hxxps://spoo[.]me/8VKxgt

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/04/2026, 01:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://spoo.me/8VKxgt
Sample260419-ca7xnagx21

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 10 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
183	discord.com
331	discord.com
335	discord.com
180	discord.com
181	discord.com
330	discord.com
332	discord.com
333	discord.com
334	discord.com
337	discord.com

Drops file in Program Files directory 8 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_160849981\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_1993288522\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_1993288522\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_1993288522\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_1094207181\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_366324358\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_366324358\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5108_160849981\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1044	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134210372196065659"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714754311-527593155-1440850301-1000\{B164B13F-A128-4B01-8595-BB57CF351A83}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714754311-527593155-1440850301-1000\{3617B942-71DB-4F18-9CB4-FEA4B0FA1919}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5284	msedge.exe
5284	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe
5108	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5108 wrote to memory of 3136	5108	msedge.exe	84
PID 5108 wrote to memory of 1044	5108	msedge.exe	85
PID 5108 wrote to memory of 2140	5108	msedge.exe	86
PID 5108 wrote to memory of 2140	5108	msedge.exe	86
PID 5108 wrote to memory of 2140	5108	msedge.exe	86
PID 5108 wrote to memory of 2876	5108	msedge.exe	87
PID 5108 wrote to memory of 2876	5108	msedge.exe	87
PID 5108 wrote to memory of 2968	5108	msedge.exe	88
PID 5108 wrote to memory of 2968	5108	msedge.exe	88
PID 5108 wrote to memory of 2968	5108	msedge.exe	88
PID 5108 wrote to memory of 4332	5108	msedge.exe	89
PID 5108 wrote to memory of 4332	5108	msedge.exe	89
PID 5108 wrote to memory of 4332	5108	msedge.exe	89
PID 5108 wrote to memory of 4260	5108	msedge.exe	91
PID 5108 wrote to memory of 4260	5108	msedge.exe	91
PID 5108 wrote to memory of 4260	5108	msedge.exe	91
PID 5108 wrote to memory of 532	5108	msedge.exe	92
PID 5108 wrote to memory of 532	5108	msedge.exe	92
PID 5108 wrote to memory of 532	5108	msedge.exe	92
PID 5108 wrote to memory of 3568	5108	msedge.exe	95
PID 5108 wrote to memory of 3568	5108	msedge.exe	95
PID 5108 wrote to memory of 4488	5108	msedge.exe	96
PID 5108 wrote to memory of 4488	5108	msedge.exe	96
PID 5108 wrote to memory of 1840	5108	msedge.exe	98
PID 5108 wrote to memory of 1840	5108	msedge.exe	98
PID 5108 wrote to memory of 3260	5108	msedge.exe	99
PID 5108 wrote to memory of 3260	5108	msedge.exe	99
PID 5108 wrote to memory of 740	5108	msedge.exe	101
PID 5108 wrote to memory of 1484	5108	msedge.exe	102
PID 5108 wrote to memory of 1484	5108	msedge.exe	102
PID 5108 wrote to memory of 2484	5108	msedge.exe	103
PID 5108 wrote to memory of 2484	5108	msedge.exe	103
PID 5108 wrote to memory of 4004	5108	msedge.exe	104
PID 5108 wrote to memory of 4004	5108	msedge.exe	104
PID 5108 wrote to memory of 3032	5108	msedge.exe	105
PID 5108 wrote to memory of 3032	5108	msedge.exe	105
PID 5108 wrote to memory of 3952	5108	msedge.exe	106
PID 5108 wrote to memory of 3952	5108	msedge.exe	106
PID 5108 wrote to memory of 1824	5108	msedge.exe	108
PID 5108 wrote to memory of 1824	5108	msedge.exe	108
PID 5108 wrote to memory of 1824	5108	msedge.exe	108
PID 5108 wrote to memory of 116	5108	msedge.exe	109
PID 5108 wrote to memory of 116	5108	msedge.exe	109
PID 5108 wrote to memory of 116	5108	msedge.exe	109
PID 5108 wrote to memory of 2380	5108	msedge.exe	110
PID 5108 wrote to memory of 2380	5108	msedge.exe	110
PID 5108 wrote to memory of 2380	5108	msedge.exe	110
PID 5108 wrote to memory of 1680	5108	msedge.exe	119
PID 5108 wrote to memory of 4608	5108	msedge.exe	120
PID 5108 wrote to memory of 700	5108	msedge.exe	121
PID 5108 wrote to memory of 4228	5108	msedge.exe	123
PID 5108 wrote to memory of 700	5108	msedge.exe	124
PID 5108 wrote to memory of 4228	5108	msedge.exe	123
PID 5108 wrote to memory of 1628	5108	msedge.exe	125
PID 5108 wrote to memory of 1628	5108	msedge.exe	125
PID 5108 wrote to memory of 3728	5108	msedge.exe	128
PID 5108 wrote to memory of 3728	5108	msedge.exe	128
PID 5108 wrote to memory of 2188	5108	msedge.exe	129
PID 5108 wrote to memory of 2188	5108	msedge.exe	129
PID 5108 wrote to memory of 3400	5108	msedge.exe	130
PID 5108 wrote to memory of 3400	5108	msedge.exe	130
PID 5108 wrote to memory of 3400	5108	msedge.exe	130
PID 5108 wrote to memory of 1112	5108	msedge.exe	131
PID 5108 wrote to memory of 1112	5108	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://spoo.me/8VKxgt
1⤵
- Drops file in Program Files directory
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c0,0x7ffdb3ccc188,0x7ffdb3ccc194,0x7ffdb3ccc1a0
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,16389881334085832594,12251339843324464774,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,17614610817587028583,7886880000896364574,262144 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,1919651739514833221,5263070564347959551,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,53740780427489756,997390893195150022,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,16661727241326799105,7875328652918217203,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,3759702762696536939,683221366670510891,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,3946257096755221393,12681375530115372693,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,13528885072647867442,15378067032021056334,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,15156874273857456283,15854519909418218753,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,4776647201313926232,8056298962950444050,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,2763815560156159895,4238618999187455381,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,9944567838611576567,1641958811950002811,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,9944567838611576567,1641958811950002811,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,10443375441057718825,3962287815257907098,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,3985298660601459232,13667283724188713822,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,12819404477124720982,9996767922797191574,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,18063455915879433420,3398750315332617822,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,6984090805524343116,12020663661469129797,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4412,i,17992200330482012647,318166055720670865,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3652,i,4755364492924702283,17231019916460010617,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5880,i,10401488286358783451,5970595268220535157,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,6241369463504042951,14700772835116699726,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,16649717055909595542,16422822104989246086,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,14141303679384684172,15331803963132847508,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:8
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,66950321260099633,2977673720557591064,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,13078922965907768214,2071795581656727008,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  - Modifies registry class
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,13540202914189145288,6196700001910789357,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,15016210528025589840,12812179646748866300,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,913319210042500978,12689485746399493435,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7144,i,6127422547663006312,1309911355916735412,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7600,i,2578143259738341099,332668713229665657,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7624 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7380,i,10498326617816476261,18189880897523038943,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7568 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7652,i,16559723736845636271,16191103489959137651,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,15524255228919876541,15006772502270267113,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:8
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7676,i,7282029029838516567,8962959340826169933,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=5840,i,13892308762480256847,10878753317693371816,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7216,i,9513176354191612759,8498968462673546891,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=3732,i,7138546321180032186,14627824278627081429,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:1
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7932,i,8381289675350491595,14209600057265257879,262144 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7336,i,4140350029725860006,5867599499714947652,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7932 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7072,i,13445677280475509863,13392073439930706452,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8232,i,8517286658052761757,6464592002579568819,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8248 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8452,i,2412114479882373478,5312838724011256249,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8424 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8524,i,15167843859589608952,8075762221333722474,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8560 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8696,i,11552898575048079551,6753648256036154090,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8684 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8344,i,5244140197308756182,16923185056778683292,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:1
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8308,i,13444826443905472939,11326254171457171174,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8096,i,7567048492076781620,17053327656069335405,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8872,i,15271983672406848881,15331818305159491751,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8880 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8900,i,12016204709053439491,4329898854080244731,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8932 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9192,i,701928919498511695,3458180909716153471,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9188 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9332,i,18059843032604614287,17975672860998627531,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9336 /prefetch:1
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9472,i,17094099703083847652,7621819109516793104,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9476 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9520,i,225830142305037194,14330469808416888670,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9620 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=9684,i,5402917444305065446,3201090077429797918,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9752 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9764,i,11922590229283211879,4743471734378100665,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9896 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10036,i,17219564928085703909,15225682592467441441,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=10032 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10176,i,5733397500761161384,13174604007792958831,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=10172 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=8316,i,8371794453858096839,15769801874402560135,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=8208,i,4125406772821209072,6072815447813627989,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9976 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=9276,i,10580054227191590301,7391533193869984223,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9248 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=8228,i,15595929875802003938,1825908521103096767,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=8352 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=8336,i,17140745379331592780,1800596522891966037,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=10716 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10836,i,6632678548507610445,3369366157860905782,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9928 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=10940,i,2090719496367905603,13173625683467367710,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=10964 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=11068,i,9317427254169687938,9740123493244214981,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=11080 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=11252,i,13635462409545542950,2630283179036735537,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=11228 /prefetch:1
  2⤵
  PID:6192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=11436,i,4409009765551127618,10920978229469328767,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=11444 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=11216,i,11037256819579394045,11633218804494987497,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=11588 /prefetch:1
  2⤵
  PID:6256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=8228,i,6948521196441502871,18372857335949673543,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=11764 /prefetch:1
  2⤵
  PID:6368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=11432,i,15973783093231492553,7608743759529968070,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=11232 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=11996,i,14932707902337970531,16220817843909439307,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=9280 /prefetch:1
  2⤵
  PID:6488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=12112,i,6811112919729449953,10809611167990431774,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=12124 /prefetch:1
  2⤵
  PID:6496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=11216,i,1886045578379647654,12077430064764339374,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=12264 /prefetch:1
  2⤵
  PID:6604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=12416,i,10877483879319836606,8629056292017934092,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=12420 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=12140,i,42915714083039181,11648083027719943205,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=1020,i,16469672606572213625,17615101595897715593,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=12628 /prefetch:1
  2⤵
  PID:6728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=12544,i,5659134449100994956,4318964587670678905,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=12664 /prefetch:1
  2⤵
  PID:6736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=12996,i,7677614793386478714,16045748224990963969,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=12928 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=12992,i,16388599399784809654,1859617512962994672,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=13016 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=12100,i,16778211837610811790,7494394897861831636,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=13268 /prefetch:1
  2⤵
  PID:7008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=13304,i,17882617360326070183,7918433066593579124,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=13388 /prefetch:1
  2⤵
  PID:7016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=5672,i,12453262988436322490,3561842939130155508,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=12424 /prefetch:1
  2⤵
  PID:7128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=13724,i,13105799491732780497,6941239927082199799,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=13736 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=13884,i,17374125746683505428,11287829775526328167,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=13676 /prefetch:1
  2⤵
  PID:7232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=13668,i,753895188440587841,9012318890058991261,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=13436 /prefetch:1
  2⤵
  PID:7312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=5672,i,8738496078804348739,8736125471640364665,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=13680 /prefetch:1
  2⤵
  PID:7320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=14180,i,11504037221738205979,5644925087998285213,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=14212 /prefetch:1
  2⤵
  PID:7428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=14228,i,13239231766757617774,4664375947421780246,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=14256 /prefetch:1
  2⤵
  PID:7436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=15184,i,10831949713297373940,2904953281653329881,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=15080 /prefetch:1
  2⤵
  PID:7548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=14192,i,13077171399175567982,2502749704205884830,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:7628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=15148,i,3963441691159011504,9711815447759774487,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=14764 /prefetch:1
  2⤵
  PID:7684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=14192,i,16652054830775688282,4876441408003725413,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=14868 /prefetch:1
  2⤵
  PID:7728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=14536,i,9620276735494878690,17758279386417406514,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=14512 /prefetch:1
  2⤵
  PID:7784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14192,i,17259925551839867880,1493984605608660205,524288 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=14700 /prefetch:8
  2⤵
  PID:7836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=14660,i,9055105001956875835,12161657662841397817,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=14544 /prefetch:1
  2⤵
  PID:7928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=15448,i,11422041982427251227,8098807288097678025,2097152 --field-trial-handle=2336,i,8452676458990388542,17671120964686437607,262144 --variations-seed-version --mojo-platform-channel-handle=15436 /prefetch:1
  2⤵
  PID:7988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5108_1094207181\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5108_160849981\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5108_1993288522\manifest.json
Size 160B
SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
MD5 a24a1941bbb8d90784f5ef76712002f5
SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
TLSH
T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5108_366324358\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 329f09584b2d1b595fd09386d31dbe1eec1906f7d450ee40fb405617035e9b3b
MD5 c89978251aec9d90daf9a199726976fa
SHA1 72d52e478c5ea1ddaee134eed8228a6bfada9c3f
SHA512 898671bc521bd5dc24824557f42f33f18007179c03133a4c176d62af1a4afb01dd96179fb320915cfa4fc4d3e62c77cc770436b76ebeb4b092c4a313f9100f39
TLSH
T140D0228CC300A820C3CC88B220ABAB88282AC820820282082CB2080C2C82282300E082
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dffc23e237400efd661d1c30cb24b84d406666a0006e01d47c71dda1c139dede
MD5 d973725326969fa61f4c23d3ae69271c
SHA1 97064cb45ef73fc0983937604b28ed87d3c663cd
SHA512 d14168136aa3f83bccdc1401e1e3b177dd3fceb060f02d3d7a87f8bbc1c7f0f9388307aef3bb0e879d276489965f6c80f9d0b32c40ec3a6dde330f4f98e0e93b
TLSH
T106D0228C8380AC20CBCC88B220ABAB88282AC8208202C3082CB2080C0C822C2300E082
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0b04489861797cec03fc7404687d31ed4755ebf931038495ba158cbbf77e5994
MD5 8d5497a0d6d631f289ddce3b8713b067
SHA1 e9a86741ddb9ad11d98682073f961e7ab3f714c3
SHA512 509da8d02aa51e8910b1998ff4f2dc501dd78e46a217b34ab4cbd3c8fb5b35e21fc44077baf2fceb5ca1c6a95e4d892ddf87e1a0c25401516589fa338e6d3d4f
TLSH
T14BD02374F796E005C32C00735562D291375A850135938454F45D845DAC683F677D84C7
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 169KB
SHA256 778f09a9cbdca9e5d225109b2c685f8624fcc1f6e38a7245cd0fd7b93fe588e4
MD5 ae3b7b43da502cdc83a2891a4d0857cc
SHA1 1195d110f1d991ac9a35ed0103e1a1d05df19b33
SHA512 d59552b6abf7dc316c8e860928a1e689c3b4d3d68d2f29808e80b616b2d3be0dcae8685ed1552ad775adbc179df2e4c2ef04678b249ff2624e35c1d2f5d04c88
SSDEEP 3072:NMLuiH2crfUYsfnRg33EsmmVmnwG6X443rSw7JILZ4dqC1fXb7mYKCvf9ky3:3iH2crMNfRgf0wGw44+khXbPd2y3
TLSH
T1F60413D4651C3DFD040231E035A0B64E1EBA186B51A86FE9C65AEEDBC00EE44EDD1B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00017e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00017e
Size 73KB
SHA256 5a6fb2d84993167eac2aaeb0147e3e75a845f6f87492ca62ac8c93dc1445c0dc
MD5 46673ece170741eb05cd83233968c000
SHA1 eb1542a9e277dc35bc46a14f1e26b9d6ad40182b
SHA512 3c36fc5c72b5f50f39ac5c7aed99800de6ca29f9cce428ffe67e2b34e520e5ab41c8857ef4446b70b035ffa60763646909cfa639085185e6de45084fa7b06e29
SSDEEP 1536:JZz9+BUVYe3Wtpdv64OIXJWp0zlJBiQLKyXtAqw9RSV6BU3/QwsRBEub4m:H9+cYegpdv64OoYYZLKydAqiq6BU3U
TLSH
T13A7302E472FFA4CB22718D3FE5A99B803C95DADF9226249981433C1321160EBDF155BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5b39ba0c2fcb1c8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d5b39ba0c2fcb1c8_0
Size 261B
SHA256 ef99ee1ad2ff8801cadef9bdf5511d8e738c278059b8d691adcbad03c4454ecd
MD5 0090102e691a2ddef13aa65476120ae7
SHA1 e7db01e3dd63602d1bda352a9775b223c4a4f5f0
SHA512 cdac08fb888db2415aac0dd592ec6675523d00e0d29016854d5cddb9e57912e362c21b0b3f0c38e6b9fe551a78415e942b92fd26b2e3ca663eff5b2759540eb3
TLSH
T112D097E744A000E0C86E45F0F60C63AFC323608D0CEAAAC4F118A8735280BF0B781539
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 64bebfd338d1a914a5a5f1532aabe952a06b6f3af9f39cbb26788cb2f4162c66
MD5 f15130809174269df596dd9748ab14d5
SHA1 d6b54657a342a6996b6a67e5bc1ce54c3dab2f5d
SHA512 ee5844b79bc331037fcf3d1200d2b045700f16b18dbc29bfb587456674861752ba8bef94039fc1005a40db3167b2eeceecdd1aaab1b582302d828611c7eb81f8
SSDEEP 96:dsMRNkTOCyJe4peWo8OnNgQKykP8pP5G6v2Nfw:dsMRNkAAWVi3xfPvew
TLSH
T1EEA18096506BC028FFE05DF4ABD120987E71D77928070EE635F0F03FD625B11A194399
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5956b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5956b1.TMP
Size 3KB
SHA256 ac92b13569cfa215d1fdf41d67e51687c99f9e6fa454ea879a767b049cf2c6fb
MD5 fb7506093549253fe50e687339ca9747
SHA1 4b615c8425790646c13b73e762936fae08da121d
SHA512 cae6ad507904082889eab00136ff7095efa481905e37f3e9d631894ed2065cddbfa8a35ea9bec09f3e874e5bb4a79af95284dca77d7288182536e4357fdd039e
TLSH
T140619494509BC128FFE09DF8AFD624C9BE71DB7838071EEB35F4503D4A36B119290699
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_temp-mail.org_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 34KB
SHA256 c03b544ad44a346cda940c878a9bcee34ff2db83afb9e955c5abfc768619368f
MD5 a8d8751a6d61d0aa664b4ac6585af450
SHA1 3f670687b801d4063933ad9b3a5b9bb26981c4fc
SHA512 b177c96a6689be8fa2d7fdef12fce528619ce20f335ac3f178462e40d5af8f586b391d76c87f3e2b7264f7379d5de6b8ab08f0a7c3602a7c2a310815c2828eda
SSDEEP 384:D61x+mzjPehlYb7oNYZbkxr4b3qevkFemwJite2yJ7+JjQ8JCC4akGPl2kUxuORo:Yj0fbYbs7tnXdbRwrj6F8MUWae
TLSH
T1F9F2BFF7C3F48A7DC91262F09A146E1BCF6D0459035C3C7B8AE4AE4757E6832E29164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 8e0904ae19e4af7925038a2810c37a1f2426ec316827269d553a602e9dbb02d5
MD5 7192c23410a04ada1c9cb3b8d928d2eb
SHA1 13c7fd7186bf32a5bb4024bf36f6c72c73d3d508
SHA512 cb50e3ce15a55e82b82dbe11010181d4baca72c2370022a9723e9b81d5ee82eff4f7004f13ced004a719accfe4f0c66acd067dd9270d3f97a830f83c41f34630
SSDEEP 192:D65rx+mzjPehvC4akj6KglraOEUxuORveEflOe:D61x+mzjPehvC4akGKgl2OEUxuORveEH
TLSH
T156D1ACB7C3E4825DDA11A2F0A6147E1B8F6D0598435C3D5A89EDEF4FA3E2431E251A0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 5d62371ad73394a8e40d2ac58d924898c3e35c1fa302d24192019b1a8def6554
MD5 e448cf618a3bb96e362bc07b3c8ba801
SHA1 50597ab2c9c7474bba7443c39789e4237434bce5
SHA512 1379cab307f03e50ceaceb4fc7181499a173e851d8346dd31fd319dd97bcf3044121d28b41d5d8b19621d1386fd9f0b97980e7dc95d8b7c8c5ea60c366591d9e
TLSH
T124D02357170170F5B56C5FD5D156EC4FC32610280C83DED419E0989A0D3145C290B144
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5a4dd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a4dd3.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ad76e4c84937388c472c8014956a04069f851cfc947cf40cd0d26428261fce71
MD5 804c273ed5f04e7307d1302c3afef059
SHA1 4cc676c2c3ea6bd6e215c73a818bb4dc59f1f685
SHA512 cb2f404c024c18bdf3ed048dda12b747ac116875ba30174ee2c68dc0e4a512c937ad3fa8c370c146a9ad54000b321a1a80b6fbce93139f6c2863a0cc9b7d8a54
SSDEEP 192:sxZERPyM//K1Ml8Mkt/f5sEz1IFIdpJHW6+WNGYWX1UcIg4J:sxZEHMt/f5sEzTJHbGxc
TLSH
T1C652F9166A34597BCCCBD309FA457F53D6F9456392A40D48AEFCCA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 949affc0ea51b146ec7d3a9bceda2b1813fd7d0df9158e04d0c2a655695d6575
MD5 606b6f7d1d8c57c7a73bdae51b545264
SHA1 bd2c6f84f4d8affaad15359648e74c530ddfb727
SHA512 0e7d170f60f8088302ea46704d2bb4ab3e6bf3f30bdbbeb1a21415818ee6b7c9df6828f905bb629dd1455af3c878467b6d77f6e9bb6503c8f883f536c73cc6e7
SSDEEP 192:sxZERPyM//K1Ml8Mct/f5sA21IwIdpkBHW6+WNJ9iZ2TI4BVVWpSUcIg5OJ:sxZEREt/f5sA2m0HbSZarH0
TLSH
T19D62EA56AA34597B8CDBD219F545BF53D6F9046292A40E44AEFCCA0C04E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 58b22192f4719c534c149a1bca1630f1befa8fbf81595e04707ddf1b17936e91
MD5 cedb27538ff8b9066969ba29301395ff
SHA1 a6b3b3d30ace90736361be0dab445315ac169c67
SHA512 770d08220abc540d58edea85d26f11b71cc71fd1bbbaef7948a06dff50f8d596a0a733a6534d395757735f4441e45c908929e975144a0a60b36b83de53033097
SSDEEP 192:sxZERPyM//K1Ml8Mmt/f5sA21I9IdpkBHW6+WNJ9iZ2TI4BVVWpXUcIg5OJ:sxZER+t/f5sA250HbSZare0
TLSH
T10362E956AA34597B8CDBD219F945BF53D6F9046292A40E44AEFCCA0C04E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0c425810610a78066fb0193dafd2ff0b989e5b50cbb607464db8d0a052a12b6b
MD5 1eeb25b7d7f653ddb1367e20d916f7f4
SHA1 4c50cd38f9876b756d4d9ac30a0e3a98cfd4ffaa
SHA512 a87c1323b71d641f5b9acf13f63522bf3ea532f994551e9a14c33d096d563e37c547663288c704e71460536ff096669e582a6302323872cdcfd43036fe533996
SSDEEP 192:sxZERPyM//K1Ml8Mkt/f5sAz1I3IdpKiHW6+WNJDR/zVW01UcIg5YJ:sxZERMt/f5sAz3NHb//F6
TLSH
T1D952EA166A34997BCCDBD309F5457F53D6F9056292A40D44AEFC8A0C04E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7883ee67a452cd83b71f216848b439c30d5fe083b9cd666c8bb0ed71be0e746b
MD5 ecbd17d1f5d86b80e7b5a763311b4262
SHA1 42cd7bf8f39aacff4d7dbea31663be4dd6db7548
SHA512 eac2d02b35493ebed8c4c7e1f7804225ac09e3908f6ec6f847aed99f2ab3f28628ef22622bebf7ad803acc15f5d1ac35445f76e02faddfd6791f24e0c5a84e57
SSDEEP 192:sxZERPyM//K1Ml8MLt/f5sA21IwIdpKBHW6+WNJAHX2TI4BVVWIdUcIg5OJ:sxZERTt/f5sA2mKHbqXarZ0
TLSH
T1A262E916AA34597BCCDBD31AF545BF57D6F9046292A40E44AEFCCA0C04E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 1b585e8f301a901ea77043323f8ffc2d8357ab54a1b759a5980932dd02032fe7
MD5 88c80c3b465acf5ab59e16acb08c1281
SHA1 30d500d40592c69a9e185d4b422efd72587ade96
SHA512 b95f869363c045339f02ee68495aba59e2f7e3e834904603ab292b7ad5d23c54034b2c8fae9b5e2a93d48a1627548a5207a530353038c8e8f031685c22be1d45
SSDEEP 192:sxZoQUnCRPyM//K1Ml8MePt/f5sA21IVqb/Mdp43BHW6+WNBHUu9iZ2TI4BVVWrA:sxZenCR2Pt/f5sA2Sc8YHbOFZarc0
TLSH
T12F82F9076534497B9DDBD21AF906BB57D6F81062D6A44E84EEFCCA0C04F6AED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 6e65ca92d5aae08fa6aa219b3a9633eb784266a0295d23ac768d106ab224c3b2
MD5 a56f12b76149f31b9bc821afa17f90a6
SHA1 f3436066bf7f2cf33d98bb4a76d00bad31125cf2
SHA512 84ace8df25bebb7380deb670b1e26c85c1117c997930a48c9ec4a4114679b3694d24f6938e45796896239dccc1e3db6f9c62fd38aea33c9066cbe666b300f1a8
SSDEEP 384:sxZen4Rq6m4t/f5sA2IiKWHb6dFAR/arcclNm:sQ446m4t/f12IsHbjl0tc
TLSH
T108920A576520497B8DD7D219F9227F57D6F80452CEA44E8CAEFCCA0C04EA6ED2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6965c55f2fdd0365aa658915044455bb0f2fc50f89e9ede5e80da21892b93e0c
MD5 59bf435f0cf7e8f2f0290dbef90bf488
SHA1 668389400015f864a1927cca61f7d1a397db0252
SHA512 2e64056f61ea671a6cb14e82c3dc185efa892d1fc9dc48b2346f95efda6a194c76036f1f01fd5c1129bcf20de2452dc4d3868edcc3fb84a4a6ba1fa7de00a5e6
SSDEEP 192:sxZERPyM//K1Ml8MCt/f5sA21I9IdpkBHW6+WNJ9iZ2TI4BVVWpSUcIg5OJ:sxZERat/f5sA250HbSZarH0
TLSH
T18862E956AA34597B8CDBD219F945BF53D6F9046292A40E44AEFCCA0C04E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 27e74eb48689383174ad26d08b9015123537f4c17d44b5daef768427240c3d61
MD5 487e56c7d2041e4c7c1c6d1b78948f9c
SHA1 71a8a0a26edd9848527379cd96ba6c6aaa158193
SHA512 8dcb9e61f3b6dcc07a7ad71afd12ccda16d9e4b4a9a6a83f33d151b0be452f447b767150197cc466ca3934df62d1cd17260411419a0f84efd2e64aa9cda2395f
SSDEEP 768:Vd0G9wX7pLuLnFJWvFnSP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVfC18LlSMdFKroF:Vd0G9wREnFJWvFnSPu1jaaC18LcEFhcy
TLSH
T141F20A3B6C0CCB7E4F844E9CEC2A7E9A6DE8018B96DC894447FA840C03C66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c8f324c-5787-450c-bad7-186d77d4e2e5\index-dir\the-real-index
Size 72B
SHA256 848813d812a855219f1a22e0b6efec99d8213af55938f6e7acff79fbbe50f46d
MD5 8ef16c3d4cb5b0b52d5d21c630c12d8d
SHA1 43be778d8575b7bcc0be7a5cffeb30f227af785e
SHA512 db90bd26285abf8a3e409a6db4adc77128f884fe5433abbc8fabad97f839662c130838f9096d2ccacad172e95ef4744dc5ccd944a3f8f471bfad87953647b650
TLSH
T13FA00228075550C2C14516B5625203D1E359EC6B11014307D09455A98C9116AFE12344
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index
Size 1KB
SHA256 7ac1909abd399095730cd80bb3aae5003b79e09854d7a6ae28f21f704b062e39
MD5 66f3760045ec8a51314c215946e8bd73
SHA1 cbeb6c2819b4a6078442513078f5fedd3aea15d4
SHA512 fe95b284e8e1631b21d8b939cf9ac5645b882803877c4781e444117981ebbc78ffae6441a7960dcaeff7222a206d2c1a9c91a68f1eadfd211c8490a5f9a0a66e
TLSH
T1F631A59DDCD55907DC6281B104FA1A6C333C9CEF0A08A307A9AC56395C9B2A929A7328
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index
Size 2KB
SHA256 16f78c7ecca1a743d7ea5feeb0dd8998e97db39ba2a14295442e03bce6f187da
MD5 022f9f7862b68a24a2959483c271ac40
SHA1 2700f8cd64fb8d3e0a73b31490ad778cdd733ba5
SHA512 3030daab210ab593737789158136b81e6c6ec1cfcc504158306671497c7489f43a391c82482ced205732f32473783de472cf9ac6cba4384cf46db432a84c26f2
TLSH
T1C451C88DDC0A5F61CD7505B608B2144433B8E8CDAFD44B1BEEDC55B1345321E1F1E626
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e2a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index~RFe59e2a6.TMP
Size 1KB
SHA256 5156310c0e1c32ee9db89abf8233bea8971c1aca39dc9ac90808fb2cf25007ba
MD5 c171ba57da73f63e40ae586d16734e8b
SHA1 cf6d507b538131287c917066e60c35309571d1a9
SHA512 86cb7abe0b4ecfcad258668bfae2339dad24638e1648b013e9d0254298f5d13ccf7f3093c890565a90c1b411aad724330e434bf6e950520b0f9a7d2d3ee0714e
TLSH
T1E231B45A5C940E13CC60947145CE6529333CE8950A10AB0B35EC8A33EC97BB92D93218
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a76e37c7-8440-4a48-a1ea-253219d8f42a\623cd082b6202da0_0
Size 63KB
SHA256 dcbf1c47a15722e7d62c08cd5e2f01f030923458438cd04318941b7aa59950c5
MD5 a9a1a26abd5a1fc1b837bbf23ebc9c1f
SHA1 1a51c3cd29ed6f0f1c119f67c43c28d12583b1bc
SHA512 171d390c18e3e784c8ee0df0532b47b7c450578124a2c8ac0906656312f3e05f88a1971bf206fa5c3197a85a8032a5fff25489bc0681b8dcc7ca5488e60233ed
SSDEEP 1536:Y6VZ0u6ku9WgWGYs/b7VcLbGT8gO4z2QiXU4V7HPwqpzkh/b:Y6VVOvlYsWLbGwgOiQ+/b
TLSH
T1E2532A97B062613687AD21D6646B3B01F12B17063944C9E8F0BC69913F19E8B6377BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a76e37c7-8440-4a48-a1ea-253219d8f42a\index-dir\the-real-index
Size 72B
SHA256 41f32494156ade0032043632dc70742b7669f23e14781263145e7ba8d1ccacd8
MD5 a9e195f9b1fd178692d1989b8da27f42
SHA1 10c5353df69ed4e9970f47281ff533a1a32396c7
SHA512 db00f82df2c458b5d985a650f223ef9bebca27b9611d9c3072f4105c0f3e31ef199bfd12ccbf2602772975ce4afd3969b57f0a3f41c998fd95565ee907e30b15
TLSH
T1ECA0022047C42026C01211B21F52069117408A1D13451B0A61D10146CC6844646C228C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a76e37c7-8440-4a48-a1ea-253219d8f42a\index-dir\the-real-index
Size 72B
SHA256 2a0320c219c3116ab64b86798e37171adcfd6f56172157c270da00a2eca2a934
MD5 26001b9a579e8af195c180e4317bab34
SHA1 93d4baa09e93cc3c8ef9cb995b04cdd21e9a646e
SHA512 b33c435e54202de976378d534ea17d4909644862343be72cbc800554ba129d904a1d1fc315c8fd89f23154a6c5c7c63e067494724de06cf2bba2232d5230df51
TLSH
T1EBA002292AC44046D82362B039E6854622147D514741234663E4594BC8619464AC114C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b70fbe41-91c5-4edd-adae-93660d53677f\index-dir\the-real-index
Size 96B
SHA256 765fa37ac5d549b90e259a3ddcc5304427ee35bde2ec2b4273242439f1084c94
MD5 ab3e5a95094d53ec0e9c3e3d3cfab61f
SHA1 9f5b098afd5633a091d1d3c21bd0c22118b83dfc
SHA512 ddff93485fd93aafabf99d8021d4477ccf7ab91439e0e4afc5caf01fe57da77894a049037eae3ad489f68578db00257a4ca67262e0f772379a35efa9037c452f
TLSH
T1A0B0223A03200020C08803B2280B08C032300FCC08230C022BA2F038EE030C3080380A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b70fbe41-91c5-4edd-adae-93660d53677f\index-dir\the-real-index
Size 120B
SHA256 1b472ab8cb87b7818feeba460cd95732ea74df867c9248a694772b2d010ead28
MD5 d5cad5e74395f6f77980f42f7e16f294
SHA1 5a20cbe381ee850a08224294012eef4e7d6c1b17
SHA512 3f409e358806e1967134772d2caea85bd1b6ce135afe4754b25d9666c290d3a5b9759e0511d5a7f1e7c9b03a3988bb4566ee49969a22c3229b80cffbfab8a39a
TLSH
T1DCB0123021124429D4CC03F239272180795D0C71813141474352EC7580421C4C303301
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 8259ff6b0f8239c53bdaebeee34ae6e6cea65156b78ce54457f50f9ef16000c3
MD5 1918f53379883222b1dbf7bf86e5b309
SHA1 4dd89618dfd69e3d12a649431db329de86ddb44a
SHA512 92765968aaeea5bd44745ad128b5d56d905aeebbd4f9d78453ae307b7f41ad215b1e5c3ad43f99d4c344cdcd42b16faf21b857757b46e14d473e747d3558954f
TLSH
T1ECF05CBB6FF62814FCEBC3D72832947284007844C516EECF102AE6D750B272420CACA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6cb13de1228ad71e914ead9358d0a9bfe75f9f71\index.txt
Size 250B
SHA256 34814eb6f0a395b84593970976964b187c80295efefeb60ba36b27bbadf0c438
MD5 35aecf6c98ffca0a2eea9c94fca35af1
SHA1 78dc58cff48c0555c3f98913542ca8acb78fd3c1
SHA512 286c75e9e94e09de42cbfa7b69cf3e009516eee33373218dd51e18a12e7bd304eebbe4710daf7319b37696171a8317a8a5262d52305ceb70418142bdb5261c4a
TLSH
T177D097EF9029EC83EBABCFC10B7008AE867F380C2484D00CBB100319AC41B5AC023E72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6cb13de1228ad71e914ead9358d0a9bfe75f9f71\index.txt
Size 257B
SHA256 6b0349bf011b223a371a2dbb772dfd81fcfaeae323817274c2228fddfc9c372c
MD5 5a438ad8aa3d492d9b73b71c9dc0a21f
SHA1 02cc2580da1735ab65fd0b984ea76075df9aefe9
SHA512 a90b539f06ce6d0aa7ab405dbc15dcee545392f8f3352f2aa46b16199589775a3536357973102d190d4f492bbc37f08df58e611d0f163caa96468420da26cf95
TLSH
T149D02BEF94259883EB578B910B70089E45BF3C082881D00CA7103219AC71A45C122961
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58f121.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6cb13de1228ad71e914ead9358d0a9bfe75f9f71\index.txt~RFe58f121.TMP
Size 162B
SHA256 54db85b42e100e20f374c121b91d136b75594a87b2c32c13130316fafebadd90
MD5 67697727c56f48837c7334270c6450b1
SHA1 58ff4a4c430e024c4be1b0e315dfb4b2e88261c1
SHA512 cb41b4a1bd2dfaf66ac1049b6fcee17194863ff23396d53c39b5abba7ac1f75ca1ebf1e321970e1bbdb253f416b30dd2feaa56e4666b6145312362b6456ef071
TLSH
T141C08CFBA019AD87EB1A9B860B7006CC826E3C4DADC0C84C6B2131153C31F2A9117E30
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 bd2fdd95c3bed5e2df6346b040f0e506bf4e0fecf3befdc8b9f56ce10d317a2d
MD5 b2f4032391a3623d260026597543b692
SHA1 65916a79e9c9ac669180e54f27cba2fde33973f5
SHA512 656e9dbd93309e82e57c6ec23444fb3ee9f3e9861a7c572a78f4a42fa247955f21931409c4b029b434133a82dec321f3df278dbbf003199b121f8b0f512d4620
TLSH
T16EA00239D3A55145C0480A709495839963218856060B231246A852FCE860944C162147
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a374d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a374d.TMP
Size 48B
SHA256 0d544b9d8eff3315aa5b6b5c2071b9babec1e08f8c7bcddc0a0091d1625cf76e
MD5 aa608eb34f34ab2966b40b322a9642ca
SHA1 c4a301a90cbdcf8250f839660bac18dfddf2508d
SHA512 5a9e46c723201a493fb2051a89532c23286aeffab3f52da001a1c1e56436628b1b5ae68671d468cb6a2fe7ac6e9fbce5588319094530884032e3b5a25f827db1
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c80a2843046e16afafbe4a0d51065ffa411dd92bdedd6f2fc84db08f14ff1808
MD5 4dbaa2d2d17688c881827e5ecbc4b3ee
SHA1 9baf5a3e8adb16633a80e1a6c01866ae20bfed86
SHA512 4d8a01b0f865d0f262cad2058d43afc9eaecf72804aeed79ee37e421ad4249dcfba9aff0c259571fd8330d8efecce4ac1de7ec433872ff930dcd961d81851dc4
SSDEEP 48:KGD+/T1JFgphwzIUrgKT1r9gv7wSgdjtydzIpKI4cssI/KhOkLyJoITKlqsi:KcIAKBaG2z6KI4DsAKhOq6oAKlql
TLSH
T1C2B1FE00713B56847BFE2A5EA5E8B51A53837063B158E42B7BE800A11F2FF518DBD4E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

aa6331ba-dbde-4a45-9536-bf0ca52d4f61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\aa6331ba-dbde-4a45-9536-bf0ca52d4f61.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
Size 3KB
SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
MD5 94406cdd51b55c0f006cfea05745effb
SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
TLSH
T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1736c25ce244fbd8090fdd8b85cb43d0354dbae728ba84bcd54f59724922bbcc
MD5 45236bf3d226c0357530ae271be1390b
SHA1 9f2c19db0a29980787cb07b04cf89aac5f382ae6
SHA512 ace9a494320d716f95589268b0a9fc36b8db4068ab6c3a1527e40ebe4fa6e5c022aca7a0027cbc609adcb952963f794da8232ddf968ab38a0fed0171970b8601
SSDEEP 192:uuqLsNNVjQpQ4UyC2Z0ZozQmiU1I4I47b+jDOVpZDdINXLSlqIU8:nIsNNV0Q4vBCZA/3X+vOvRd2+pU8
TLSH
T1C542193968385C679EF69646F44B36239FE8107B95D52E88DADC8F0C04C779C231B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 052901a1f4096018b03a1c2c7248d25e953ce01f01e41fb5c81231196141f9e7
MD5 77a12d1753b45b89996b3f3185bfeefe
SHA1 1c7bc9d0ad860a2ff1c13b8147b98fe6697f20a3
SHA512 fd0988216820def0c2f2054471b2daefad1362322fbbc6897fe13603a318f7a421cf0a38c186df2606df8483e067c35c1c18894ce6646df6ae80beee4e0a127c
SSDEEP 192:YONDZ6TZ0qQmiUytnlab+jDOVpZDfo8loU6:YONDZ6TCmolg+vOvRt6U6
TLSH
T1D202F9396D282CAB8EE2AE45F48737279FE4107BD9952B84D9D85F1D00D779C2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0c229f6b4c97c4476a560b94478bcb54042fa1e844ad48aa345571cd0d4fbbc7
MD5 54b65c1aae27b8595d7b9fc32b5a1480
SHA1 08dc011406c7d80fd3a19cdc6e2ba7d7d1290251
SHA512 6bc88c4096f5f431e322e164cce733d4072851cd3ec1de4971ee6dd8a9fdab8d7bcb3f3fd5add736e4d5d082cf2d4aa1b0c9ede1ac205978b4175c860d0d0419
SSDEEP 384:nZjccCs+Bt0S3WsNNQ0Q4vBCZVxFX+vOvRd2+pXU/AatId6of3V:ZccQ26vBC9pCOpddpXabW6UV
TLSH
T1FD827D3528781C3B9EF69616F04A361B6FF850BB96E42E58E9D88F1D008B7DC131B526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 234e029c78976e49a20f601114090707c4ab38acac1af9b60af23e259d36dbbd
MD5 528d89a8c2db541bad50bde57cac70f1
SHA1 f92b89108c4e9fe92daf691a55fe8fa3d55ce1b9
SHA512 8de8a3c84b114f416566570499a1d8f28c99780c8a56ea43125878c2e3aef23175fb3046f146e7b67afe81f01ee1233b5e7f88f398d566fc90602fd0f9c8e81d
SSDEEP 192:JONg6TZ0hQmiUyYnKGab+jDOVpZDdINIcXlqIU6:JONg6TC/PFg+vOvRd2HpU6
TLSH
T118120A3569386CAB9EA25E45F48737279FE4107BD9962F44E9D84F0D00C779C2307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cd625411a1ec3114ebbfd079484016019c14c3ad0dd152c045a85e58a2f5d09a
MD5 764230d7f53057aa0fa7f2f918d73baa
SHA1 c274806e16e358e63b4c3099e8e992ce22ecebff
SHA512 06ab2b88d68f0b69a8502acce258d8c04092f8ff77cb1c7f19cc55ce6d4fbf07b22daa823a97b400cd8d3e11c7ef558224383d0e7ff27464116126298ec8e4bf
SSDEEP 384:nZjccCs+Bt0S3vsNNM0Q4vBCZA/3X+vOvRd2+pXU/AatId6of3V:ZccQP+vBCenCOpddpXabW6UV
TLSH
T1E8827C3528781C3B9EF69A16F04A361B5FF850BB96E52E58E9DC8F0D008B7DC131B526
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 fee01bc31321b8e494324b3de59cedcc5690f78669d05c78895a8c5a0c6e2b34
MD5 9f42b0058917e10ea5f8be359c796717
SHA1 e12da2dd8d3331a89ac633e86f1919452b2a427a
SHA512 8d34b3548b90784c6e797e0258a42f3ec5d50ab745543e2390b7139dad8b1a337ca39c17c9bdba7b986903243769caaafd59a553a5d64e7f3faf338dc1032279
SSDEEP 384:nMiFJjccCs+Bt0S3G6sNX8TUNTUlIlQ0Q4vBCZZ0FZDf4L+vOvRd2NpXU/AatIdx:3FJccQDWwgBvBCUILCOpd4pXabW6UV
TLSH
T195D292F598D7893AD9AE4783A33E6E465EBCC06375945994FBC84E4CCC821BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9c3889268864cbed49c5d4837a22b6a3810a00ffecfe3262b80e2cab02952b7f
MD5 66b711beaafe101704b5bdaa5dc9fa61
SHA1 b7ff3ffe3f38f4c8e8ac881ea154cd5746e8c000
SHA512 9918ec0acae38bbbca8d8cbd4e32a066309b3fc72c4e14041bbcae15a5d1b67263574cb4cf42179281ea020c7777504826d13ce60c831e8d2e3e5f8c167ec89c
TLSH
T1E9E002599701107FC03C47315053573003D1C41596E11307555101603C223401E38EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3b352738dbfc74fae6a6276c56a18b69b1941b4c927de8c6670c8afa3194ee0a
MD5 4c51d37a4b89d541ab2d700d9d0b967b
SHA1 17851b2b3315940f4e65e0d6a613e84d2ebc7f14
SHA512 b26ddfaf5b042249c0de3b8acb73e04640a9a420cd22e6af8b9f3846c33179abce4f8be054a13cc15ae8a90663aa33a7a0bbb11d919c42a16200235473b77f64
TLSH
T13EE0041D5701007CC03C47314013173003D1C415D5D51307555101501C313401F3CDC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3c1988d782e8c9e70355d116639aa82d6b9b52747f12b4211f2aa4eb5996803b
MD5 6b0d61d770dc5d62d55996bb454553c2
SHA1 a1108647b49da1ebb8acaa240bc24dc5b3033ec4
SHA512 0837cc5086acc074398b8ad32855b320dc0e09129630890e9e4fa8d193b2aca3c327fffdaf63f1de64c09cd6688dea0aa2946dca00451532ab8a1809f60d68e1
TLSH
T1C6E0015A970110BFD43C473550935B2017E2C42697F217075A2105606C233412D38FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2cda06866ef221effe9d395ad7b0ab8de884e1140178897af2e2dd3abe323b9b
MD5 fa017634238af430160e86469bef8016
SHA1 de7870fbd26ef552dffe5bbcbfcc498fc4404799
SHA512 95504e3804fe31210cbb360fe6e00e0736049bf556be9572d4ab622a2853bc29163b71044fc5488f0028bac66ed0cb7e336de5eecc061bc12f5c81280e206912
TLSH
T122E00167DB2500BEC8FC4B3655A31B2127E6C42697F292075A220574ACA33816E38FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 22634db1482007eb6cd91dbe67698d796cf8fd7f8f42a2f887fadfef37aae38c
MD5 fb85c8d6606d5a61b7da65fc92285bc7
SHA1 59eea86c50b71d1f3b33dfd65e5254e961da7962
SHA512 a9ea23c21a59193bddbf9451b0b28e057d7f6b1f04a78aba8fbc0d10787c0ec01d15069e268dcf9eae2d69fa4084ff4ac9b0e8afa6b0e294ba99cde6fae7cb7e
TLSH
T16EE092128720007DC4BC4B350493072016D2C01283F342030B1000345C233412E38FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe598841.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe598841.TMP
Size 392B
SHA256 5d10bf190a6980ab386a7d1a5e4d1050dc4355096d7520a972ed8a74f4dbce4c
MD5 6cbb3f309bdae72fb6208bc385df2abe
SHA1 9d7aaed939746baec4b59aa880a357f3b1b26683
SHA512 dff7de5f9c9dacc9bc63f03cdf3ada17ec98d2c665b79841d613ae0b3bf7ff48ef93b3c596e7f26244c19164c4c42eff1534fb8f9dd8d28eba849154365f0af0
MD5 SHA1 SHA512

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
MD5 bf165c172af1f75083dd4c7e8915ad0e
SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
TLSH
T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dfc6d88a783c8759607cc297d3e2cd437b26fc79ac9edc98a6d2fe94e7cd9257
MD5 5d21ee0905cfbe72e2be6cc073de1d40
SHA1 c15ad24ad36ed4822df01746dced84feaedbdb7e
SHA512 62d1c51e77f9d51b06fbb19f251a67e03698cc9452792f32499953e46acacccb273b803ca5c423dfd618046659feaf0f823d0a3131d5d0d681c5bedaf38a312a
TLSH
T10E41EB48A6E92158B3B76F5AABF6996E487B7C372F46D45D10110E4E0662F00CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download

614b2099-7391-40e2-b743-19591de9328d.tmp

Path C:\Users\Admin\AppData\Local\Temp\614b2099-7391-40e2-b743-19591de9328d.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

a2a4d8a3-73e9-4bd3-960a-c501ab61b4a5.tmp

Path C:\Users\Admin\AppData\Local\Temp\a2a4d8a3-73e9-4bd3-960a-c501ab61b4a5.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5108_1286159453\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8e4b0c6-cc63-464f-8b24-37b07ac307e5.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5108_1855187072\d8e4b0c6-cc63-464f-8b24-37b07ac307e5.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/740-497-0x000002CAB3400000-0x000002CAB3B3F000-memory.dmp

Download