faacfaa9840d9570ba2e9dde822a7ab0d3dde3494509f196e23e56f
MD5 5a37900b635dcaea70671f6d847a12fe
SHA1 702784ad964c41742556896d7a4784823ec93759
SHA512 dc270187e7ae789fa2997079da42850892d1ee1974e8f1f5734514e7b5717fc1daf55529c1a0a1a024c5f4fdb62280f827f1c34c2b9bc1647c6bab4227c9a47c
SSDEEP 24576:A6KdQzhwwDvM100enhEBx+ze4LCRQzHWz3bqr/5xbQc7:JKdQzhhvM1qSn+VPzHC3bAxB
TLSH
T10725239E4BC092CD94D117ABCD533B8477AE208DDA5141E8CEE8303C66ED5AEE105E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00016f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016f
Size 472KB
SHA256 da8220c49d731c92b5fcebed5e9c49758bb50ce48ad72109ef2b6800f6ea80ac
MD5 60a4edb2b901e07b0648eb1dcc30197d
SHA1 dfbd793e2216968ac09ebb0095b30202cf3272c4
SHA512 d25a1cc3611d0a1c56db824dd261470aa09de45a19e692f3751cd2e1e2d12a8e55e70366fc4f698be996492f28e76a512a149336f5d773d55accfae32f0fa44b
SSDEEP 768:wR4n81aJeEyBlYe4Z1/U0gB2Qt7FAcH8XBXW/SfDjEjOO:wW8gtdC0+JoBXal
TLSH
T178A4A2D5A3B27B07CA66CF3895E21770327EF5544F8B034B76A8A7285C933C86C1A8D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 4838f05c42506c66f09586f5cef5ab78bd1b93bdb29bcaae9f9264bf11025ca7
MD5 be140f2a18a077f4f5fd4e857332b127
SHA1 e9df6347f19ffc64914437b6cc44aaa825cccdd5
SHA512 a7a3dfb4a8ccd94f624020159018d0da76cf4a2b2bce37821aea3c1be0c8a5a9ba091d5660a21024e6ffeecd1a97e0c1a4cebc17ad8040e8a84a1db040c5479d
SSDEEP 384:mJ4QtRCHlyNKNDlQc27qjytchMW/ya/0Iwop0FF7v97YQfEKf48IwFK7Ko6sIQIE:QWkTAV3VtW4Miunq
TLSH
T12672ED0BC6E4C599FBA28AF568F0AA613334597617CB3F8709C96C3D994FBED149C402
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 d4041ac01660f72b78dd3705f3232ee0abfab2e67acaddc599d50a85bd9044a9
MD5 d3262b9f6fba608717eab1c15cf20d42
SHA1 4f4beb4f6ed32c5ffa12735e675ef3295d69323e
SHA512 6956ae51baef4fbbc11ccf035ca68ea0e0eb485f3daf51e909191a59e194e3f7cbca27b3b71dd979cf9adce03ace4a276005dae2b6f1726b2880e0779874e534
SSDEEP 192:eJ4v8f24e8it4WtS8qKVsKRKt98j5cMVJIjyxzjIBYAtKLCqcgwRBXGznixVwI4h:eJ4v8f24e8it44jqKVsKRKD8NcMVJIjw
TLSH
T15812720B41F0CA1AEBD48FF655A16C94373869661BDA3F4708C26C7C9A8FFEC181D842
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 9b8c82f30084e56ab1018d5e774799f56468c4f968fd77f06f2e519f1fdc6a4b
MD5 73d4b4505ea292f1d9ea4de973c89ab0
SHA1 227de17330bcb42efbb3294ad88c4b33b0ed5860
SHA512 4f736673dd34df749bfebe0d880e4fa400797067616899261da861efc507b53e2564d8bfc3c844ad67d1dabac3306361f35608456575f85b7f1b9cdb62e980fe
SSDEEP 384:xJ4yRVhlnKNUSGcgZejy/duFV4UeUTqx3IFSb9jYZfVOB8fMBKEKPsdBIyQrjL9P:ZjLIDdMnzk3
TLSH
T1A362760BC2E0C999FBD48EF588E1A89033345976278B3F8709C16C7D9A8FBEC149C456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 9ed4ddeb163143fc067bef281e3a36e99decf167ac53d4476c22f87cb8b1df26
MD5 3566b0b9017675c09f4b502b89e4066b
SHA1 597bbde0cf6c0f872bc7899ee36ac6297c50880e
SHA512 c805d04e66072e60fa222c56a6021646ffc1bcb50a6fb032e45c21f19df45b41d4b5596d5762aeec550c852817c5665c982701d93a62c0f1602b6f7f566bd964
SSDEEP 384:2J41tRVhlnKNUSIcgZejy/dFFV4Uek9qx5IFSY97YZfVOB8fyBKEKPsdBIVQrjLa:l91LvD8jnzk4
TLSH
T15F62770BC2E0C999FBD48EF588E1A85037346976278B3F8709C16C7D9A8FBEC149C456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 2a22986364ec9883b60c5cda36627218f890c1da4180de4d690086a03f7687ed
MD5 e73138919244a8394f4273eb63dc21bb
SHA1 e5e526a06932936cdb131d20c773f963541511a4
SHA512 e6c7d1c7e45ac7a20c83022563a1c5b6a5316c59baea89ebef71c43951992bc29396e45081d7e927c5fac6a61e0a7a32f934ac7afeb79810742a762d4a5ecebb
SSDEEP 192:jJ4y2oYofKN7CcimjyARGARnSRGdB4xI8zpNgN4tj9fIYyfkws9AO8ZK5K0NGmaN:jJ4y2oYaKN7CcimjyARGInSRyB4x/9Nc
TLSH
T1C432710B41F0CA1AFBD08EF654A12C943734A5662BDA3F8709C66C7C9A4FFEC185D846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 9e8543a2ed58584fc1695174f7d8328023329703f5e697f5a1648e74cf5e95c3
MD5 a7248e892f6db74801a6485b539a2cf3
SHA1 e31f479839f321ff3f7eb0466d11c10a12eba572
SHA512 ebaff4a5c93d8539b6c289679e8e904a4712289c0b44f5def0daad52921210880d8946193175fa49a0d6cd75f1a97b8c93efc9dc058f3db59bbc3316a94f3594
SSDEEP 384:eJ4y2VPZKNUJGc8ejy/d4FI4SR4TUxrqNSb9jYZfvx/+KBKDKfsCBIUQM60CqNID:z2q27c31c
TLSH
T1FC423D0BC1E0D99AFBD48AF588E1AC903734A9762B8B3F8709C16C7C994FBDC185D456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 16KB
SHA256 6e504e9ee89cf032a34bf027712f450f145ac83f90b73388c41ca628df8a2cdc
MD5 f4f5e3ac244776b0257cf153f3c7e0b6
SHA1 2951ae8f76abe7156a342fb6dc61aa53694e416e
SHA512 1780ec9959d958a45fc4a5e1f32e19a146e0898a1b00a200ed691cf1ea3ca28890eff96511dff9099f51ae0094c4884d49e1b8fce65152bd517d5d6c6bacd3f4
SSDEEP 384:wJ41tRU6l3SKNMSIcg7ejyKds/Wjya/fKaoZ/5FSG97YZfEKf48fyyKEKMYExQIz:T01wCeDwZB4RDu9y
TLSH
T10072AB0BC2E4C599FB928AF588E1AE613334597617CB3F8709C96C7D9A4FBEC149C442
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58e73e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e73e.TMP
Size 3KB
SHA256 9377d2d1ae8732a50af7f05bd5474ff74a184efe013f691ece258bd14bef6521
MD5 1f4c6591b2084f7febc27d4fc5338e2c
SHA1 f34855b05f3ae81c78e3cae628927827e4ee0e7b
SHA512 b6c4424e74ff4c7ea5ebb80271a510b7f499ccc51ce7f09bd0aced1f133241f628ffeab61c41964525f3f03122719454fb744d0635532d146c05cef563b1926e
TLSH
T1A7815D4281B18B1FE3E1CFB929F522493238B6384F2F7E6705E544BD9E2CF960094893
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 48KB
SHA256 7def02b254f39a59cc16957aab3e0199314e38fec093f4821ca7c55280883152
MD5 09e008b985bf0de55ccf1dc072b2d755
SHA1 2b7cb02460267fd048aa6ee12a81927ff646d5c2
SHA512 a07475941a22b4bbdcd2446ca528b9f0403a6a5455f95a13e99e57b72c56edf4271df5f3c766543eb345e516602c559e8c1c328e70e0a37d8cecfc70c2f8c829
SSDEEP 768:f5qGi2Gubv4RhN3O8M3v0U4M/hQiuPF9f8lvuqQi/hSre:Muj0h0Fju/8lZ
TLSH
T13F23BCF783F0666DDE2262F0AA557E1FCE6D0824871C78BA89D47E1693E2031F141B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9e0e87734882ae815a3501c3dfe14c39e86f1d354b1009fd8adc1afc184eccbc
MD5 56387c5668641e5d61532258a3a34da2
SHA1 58de6b4237137b88207886d930975e09580cdc74
SHA512 9215a0fea7d7ba690d902244272d17292526559011b9a20e2e81dd975d838619232c64ed104c72c3e4d01f9595847fb3038ef7cffd0d23a465bcefd42114dc63
TLSH
T1C641DDF3C3E8956D8A0195F0AA18AF2BCE6D0505831C3D5AC5E4AF1BD3E38B5E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 54KB
SHA256 81cbc53cb7a230fa883e3196f50d752387fc514804b146c90d628e2357c0e60b
MD5 c702f0430511c0c1ffae682378b6087b
SHA1 6f4252b250dc67f0a7bd35b4957bf67f90abeded
SHA512 ede0c720ce2c71958e4caa8ff5c65abcb1317e511c51acfe77c17e8a51860357f25259b39d2b9f2fc39918f46d7101125b7942cc1c98881e6b29c0bdcc294f4f
SSDEEP 768:a5MGC66u504RDsN3O8Mhv0UmMQ/Qnu77908l1hq0iXJFt:fuy0g+W6u+8lQ
TLSH
T14443ACF783F0566DDD2262F4AA553E1FCE6D0824871C78BA89D87F16A3E1470E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 40KB
SHA256 833358a91b7349ef8c528088fd74f44fd4425229c9c32b052bd503c85aea24da
MD5 88b19c4bf53e63c7cec9e6ddc01379a6
SHA1 8ea6049b7ab9ae992e9293f49e842256005d075b
SHA512 93391affffe4cf0e5022bec445546e4ebe79c5048d6f31085aeff6f747f1d16cdd5e95b3befad9bcec6a9abc550d93c7a17a3e366ada19e44b29372ca60edc27
SSDEEP 384:DWNoD30wewexPmvetfF3pHpJC/VcUe3RUegBeliYAJpBelhS0rJNuhHh2T247d2H:CgtAPLR3xeG01j+c60UsKC4S
TLSH
T10B1378F783F4666DCD3261F46A663E1FCE6D0824971878AF89D86F1653E1470E202B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 6145e25a6898036869144df0199bfac34ea4d03e9b1231b0bc6258673873a6da
MD5 7dfa4083f82dc7377867884de6d2268e
SHA1 8e00cfdba3769d767d6fa877e9c2d052d1717a9a
SHA512 ab3c7ecb199a73d254c43921799968643ed4af329f302db13f30da4e0051ad1e0ae963c0334ca8c9661000df8162d872a14da00f2a43469fecda666f526179ab
TLSH
T11DD02363134570F5756D5DD2415EEC4FC72500504C83BDEC75E05499093347D1517041
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 13f2d3a99c736070c5edfe1eb3da34de38483e16eb8b9a937ad6f68df1e4a518
MD5 484e313856b36a7d8b5008c5f21fc797
SHA1 a3ec89ef17d1f4c35174e44d6480d36c9aa8bfa5
SHA512 e8558c8ddac2f22f553034c395c480a2e01f577f505ea84d99fc28336c4c6a168ab4d28d5a4c731fc4681c65ea21404ce00f2730ecd0ab1323a213234665271e
TLSH
T154D02323178430F5756D6EC15056EC8FC72A101044C3E9F911E06469093247D4677145
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 91af41df2a1406f929a0e37d2a801930a5812258fbe9a322c089728e259dd4cf
MD5 ff52486b429b7b42a03a4a5c0e340489
SHA1 0749644b533cba09ff885005cc5a2eca83fbb8b9
SHA512 f7f356cbd58e75fb047a5ede28061ece85e5d4b38d28faa83e9f3822b938acb7f5908ab07146dc22ea36b603d93c571f816e617a2005303f4c1ddc40b14b4db4
SSDEEP 768:s4CXm4O/ftuCd/bIII589RjmIueB9NAiwL0t:lCXm4lCJIITu+9Ni0t
TLSH
T1D0E246A7B1740ABA5ADA5826F450F72EE791046A9AD08EC37FECCD1C10D6AFD7401C8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 25KB
SHA256 2e093793253155ce9a3ab6036f4dd3a90d8c823c4a414ae87cd4567591a7f0ad
MD5 db6f50e0a9de8cac4c166ce858227567
SHA1 df02a021cd700916bddac8f0376232f55f651e54
SHA512 f77e053868529b270cb22f9dcbe3a3ae8ec3b5e48f12eb66cfc2e867fbfd113999dff8f5eab0ae52d31eeecbe81541a367cb4686b126066b6bb1fe407b6883bf
SSDEEP 384:sxZT/dO/fGs7uC7RMTqq/bPX1J55Bhjgt/5VPpUiqA2:sblO/ftuCm/bPv55TjIBlpUik
TLSH
T15BC245A7B1741ABA19DB5926F090F72AE791006A9AD48EC37FFCC91C10D69FD7401C8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 30KB
SHA256 5f286a2fc3669d87f2c50995064073529cc7c14197dde9dc90b0b40a06ad6586
MD5 91a771c03231896f9290800a325c4727
SHA1 9b34b444fc293ecc717308700afee80c9bd11cd1
SHA512 f5946b94ba987eeaae02f52d1f55e7db2f3fcd3141958951c684b936940a43310da3b2bf5a403e8889731d41be315435673e72461982710ca90cc9f3969d7a1e
SSDEEP 768:sbCXm1O/ftuC3/baI589RjmIuaB9cZimL0t:GCXm1lCDaTuy9cZ0t
TLSH
T179D245A7B1740ABA19DA5836F450FB3AE791046A9AD08EC77FECC91C10D6AFD7401C8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 24KB
SHA256 3d3ce149fe1741400b4b4419c75eaf9a82ff7fb15ca75a4e46ffe5b452e042e8
MD5 8e06a5786bca05b2b4b1fa8b50f0868d
SHA1 49d68b8861e058e50ba26ffdb7344e0391d81242
SHA512 641c8abcde204643e75f33cfe308f1ca10b00869d2a06d9247909a7fa3876871af967bdcd9e40d0679cf3979de5ee571ace025dedd8589aac90bbd70aec96ece
SSDEEP 384:sxZ7/dO/fGs7uL7RMTcG/bPXE15BGEJr+0VPDRiqv0:sDlO/ftuLG/bPE15EE1nlDRi3
TLSH
T15CB253A7B1341A7B1EDB5932F050FA2ADA9104669AD44ED3BEECCD1C10D7AED7401C8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 0f66f2b2dc4c79d4b77bf89f4e95939942947fc2fa6490b171c79bccb1c4b10d
MD5 75707f791b9fd32824bbb922f247dd01
SHA1 1795e749f1918e547096bee387a6de5a8686b3be
SHA512 b56ddff3abfe4f6be9512360acccd6dd9b25101b4dbef489dbb2c8c8aa05eee2471f03e01da29d5d213af876b0c22390cb85d655a2016a1a09f3e800667785bd
SSDEEP 384:sxZf/dO/fGsRuLajFrLTOf/bz/g15BXyFPYVwViqj0:s3lO/fHuLEFrC/bLg15IgeVi5
TLSH
T1D5A27297B1341ABB5ECB5837F044FA2AD691046696944EC3BEECCE1C00D7AED7402C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 b81d019782b3d6ded8235470ba6c8f27ca2f792754fef75c88932388c751b71d
MD5 f04a99a1149d77ee32c7b9691b35b521
SHA1 cb730bcc5306ce28be3b0b37745a13cea3eb030a
SHA512 9ec4fcf5c638c758a4c98267bc82f266cc650b0db33545d32de46b48c67be1249e33ea22c435a59433f991b60d958a85989f9653ae208e28680568d3d3763a33
SSDEEP 768:kD4so86s2+q7pLuL/HzWRmH9QYR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EU3SLlG:kD4so86s2+CE/HzWRmH9QYRu1jaKEU3f
TLSH
T1E2031C3B684CCB7E4F844E9CEC2ABE8A6DE8018F96988D9447FA444C03C67DB55171DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 b47202c3e8b6ba0834e66a6c17629a4131cc0cbb3c33a8a9813ea9270557487b
MD5 6747260cc2ede0ac1b058ecdf9a3c0e1
SHA1 3516775757b3554687ea61f3053831dc169a68f5
SHA512 40908679fb3ff081193796c06ab54002fa489a83b5ea46db57061d36b6ef52385328cba940c38b5e0514a1640e480e865f4d81f13731f7d6674357cb9b14e15f
SSDEEP 768:kA4so86s2+q7pLuL/HzWRmH9QYR8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EU3SLl4:kA4so86s2+CE/HzWRmH9QYRu1jaKEU3l
TLSH
T16F031D3B684CCB7F4F844E9CEC2ABE8A6DE8018F95988D9447FA444C03C67EB55161DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d9dd2bd6-4a8f-42dc-ae4a-f28358bb8d24\index-dir\the-real-index
Size 2KB
SHA256 49c515c26e0f1ac38f46a5bdf5eaf1177943b0d8580e05e60ecedcd047cde06b
MD5 fbfefe9600542e3450a45e536496575f
SHA1 6bc077c78d63d9d13e345e1c4b4be85b14cd758d
SHA512 050a55501b1b85c55f74c6632bc01cc11adb6326d22c70ce0555a07383cbfcd40947f163ad4fe33739098ba1ec79de40ce361162b2ca3ca20c29330e1907775a
TLSH
T1A041A79C6C894D13CD3D467118B9253933B858FE2A485B0B6DBC467A7C5B7A52CA7308
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ca4d3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d9dd2bd6-4a8f-42dc-ae4a-f28358bb8d24\index-dir\the-real-index~RFe5ca4d3.TMP
Size 2KB
SHA256 59e8fb120cf77330f7b7864d2a22d7476bb85ab399342913e9d20aae5ade2d49
MD5 33c26b7e0799dc63b4ed5bcb879ab637
SHA1 1d6b7dbd5d715e37cd50495277fe3a9a1906fb4a
SHA512 dedc999b11555de5b772b2c13b40a8a62589e95a00a4d57ae62ce1d1ce4b2767cb1d3d4423740a9c069063e70fec902f61839eead83efabe2a9036366ee0c777
TLSH
T16E41B8595C864E23CD31807259C9646D333DA8960A409B0F75FC8A33ACDBAB92DA2255
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 06660da1a87249823c93a5c3663e70ef0c4088b7e1ccc3ec0c496aed819244f3
MD5 fab4f57ad4820918e90d420ee37f9cad
SHA1 3a4d3de34b3316fd9335a5c4b7b8185e70bd51a5
SHA512 85303c81a841113b8fe95c93c191c5357f9f4584b3a3342958b87645e7cbd76c0ae414d0ddc9f6b0d649af68220e34ff812872e45dee2769595ed90520f546ec
TLSH
T108E0D8F73EE71924FDBB8BD5647180A41042B8688948EC4E642A72DB10B22493446C61
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 d6b18ba81327f3c95db8dea31af32caab8ce23d546e0185dd63b0e43692c25b7
MD5 f3e6e4fe71cac5a9fe1d4455b7b88704
SHA1 286455c42c254d4bef1cb2b925f610522a2b8b3d
SHA512 919655dfc4c99407359d93bd866f767c680d54f4062df302f92bc57d61f65b4cbda425cd555dc9b1cb6893f0d51e9846a0348db2e30fb86b7eefc705e4163b26
TLSH
T149D0975BF0590453EAAB0A821221049A43247C880988A04CE803741D2875B4BEB11F67
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 0d018a65866f9712977ac9783f5391b4d0bb8d23b73d1b3ba2bad15edbbec597
MD5 c0a1536a12d506c3214eb4fdfee71a3b
SHA1 465ebdff7e235d5dc277e2e9debb8858b3569b75
SHA512 90904b3cc9d511264057bea6dfc23241ab29b0040bbfb38cc2a52f79f2ae691276f7474d53c982f0c0536ed378a27b6507fdab8a23096f80cb666feb0519f8e3
TLSH
T1F2D0975BF0488413E9EF8F821221046A43207C88059C604CA80344196C35B4BEA02F67
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a39ce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5a39ce.TMP
Size 138B
SHA256 548a8f76e2a73cefcfd51fa0493d034a74b30b6a7727f59400ac5ea623614cfe
MD5 261e2a4beffb033bc7a9e894792e43a9
SHA1 82d1a76f347f4e12ce199bcdd15fb507e3df19c6
SHA512 74bb31343ff5a9986bb889321ba574192def20aae148096642635ae5f6869028fdb89756b73ea66e963615976fe2c695497c9b60b2e81606fa5f7764d7a4e458
TLSH
T1B6C02BEFB0440413C75A0A930332815C83042CCC4BCD808DB60330143434E17B202E95
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8a186aab5eccea3ce640bf41cec07e93bfb71d385f5115e5b4b0a86b66206341
MD5 26e2442251b7582777986e1b180e37c0
SHA1 12b0446078b9994df369ecb1cdd8422deae2ab5f
SHA512 6a28da06063fc9ecd16fa1e523874dd2834011eafcc890c1d3b02307c057970c011873a8e1e90830c77e40dc4bd4f3d2d2880191b2c8eb9b68935a3af0630de2
SSDEEP 96:KkGQKTyeupuKK8DF6KOkKeFGKWoJp+K6wKK6UKXqAugKHqC6S0KzSA+IK/qa2jSS:ubB91NPhfYXHkvl7X3S9r4dFf/Xs
TLSH
T1F1B24A91797A02903A7E259A8595B83E52C23163711CE46B3BF900B60F6BE31DDFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.4\data.txt
Size 145KB
SHA256 7dd75cb36b4cc7c5f2df67bac823b9d9d2c3653172ff73ce6cccd39683970a08
MD5 79f8327a9cd094a4edb1fd159e289e95
SHA1 4d3615906d16d8a807e1bd394bef139507ce12ff
SHA512 9ab212871ccbe15c062da9898a782d75d208a2591b4c804df3e32581751801889f8cad8fae53dc0307cb89172c4536d35e44c06d63df6928ec4c4446a55a1343
SSDEEP 3072:tPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEEY6lCuZY:9X1aI5aZoKzMJ07NtxoY
TLSH
T1C7E3F110CDC51FA8CEAC362C60FE0F1A63D1C69D4867A5C9DB63FD0A6F97A0492275C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-checkout-eligible-sites.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
Size 23KB
SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
MD5 ed22bc3ded6df0109b9e594867473559
SHA1 ee39eb80dc23f7fd764199cbe4a153c4edc2e768
SHA512 fb337c0a0107dc37a3067bcd6f60ffb8f63ee892a0ff729dcdf67c7a21fec95a742a274853e8947489108d7543c13b9479e02574f490bc217e8a182f08543aa3
SSDEEP 384:rQR5dkrKzmQWgFlhpyZv8CTi8I6kxAvh0mD:reKrMP8d5JIVAvhV
TLSH
T18CB21064C9210DE11FE4412B6878224B1A3C951B8F90FAFE3B6D928C1F5E06F61B95FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-notification-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
Size 804B
SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
MD5 4cdefd9eb040c2755db20aa8ea5ee8f7
SHA1 f649fcd1c12c26fb90906c4c2ec0a9127af275f4
SHA512 7e23b91eab88c472eec664f7254c5513fc5de78e2e0151b0bcc86c3cd0bf2cb5d8bb0345d27afdd9f8fcb10be96feaa753f09e301fa92b8d76f4300600577209
TLSH
T1AB0189EEC8800EB216C24A3A163985C31A3756576C953D147FC9741C2F5D62F22FB98D
MD5 SHA1 SHA512 TLSH

Submit Download

wallet-stable.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
Size 81KB
SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
MD5 46ca0b1726448d9c7ed48735c246336f
SHA1 8e26f1f1c6f909f2f3d34c17e042e579f3b2b449
SHA512 c9ec0465c2c0eb0bc0316163f9a2dab9332c372dfc4ebedb0ef4139fe1195efdd8aa34367155c29e659d97d5a27e2395ce2f6012c115ef5791bad270de26bb28
SSDEEP 768:r7PEXSl9cv2tlNnqSBBoCJkQgXzwb7XARjMLVF2CYgYHFkJ/Eqajvapznp+9l:08W27jLgX2ZLSgYHFkJ/EqajvWnAf
TLSH
T1F283DB29C9120DB11FA4001A28BA290B297C960B4F55FAFD7B6C938D1F0E45F61F59FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-tokenization-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
Size 34KB
SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
MD5 ae3bd0f89f8a8cdeb1ea6eea1636cbdd
SHA1 1801bc211e260ba8f8099727ea820ecf636c684a
SHA512 69aff97091813d9d400bb332426c36e6b133a4b571b521e8fb6ad1a2b8124a3c5da8f3a9c52b8840152cf7adbd2ac653102aa2210632aa64b129cf7704d5b4fa
SSDEEP 192:0NOKnK+QXzpTYaDEqIyVZ5mxzrIAfrXKoNKExGI+MmsMR6Q9GMKPrZnfB4FXZ8N:SOKK+QXzpTYaDEq/e5EAfrRoRI+B9wC0
TLSH
T1A3F2FCB1D9009C932F58850A20BA9505376C52237F86F9FA736D424E9F9F58F2530EEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 c793f9151a37ab13cc971ab99f3f341216c190c3ed883d19542e8aaea1e6802a
MD5 156efc4a53ef9e0fc0ec049dd6a45a00
SHA1 078e74014e578851631bbdd3a5194951d7ec1016
SHA512 cbaf0e570d4bec4efffeadc342fc9000e3df467d3a53b205141be6542f295fa443a9f0a7981f0ab7834cb285068aec2eeeee067bc4bf7adf8a7ee7acb1fad65e
SSDEEP 384:n1WiF1jccCs+Bt0S3938Nt88TUNTUlIRTgPSY5CeJVnfAPYpuv1ZTagPVjSxASBr:7FlccQd3e8wgMtKYpM1sGsxASCiey
TLSH
T1C7E291F298D38977E9AE4B97933D6E429ABCC153B5885984FBC40D0CCC861BFD306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 3c9589022e84abfdafc1a5893f25245d16505b6bd6b79aab78e1ab2376f46801
MD5 cf8704843543852a377379a9ef364921
SHA1 d0dc23b4173b4d712dd0b11385a8b0e7d372e4b4
SHA512 60ac555e26539d7f31ecb2ee3a5277a3acca747f8a8e0737f176b4ec68741c3a9c33e1006044d8777ba31f763659c90a92e1ebac2427dcdc4cccfc808c136c39
SSDEEP 384:n14iFJjccCs+Bt0S3U38NJ8TUNTUlIRXgPSY5Vs62VFfLYpuv1ZTagPVjjxASBFx:xFJccQ03qwgMU6sYpM1sGxxASCiey
TLSH
T191C24B32A8A4CDBBEDE78E9AA34A7643EEE01263D68C59D4DDC95D0C00C71DD134BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 1f161cb5eb3e3f1f1efe8e5d3f95f48387819193f103dea8eeaf0b0eb4b7e79e
MD5 6e8b2d501605f7d5d359d29e3fa8b50d
SHA1 184148d9ee8bd49d873bffbc4521102886692cad
SHA512 aaba186b496c11e1ab59630dccd6f9f05116d555de00c2f59e2ba760017f245545160e55e8b543104c2e3902b66032e88aaca2c261a850ddeab5a731b07d1aea
SSDEEP 384:n1WiFejccCs+Bt0S3938Nt88TUNTUlIRTgPSY5fNJVJdfATYpuv1ZTagPVjbxASZ:7FIccQd3e8wgMHJeYpM1sGJxASCiey
TLSH
T17DE291F298D38977E8AE4B97933D6E429ABCC153B5485984FBC40D0CCC861BFD306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 176c4ab9115360ea16ffa08027ede6d3d0f5efa8c23d1611f544c9d0a976e5ff
MD5 70ed241c3c643940d8fc37c3fb28a96d
SHA1 7113e7d17e6270ede16e6bca6426117965416dfe
SHA512 8c3d5a3985604b90683e76ee327f7b42d1f85ea9bb5987c7795a4ee859734fdfa91514c4f86a5c241ec30035f81e864c6f004c5e41d45692abb7f8fe73424e97
SSDEEP 384:nP4iFavqMg38Nz8TUNTUlIRHgPSY5VqxVFfLYpuv1ZTagPVjRxAozqrN1k+5vI+T:bFayv3owgMyBYpM1sGvxAozWX
TLSH
T17DC22932E864CAA7EDEB8FD6A70A7643DEE04263958C4AD4DAD81D0D00D71DD230BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1d2cb621b6c27c4ef3100c989b528f164f99b731a8260cbf7e1335b6c4d9aff2
MD5 9e0d23648ffab10be4b8f2feaca6022b
SHA1 1f806b4aec3fd241a8a9f90b1d431426ca02da2d
SHA512 170cf231806171276ba75889ff7013777f01d371b7dbf9e00ae08ee5c132986f8760f9a92f21e0ac8896eee36527f066e04b2582db70f524ab98f48375148017
SSDEEP 384:nK4iFavqMg38N/8TUNTUlIxBgPSY5oQROVFfLYpuv1ZTag/x1RYV/Vw1mRNCe02K:aFayv3cwgGBREYpM1sIx1RYk1mj/0a+
TLSH
T1FEC25B36EC54CEABEDEA4FD9E709BA02EEE00267D59C4AD4DAD81D0D00D719D270BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ba368e0b82796bb90b2768b3d594b517ff93d995853153d9d1cac84ed90c8fc7
MD5 f1cb7854701d9693343597d43fd54d51
SHA1 f9dd83095fd6e2294abb2a972053460402cae4b0
SHA512 350e5d5cc93e28c65a983bc9b983d5ab26109033c4c3dcbc28a6b328280a1bc05f0e3451a880e549456a8a4fb561f5de7109942eb381cb11abbd81c0b31d22a2
SSDEEP 384:nf4iFavqMg38N/8TUNTUlIxBgPSY5bPyVFfLYpuv1ZTagPVjmxARYV/Vw1mRNCeG:rFayv34wgGZgYpM1sGQxARYk1mj/0a+
TLSH
T1D0C25B32E864DDABEDE74FD6D70ABA02EEE01267D58C4AD4DAD40D0D00D719D230BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 935cbd047649ee1aa7852b4127924048499b0de36cda902ebb413f3b3ea07f72
MD5 f18b03a9b37193e932df878c5a1cbcd3
SHA1 f0a899ff1bc66a13afd04464c551c5c70dff79c8
SHA512 a8686b2e05a73cbabc7271c95acd3f061ced068c6ca180820c1bbf01ad579ee80e06fcaf11c1ecbef2f125221e7f4d7c2b45c39fdbdabd07f5df3eab542b3d6f
SSDEEP 384:nP4iFJjccCs+Bt0S3U38Nz8TUNTUlIRXgPSY5VqxVFfLYpuv1ZTagPVjRxASBFjF:bFJccQ03owgMyBYpM1sGvxASCiey
TLSH
T16DC24B3298A4CDB7EDE78E9AA34A7643EEE01263D68C59D4DDC95D0C00C71DD134BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5233a014af7e71eb2674ee62fe6d3339b745298fa05c452291f11b988c0063d2
MD5 57fb9ceadeed36afa6e5b3d78c7e546e
SHA1 6624262c96ba84e85e3ea2042e065d088c2d7f7b
SHA512 2c6266e9c248ed5f2b509d3ae0717913d0e0c9d44acaf096def52ac00c13b790b029bd757ca3e536fc9f98828c7e1690c3741cd370584a627171c51458645942
SSDEEP 384:n1WiFJjccCs+Bt0S3t38NJ8TUNTUlIRXgPSY5VN62VFfLYpuv1ZTagPVjSxASBFx:7FJccQN3qwgMV6sYpM1sGsxASCiey
TLSH
T1B5D24B32A8A4CDB7EDE78F9AA34A7643EEE01263968C59D4DDC85D0C00C71DD234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\crs.pb
Size 233KB
SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
MD5 8265ec43991e2a046a7c7de702678282
SHA1 84b3ab55cfe6ee24909c74000a875c3d4118b450
SHA512 21c4cd80df8abc08db43ce9c2663cebf2ecf9a9e3c6276cc5280b8a3cea5ef5ffbd25bcabb9fd53b8ca2dd8bc6eea760c4692c47ebc8a1df21097a130bcff422
SSDEEP 6144:KKiD4b7BVpsrYRVW+J2i/P66k88yST+uUM:KBo9VpsrK2GeQY
TLSH
T11634AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\ct_config.pb
Size 16KB
SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
MD5 442440bc4c725cf395df7410e58d9653
SHA1 3d387b0a60fa20c9c4a22d5e8f6ed5f6ec8d1520
SHA512 28879ff61c3933068bc4212bfd9da3956971fe6e45f5a8379910328899acfb489353afa41b67e1c961d95534aee7f2c004ae04ea92286b43491595a7aad63252
SSDEEP 384:btomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:bl5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T15672D9BFA1169F000383E558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A967B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
MD5 d05686bdc79220049deee3d07b28c41b
SHA1 d59bd95593290a239f6d4538ed1674d1541c4017
SHA512 78163f8efa0bf534325087b08f31ce488bfdcf154b79ef6c53ea41c648b9f11bfef13de21a2233b89a4a6d89e45fdc9e261f780a568be9599b8e50571f1458bc
SSDEEP 96:rxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:21IDCrBnYQ5jlMacFwn2c9w
TLSH
T1302204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a6abfb179eb922d7176262c28f5e15bb27f92ae0f76faf55af210705a00544e6
MD5 39538ed9d79103cb473705f7648d265c
SHA1 41d7ebf30f23c0f7b5a18e5290a5ad3b141ba4bf
SHA512 8bb01466ea4fc46e7a5d2c75443f00f21170452e6126e033be2ff1d1d8d0c330dcc3ec5c573880cd980886e7ea5bd1c82d724732b921dae3c11ab33526e633d9
TLSH
T11FE0EC03934450FFC03C033A9083AB206AF3C0B402B3834AAE2A1628AE767412F74E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c5fa3d4fc7ea642f8a1b5a8087d848f200b3f87d4eb5955fabfacb707405cbd8
MD5 d737b6292c02f04319b046d872ca24fb
SHA1 4d5f510248c81fbae725ede4173d6ec308a1bb1a
SHA512 75b9725da72a902ebb5ef40aa8911638d76ae57475137eaed15b099a5797118fc291d654f6f43d3cca4aae9684b46058955eb709e107f75ef674db1b20813faa
TLSH
T100E04803930440FFC43C033800C3AF203AF3C0A102F2430A5A3645286D337802E70F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d03ec99698ecced849780a5062fb26533d32bf07302d2da5f19a982557241d47
MD5 1b1b5e8b95cb06a738aad77340cfb2ca
SHA1 bca9a1253861d7b7303badeb2cc0cb042bb8ea8b
SHA512 23b0f52163e6f0deb10c40a777e78b7453fd8596383fc2505594ce87dc82d7848043507fdfcaa9eedab225406d3a863879078704d0e0f5a4300369d303def10b
TLSH
T17FE00103934450FFC03C03789083AB306AF3C0B402F2834AAE360528AD77B402F74E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0d17beecfd9e93379edd4ae5540e0556c085188a96b5964486b893298a494c02
MD5 b3cad1aa0d81d99ef934a6d436947bc8
SHA1 cc43515933882f682e9825ffed6f61d22987057b
SHA512 57b3f5f492f793809284a8f3a9d12021ecae6503ddffc7fc3c40612a010673584bc553c5cca5637e5361f2709107af16c1aeff304d2ed3abea7fbaf460ccb736
TLSH
T1AAE00902A26900BFE13D033810C3AB313AB2916107E302459A2651786D627896E74EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e595708a7e83a0280733f0f825f8fcc6a5d5e8020a0df2c5a6da9ed017e65d8c
MD5 041fbe235bc270ad2fa22796624085bc
SHA1 a0bd939f06db71b14e3bc1da8159a0ff52e502e7
SHA512 2580a9b71e3ac7c0e61dac188a51f11680e7f49138cd1af37bfbe2a8de30c14db1b9e6c7fbbc31b8a7446645e163a963671cdd86f7de76c39294d83bd927546c
TLSH
T1C0E00201A35800B7D01D033800C3971039F1C01007E302059616517428627041D74E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 72174c6feb7957a12ccd4560cfecfd4cd997283462ddf7bbd39b074e48892ce5
MD5 d034ef0b7558c9ef66c517da96bf60b5
SHA1 16fa4bd1d752415b4ae93cffd43e0b6bf9b980e4
SHA512 f3ef2a593d7a8c2cbc980121641282e2b58392a75ddd5930e65f0a4b00ed96584ed8e40f72e64d3ebac21bfe02389827e88c662a389f7bf025b245336907d649
TLSH
T13CE0EA03935450FFD53C033550835B206AF3D07503F3434A5E2616296D777412E75E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8a54faadcbb7be3c0a12e2ee0e389908fa0835eb1fb266a634c53a3997fa3f11
MD5 4b0da383ee2b979c04ab9075b7d41ac2
SHA1 2a88d3976c3ce640350ba8703078eb7c95433086
SHA512 0e9257f36e14d94a9fb4e732ec0413927526a0d732815ce34b82e030588c5cd8161f8a23209e3bd44da4cc0767cc14490f3a7651978af43e76059e6bef0e2d18
TLSH
T1FEE00201A218007FE02D033801D39B313EF1C0200BE30355976651786C627443F74EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 23b8df4327071f93d45b89623566f01a53b0052cf4a0cafd2d47b67f83f3417f
MD5 24b2a4ddb1455f08d8e21288ada9fb83
SHA1 ab76ce88d95e52bce779e3fbc8180001e7625243
SHA512 7dd5e01579bbc0dac7774b6c5161d8fbc85f9c6292a75ffef292398b3207e5261ff8aa0ecc92885ab01b94f903d4e4323ec89fda855d3ab1602ecc8f140c6c3e
TLSH
T117E00101A21800BFE03D033801D39B313EB1C0600BE30355976651786C627443F74EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8d09713b49d7c18b0c86004e86bcc9a54618f1d2dd7b5dd75d041f8d4f982258
MD5 04a203cb66068173da82ad708f11b478
SHA1 43c17fe1e3f2a7f7181674c47f887ac11944975d
SHA512 7c7998cec9a346d4a0ac53b667ed560b67798c44817c098238942d5fd8317efad730beb220e12b6953c7872d8b6d26e0be2905211b2478d3113f2c2f416c9008
TLSH
T116E04402A32880BFC02C033800C3AB203AF3C0A203E3030A8A2A08382E222800EB0E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a6da31f7eeb1d5789fd7a71f8ea92bbe19e297c1f14d1b810c9d6f56d7ca1eaf
MD5 7361e8f52ea30cfad05fbc638e018256
SHA1 76f20576f1ebf60333645587bf09f621f5c2bbb0
SHA512 8d7011261e1020b4e0d8811203d3df3da0f36605de58acfc54824fe52586c5b45b53eea9d0de284a3d271120691008e7063d5e88bb12c831fbf0099b313c80eb
TLSH
T12CE00103930440FFC43C03784083AB202AF3C0B002F2430A9E264528AD33B802E74E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 04d9a40c8763cb7f2c8c69f8fb749aca2f750cb4d85815346a9876f402766dac
MD5 49f5a0dab0c5859386dd2008c12086fd
SHA1 bb783a6826da39274977e50966c7d569819d43a8
SHA512 eb29c76062ed6755534ff5047b76b5696b91fe8aff2c1780ccd520af5bd6931c5cfd080c9841d760b4555efc6d617634e01dcde4b08cc05d64ebea6311d493e7
TLSH
T193E00403A36900BBE12D037810C3AB213AB3D16107E3034A9A2641786D627896E74E84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d0de14d2b23476d82543c81cd57391e838f60cca3252b90f2dae7869ba7b31e9
MD5 02d0c2f651d22f137dc38cfe2f417241
SHA1 e322385d8b73b3cc014a89e812588f2196e37c12
SHA512 6a1fd799c0e4a1eea85e4bde6720d742f876068d8471ef64e6e1d33099922fb0942c1ce859b2130fc478fe0baa807e0961454a5718fa417c023c4c00f38155d8
TLSH
T1B9E0EA03935450FFD57D033650935B206AF3D0B503B3434A5E3616296E7B7812E75F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe587bd2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe587bd2.TMP
Size 392B
SHA256 563b06d2cb94a32c1c29e9bc0f0d59a7a399cf80cb671aa0808c34c5064d63da
MD5 3460d24568ddc987830e29486845ee70
SHA1 6085e352101b38bd7b8484a5fa61b8bb380fd878
SHA512 a49a1238caace094e5e643b1aa1ea6e6004a46ebbeea93a1603a060eee1757ca4c231cf8cad55db50a8943d24a75c2f41b2b9d62bcfe77fe534ed07dd8892ba0
MD5 SHA1 SHA512

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
Size 1.6MB
SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
MD5 acc4a11e2e7ba213daa0f5e73300f694
SHA1 979463888ec0a9931499a9b1bf6cdedd9bee0872
SHA512 cd81ae9130a4df9ff95932ab57a6f8410aaf6fc0df0979f0d54c2d8332f0c15dc860d0e59d3d6b32e2b14c47a89179c79f935f75498634fe7cb904f3374db907
SSDEEP 12288:1Po6kw86Bm53N/m9hb0dleifKXYXHX0Wi5QIQ6E7JOPo1oQSc9paunY:1PZq9+9hbHifKXYXHX0WwQIw7VSj
TLSH
T1C985B5F9DFC00194DAB8112D20BE71D8081412A540E5EFEAFE7C855F2BC6AC977E49E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 2b4a7364085463da0e7f8f124bc84674c7f9f44289b5fe03b47fd0188c843af1
MD5 388b248e5c449464b31d670d5ef93044
SHA1 a7ffdcb32dbb26d161065a0641fe005ee3dc448d
SHA512 61b595a27cf5345d2fc668df738158e55b085c4826f0403b0aad08d16b749d5b1e97b53af1262e88ed67665de6cd19cbd2f7ccce219667722fdaf4094840deae
TLSH
T1535170E14C7D1AD0E1BD1E6FB04B78FCC1E8C221F964313D6858EA480E3A61A648587F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7b200615eae4981ef20df65354f9d9cce7548b92d69571b09d38fd9131c59810
MD5 a6abe98cb16807dbdd2e64d666f06d0c
SHA1 7d545defd131a1a3c5a1a3c0f11368b40fbdc66a
SHA512 38f5d4b20b8e23719b115538be7d240a550959cfe40039bb733ee6e418eb3b195d773aef85d27b19ad010511d6ad40b05356df78b05d0a8d8aa15fc1545772d2
TLSH
T1515161E05C7C1AD1E17E1A6FB08B38FCC1ECC626F5A4317D6818ED980A7A659608547F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e937897b19be2e1b218faa9819d702a2b5426a859c267e146f70a44059bef4c3
MD5 47409effd3c675dcebc50bcdcb18c282
SHA1 1668f30ff310e70854c3c0fca6f0777e6f0f7ea4
SHA512 9d2151a26a1493f22a9e41e59f5d18e1b33530933cdf0c65d1355a101fb00a6d58bb99c6e8e2f05a95a7b3833fe5f3d17e6ed792b394a82184dcaa3d0dea36a6
TLSH
T161515EE15C3C1AD0D1BD1E6FB08B78FCC1D8C626F560353D6858EE580A3A61E608587F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a0003253c35ac833a752ef7291156eb98266a234c6b65c1dfbef4a8b5cc76911
MD5 d4075ea617e72dc5289766242069a1a8
SHA1 dd093214441a40f734725f2a9733e27f803805dc
SHA512 2ea3e227b28773d16c649f900bf01a4107bbead3782211a4cb7cfb97251fd9cb0a6fab3ccde1a76fbeabcb17fe19046a2ae50509d615eec5a689b7752284d020
TLSH
T1CC5160E04C7C1AD0E1BD1A6FB08B38FCC0DCC626F5A4313D6868EE580A3A659648147F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 9d273a8d21c2431856aae2b272137fe07c1f57c13bc51e02088b2c2af515d387
MD5 2c7ebd73bc896407ed997fe16dc52340
SHA1 538e4fd97741e368738fa09e3bafd5d38001f04a
SHA512 8fb84e7773eba4542622f7d5f020d196747a7362323dc8e8348304b8eea59581eec7099608f9310c2ccfe322abceaa1e072230c4e45d36d61c68a014f7d31bdb
TLSH
T17D5160E04C7D1AD1D0BD0A7EB49B38FD80ECC62AF4A4347D2864ED980A7E60D248083F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 6bbf99c7aa5aacb1b0057d2af54b60ba853a3cb46e8b17808fc095b979cfc2d1
MD5 f591ff62278fb15927c4b541b1052736
SHA1 f2254ad8710da02c24615325e6051a468574b537
SHA512 11c1f42052f6443bb4adf933d5e1a1eaca921d98952438904a20733e5cc6880b0c12d91cfbd0e1b04f5e8f3c7e97802243b20e96bb250bfed5157607aa6de5a1
TLSH
T1BE5150E05C7D1AD0D1BE1E6FB04B78FCC1D8D222F564753D6818EE580A3A61E608587F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 b1ec49c62d6adbd0f7de55fa7ffd471f508c1d02421c260fd293bc1ac7671f76
MD5 b529ea835df4140e06bca61941c55cb6
SHA1 caaa7b6540da54f1a872f3c5335b86fb75366cf2
SHA512 6918b5270b775b3e14885be433565b996dc296e79b95efbb78beaf306455ebb7b1ef1345ef2a09273b36519b0b9aa501a71926c75f6b592915442ed61519bf98
TLSH
T1335163D18C7D5AD1D4BD0A7EB09B78FC84DCC626F4A4347D2868E9980A7EA1D604143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 1d485657d00c777425dd935afad77620c8bc8b147912c07d91231451603a9113
MD5 e09060efd8d2875da7a8ce7a11c28a01
SHA1 444f3d1fe55ad9189fdc6be3bd6dfda21f2a99bb
SHA512 27338303ea2eecffc2a9ab68871583d0a9c1024394a548bca452de4483be9d129b88e85153c194f3380116271648193de6ac95c0e3982b69614ba9fd48154cfd
TLSH
T1815151E05C3D1AD1E0BD0A7EB49B38FC80DCC626F4A4347D2864E9984A7A60D248043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 93bff34428da63936d1ccfbc560553f7816ae351fd1765dfbec36d71f9802151
MD5 16f77744b6fbb3a057fc1ce105ae3cc0
SHA1 bd255b94787c20672c5ba71f463f3ee90e7de599
SHA512 fc1c13a3a1091fdbbbaeb2c141cefdad4f5e30e722184e7738d931135ee84867b1e47652558d4dbc38b48f7d131ec41b56ef13d8a6fc21c8e71a2192ebc3d30f
TLSH
T15B5151E04C3D1AD1E17E1A7FB48B38FCC4ECC626F4A4347D2864E9984A7A61D608547F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 1f57b8454ae9df36f102bd9a91b15d36cd26db542ae1bfb246460071f947006b
MD5 837ad418a8cd816166c6f3039eb527f2
SHA1 2e679c24216741bf3858de5361962a795b54c8a4
SHA512 a0d73f4735cb2aa7069fb9e0832ce74019d0396aea1f4578e862e9ba75ca8395e09315c3afeb545511021f36cfe13ff5472dee569599e32c186ca1504d421dd1
TLSH
T1E05163E05C7D1AD1E17E1A7FB08B38FCC4ECC626F4A4307D2828DE980A7A659648547F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 de0f8b3f6fe1d43ae61f13aed3afe5a02e82c96ab2f7102d6cf1382dce1a5311
MD5 dcafba8aad1e88e7a03b8cce46bcb3b9
SHA1 57bb5b4469ff4e2455a7c2947807a6b8a8c41652
SHA512 e10d3712bd87004e247adeb337812b95231629342a17fcd5b22460a4e6d06d414531a28e5c1ea9a15b822a9114d1aec0138b63d295335a517e005b774ad72063
SSDEEP 96:m9JJNiWbnwab8wAJuXKw52swAJTtRwbS8NyAJru+gNAJnIux:aJLZAlRAvA58ABI8
TLSH
T1B3223392A7E61952F3FB9972A9736754AF76B801AA18CD0E4150810D0C23F41DE3DFAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 f7cd6a316b22580d143f25eb2ecd373597227fe13ff8d2e08c27cc29714a3df3
MD5 8d650fc8742419e22d674468feec7ef0
SHA1 ec3fc7d1b3171304363b2d1c131f1a0e0ced8816
SHA512 1edf8ddb7c1c2a5b7942027bdd5070296bf62eb80ec766eeebc9ab6e746827b0821cc37a52e4059b164ac6ae7f5a0e55967b80c0d2fecef8179b75d40ae4f569
SSDEEP 96:qPPAJSAudzQPwAJNiWbnwabcPwAJuXKw52hPyAJru+APNAJnIux:q3AZCzQIALkIAlh6A58lABI8
TLSH
T1E22232929BE60946F3F7AA71A9736761AF76B8016A18CE0E4050410D0C63F45EE3DFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Xeno-v1.3.0a.zip.crdownload

Path C:\Users\Admin\Downloads\Xeno-v1.3.0a.zip.crdownload
Size 6.3MB
SHA256 cab8821c2f92085de13a2a84f17895da61401445b4ff7d8ac3bb13d55e212d1d
MD5 e26ef7841d33b03c6492f189a18256cf
SHA1 b65c5c0bb04ca373ca0e237450a058cf6684edd4
SHA512 81ffa672d199bc761177789c80b9f6c94d2d7f2b5009021a29234e3225bb829f3a88406d4dc16b84dbc8f2f462c8a58e5c0a429a6e7de449fe1718978a399ac2
SSDEEP 196608:3Cx4Zi7KKXUXLTABXnyRC84xlY7K6VobV5rSSPfX:3G9DXUPUXiv4xlY7CbfX
TLSH
T12466335353D81B398D9C4BBAB44C43196451E1AF9BA03A337B196DD3DE20A69CF032DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1191678111\manifest.json
Size 102B
SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
MD5 ee1ed8500e24dfe42b5be26a96d5fdfe
SHA1 f4b08becd340a875a34eb0dc3fff2024625643f6
SHA512 0b782a4871d0fde1c775237f9392f9ecf7355b886f50584a101a0764631ddf22a25d0d19a0041bd22d943d68529a86168e202c6276d0cc9c5751b580f4d2783e
TLSH
T1EDB01221EC10B4B31004036C086CC3D0632B2F072C4079280DE19F84E90D9EBE872529
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1345294583\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1698164124\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1952128025\edge_checkout_page_validator.js
Size 990KB
SHA256 217a62797b59bdfc667227a422876ccd0f782b2ea41d33fc93c36a6a0db35b09
MD5 80cc733f42616192c044a04fc5abcf81
SHA1 1bf191a0a41ffbe64d3d92c4100421282edb02bb
SHA512 8b521e98dbb71462a19e6c783aaf62dca949befa830bacff12d0c13b3edc38e676b8cc70cd5af98dcd06fb50191747e37cde6e0779bc27515d65751af1487b42
SSDEEP 24576:cs4emRApsqvGzkJUAKjKQmwzErmdJt3LPafik0BwrpiU8LRKLRzMEiJsfaGx1huq:cs4emRAqqvGzkJUAKjKQmwzErmdJt3LC
TLSH
T128253C84E1E2253466D74CB960B7D2C4B9DC04583399F1E4FA6C588ADB0FD4723F6A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_1952128025\manifest.json
Size 146B
SHA256 d864d826358b5a17c17818c4beb06143f6059377079f0a576764e29f92635145
MD5 154bf0b4087ebebf71107f7c67bdf6aa
SHA1 85886e83753ef9a232bc6a85ecdd90daef3ccb07
SHA512 a388593c464894b76fa730bca7fd4f27246883174f12ef4d53648efccbe9fed6d570ff6217106618cbdd2a35ca9ef260301bc476abf18213a29e973b5e6837d7
TLSH
T1BCC09B73C931AC7115750BD849F59B45EB74574BF511B0563B34018D0B3D5B550607D1
MD5 SHA1 SHA512 TLSH

Submit Download

notification_fast.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\Notification\notification_fast.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

tokenized-card.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\json\i18n-tokenized-card\fr-CA\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_2009030369\manifest.json
Size 121B
SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
MD5 8083caaf7f5bc5f01ede464e68db1c7e
SHA1 ed6cf18f79c4ee2968adfffe7bf1bce163ef3873
SHA512 60924bd5617ac5f994805f9a871999764ba93c6adda79c501a0b692dce51b9db6f6531a5e25129bc424ae7c4de868ba6e5a976d6bcfbac2bb8bd192c5513c7ee
TLSH
T10CB0922289429D300469079809B486A6E230674BE406F0397B7041CC8B785B8A4A2A94
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_276464115\manifest.json
Size 52B
SHA256 36565d2ebd6c48537cb3e6fe24ac74ca68dda18b3f0f8be13f47d01aec181d62
MD5 152537f005b8875f68b1af4ac41c46f1
SHA1 70f529940adc1404721cbc1542c65eee289216ff
SHA512 bfcf5e9523b9268e1b0a546b5786498b1decc624ab1ba4fdd89e2e92edacd20800d731fef37c98aef45c64268d267b97d09f78124167685dd152bacd620dc9d0
TLSH
T1D0900260053491171AC10E546570F8859391661955850D1D0545154806A546CE051298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_670019079\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_733551909\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_877001067\manifest.json
Size 118B
SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
MD5 4687681b420a5c580fe40870ed6af32c
SHA1 1aa40f91b2ed8c5ea38cb30b81c87a9ac7e21e6f
SHA512 5ced299552785894df9aa86f0cb5d9c057cf73753f81112ef91a8b8dbc6147913e39c27b6327613bc41c447ed230fbbc74881db79853d38e365685132e618762
TLSH
T170B092B00C1AA43B22C09320ECA0668683F84218E8421B1A098036481F882B880362B2
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_920898519\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6120_920898519\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4996-4136-0x0000000002A10000-0x0000000002A1C000-memory.dmp

Download

memory/4996-3313-0x0000000001200000-0x0000000001234000-memory.dmp

Download

memory/6148-3314-0x00000000027E0000-0x00000000027EC000-memory.dmp

Download

memory/6416-3188-0x0000000000240000-0x0000000000262000-memory.dmp

Download

memory/6416-3189-0x0000000002430000-0x0000000002464000-memory.dmp

Download

memory/6416-3190-0x0000000002460000-0x0000000002466000-memory.dmp

Download

memory/6416-3299-0x0000000002480000-0x000000000248C000-memory.dmp

Download