hxxps://trendshift[.]io/repositories/19809

Analysis

user interaction
yes
max time kernel
149s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/04/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://trendshift.io/repositories/19809
Sample260428-txps2abz3x

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
537	raw.githubusercontent.com
538	raw.githubusercontent.com
536	raw.githubusercontent.com

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\hr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ms\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\eu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1960974333\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\id\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ne\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\msedge_url_fetcher_5876_1179171918\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_104_1_0.crx	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\da\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\lv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\en\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\sv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1960974333\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\is\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\kk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\kn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\et\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\dasherSettingSchema.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\iw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\fa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\be\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\sq\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\uz\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\uk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\zu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1828402683\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\fil\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\pl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\mn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1889209808\_locales\ur\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5204	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134218672076898423"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{3F29D0F8-BDD8-4BAB-8BE3-18CBC0450D8F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5876 wrote to memory of 3784	5876	msedge.exe	86
PID 5876 wrote to memory of 5204	5876	msedge.exe	87
PID 5876 wrote to memory of 2056	5876	msedge.exe	88
PID 5876 wrote to memory of 2056	5876	msedge.exe	88
PID 5876 wrote to memory of 2056	5876	msedge.exe	88
PID 5876 wrote to memory of 4060	5876	msedge.exe	89
PID 5876 wrote to memory of 4060	5876	msedge.exe	89
PID 5876 wrote to memory of 5948	5876	msedge.exe	91
PID 5876 wrote to memory of 1468	5876	msedge.exe	92
PID 5876 wrote to memory of 5948	5876	msedge.exe	91
PID 5876 wrote to memory of 5948	5876	msedge.exe	91
PID 5876 wrote to memory of 1468	5876	msedge.exe	92
PID 5876 wrote to memory of 1468	5876	msedge.exe	92
PID 5876 wrote to memory of 3900	5876	msedge.exe	95
PID 5876 wrote to memory of 3900	5876	msedge.exe	95
PID 5876 wrote to memory of 3900	5876	msedge.exe	95
PID 5876 wrote to memory of 2124	5876	msedge.exe	96
PID 5876 wrote to memory of 2124	5876	msedge.exe	96
PID 5876 wrote to memory of 2124	5876	msedge.exe	96
PID 5876 wrote to memory of 2500	5876	msedge.exe	97
PID 5876 wrote to memory of 2500	5876	msedge.exe	97
PID 5876 wrote to memory of 4652	5876	msedge.exe	98
PID 5876 wrote to memory of 4652	5876	msedge.exe	98
PID 5876 wrote to memory of 2136	5876	msedge.exe	100
PID 5876 wrote to memory of 3888	5876	msedge.exe	111
PID 5876 wrote to memory of 5760	5876	msedge.exe	112
PID 5876 wrote to memory of 5136	5876	msedge.exe	113
PID 5876 wrote to memory of 2052	5876	msedge.exe	114
PID 5876 wrote to memory of 2052	5876	msedge.exe	114
PID 5876 wrote to memory of 5920	5876	msedge.exe	115
PID 5876 wrote to memory of 5920	5876	msedge.exe	115
PID 5876 wrote to memory of 2964	5876	msedge.exe	116
PID 5876 wrote to memory of 2964	5876	msedge.exe	116
PID 5876 wrote to memory of 2964	5876	msedge.exe	116
PID 5876 wrote to memory of 1644	5876	msedge.exe	117
PID 5876 wrote to memory of 1644	5876	msedge.exe	117
PID 5876 wrote to memory of 1644	5876	msedge.exe	117
PID 5876 wrote to memory of 3952	5876	msedge.exe	118
PID 5876 wrote to memory of 3952	5876	msedge.exe	118
PID 5876 wrote to memory of 3952	5876	msedge.exe	118
PID 5876 wrote to memory of 5760	5876	msedge.exe	119
PID 5876 wrote to memory of 5760	5876	msedge.exe	119
PID 5876 wrote to memory of 5760	5876	msedge.exe	119
PID 5876 wrote to memory of 5160	5876	msedge.exe	122
PID 5876 wrote to memory of 4212	5876	msedge.exe	123
PID 5876 wrote to memory of 4212	5876	msedge.exe	123
PID 5876 wrote to memory of 6140	5876	msedge.exe	124
PID 5876 wrote to memory of 6140	5876	msedge.exe	124
PID 5876 wrote to memory of 6140	5876	msedge.exe	124
PID 5876 wrote to memory of 2252	5876	msedge.exe	125
PID 5876 wrote to memory of 2252	5876	msedge.exe	125
PID 5876 wrote to memory of 2252	5876	msedge.exe	125
PID 5876 wrote to memory of 2396	5876	msedge.exe	126
PID 5876 wrote to memory of 2396	5876	msedge.exe	126
PID 5876 wrote to memory of 1180	5876	msedge.exe	127
PID 5876 wrote to memory of 1180	5876	msedge.exe	127
PID 5876 wrote to memory of 1180	5876	msedge.exe	127
PID 5876 wrote to memory of 3896	5876	msedge.exe	128
PID 5876 wrote to memory of 3896	5876	msedge.exe	128
PID 5876 wrote to memory of 3896	5876	msedge.exe	128
PID 5876 wrote to memory of 3884	5876	msedge.exe	129
PID 5876 wrote to memory of 3884	5876	msedge.exe	129
PID 5876 wrote to memory of 3884	5876	msedge.exe	129
PID 5876 wrote to memory of 3248	5876	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://trendshift.io/repositories/19809
1⤵
- Drops file in Program Files directory
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffbe6ecc188,0x7ffbe6ecc194,0x7ffbe6ecc1a0
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,10594454424802455701,17644591744018169920,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,5693066743595950751,8565941233776923676,262144 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,14288941096685980132,6950191198058941142,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=2796 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,930190730390636835,3878230226409577625,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,11445247173196548335,15124555245224556566,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4840,i,8759494628712240100,305212247176297637,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5208,i,12284199743804675016,7277472949086699350,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,3940016557880170339,2974748213210173073,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,11044104596529977651,16439968493146249096,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,116802144666374027,2407947006325988450,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,116802144666374027,2407947006325988450,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,16156037495213056618,9430177930717719373,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,8526930361255864943,3713074945834401272,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:8
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6208,i,4398119676868760731,7460002195298099669,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,2659929354686443736,9311801974130924426,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,4376068547645349019,7250483463020411799,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:8
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4864,i,13529814045446801203,5480899953465518012,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6532,i,17823822914298953553,13537580358638070571,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3516,i,10968629742327301485,7206106208893982683,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6972,i,16142163611314426619,16790038136153945362,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,4527989657051277077,14143503792080853289,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,4527989657051277077,14143503792080853289,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,6958091234792528409,736166106289872154,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5444,i,3406361558421538165,11528550890456680465,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3648,i,10706898000760462470,17955868787006129905,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,10932090765341256284,14541525274331599636,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6828,i,6807340735243864665,15166752197839510397,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5344,i,11468657044691006688,10932863107933844004,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6612,i,4156620416638808579,1926240800384088441,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=4988,i,9253141188462413394,472612837650128735,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6340,i,1969011539927857140,12521981197445417442,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7256,i,10170414281624093078,11590252618021950898,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=7408 /prefetch:8
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6204,i,5268222534867276545,2347820045465545099,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6600,i,12618016133651780812,18067277636577463869,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,5706888668589633778,5014008170636328201,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5484,i,10029186328255106512,6760866232583430819,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6112,i,18405782255001384988,11410514795756585626,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5508,i,7045388853053983803,10741051718658473179,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=3052,i,9286565561603630834,17880921231386035992,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,9007203924437763412,8309934797979689677,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7680,i,12610223306786831640,7650106577248935806,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=4988,i,334598534769120181,3541320930814945423,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7080,i,6663528339365805158,12618854923190824168,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=3500,i,1583274078861105178,602279619160689003,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7016,i,15609981345564446551,7797254911088741903,2097152 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:1
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2984,i,11110728303114752332,2722136789162365782,262144 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1020,i,17426836007189206744,568636814189319541,524288 --field-trial-handle=2344,i,17402300537746308572,2873632016108521075,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
  2⤵
  PID:5724

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1828402683\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1960974333\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5876_1960974333\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5876_2097078348\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c7296caf0e9cce556825f28f3642cb5ac31e31a0ff760d227744d879c3a93dee
MD5 1fd2da899cebd4d5aac2a3d85c0bfd18
SHA1 3f4e6dbc96df63582e9ba17acceda5012e453d7a
SHA512 840622178b39a880be2d80a1349d1dc0f7bfb63bf38c38c71fd96b89033d54de3e6a88f15ad237f3b66a8ebbff2bcfb19f5b6a6e94882c94044f73046f231584
TLSH
T1D5D0C0CC33B13C26C58C807004457F4D340BC4A20D42C3263433297C0CC30C428514C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd04dec9a65c9ebbd9698b7d59631c916e6b6a0a7afdb22ef48d8a4a82d902d0
MD5 5491f296a003c3ba16025eb18fdfb799
SHA1 8104d473f5d8f681400a64b5d0ac5523a5d56b8e
SHA512 118ab6dad3343099380a953888db90a14fe8c7dcb62f906e55a163cdde9b95460d37b865178c48bfd20c166ef6b725e5b61ca55fc83a0221383e062a36b68b84
TLSH
T1CAD080D837B16C26C589947104857F4D351BC4A24D46D7267477297C5CC30C46D555D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bfdd58f46b9d6c2b6dc92d0e34ea2956f5baf86a29e75ae160755416fdd3a43d
MD5 4d07be8f3b6d089c83a43815270dba70
SHA1 75b473918992f4a8abc3d1f12fa14ea468b9083a
SHA512 c718b4178ad344480e998eb8938beb3aff3d966906941132d29e5b6b6dedeb168fdb8b94c1088a1e4feaa4ef45f0ce75fa88dc892c738be79064853faa18c42e
TLSH
T1A7E02BAAC821DC2B18FD0B2920568746EB51135B1B50884F3B3D92088FF16371696CBC
MD5 SHA1 SHA512 TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 16KB
SHA256 026fde1d1e1ab203f3ea04124f06e7504ac654d3810f1e119909e7a857fe5224
MD5 bd83e7b9fdb96987920b89ff8b7acf4d
SHA1 2e0a9672b837db40e77da6f979b18014077509c8
SHA512 ac625b6a3368ed89fda73ecaa7ea2ce250a47800b05e321817cf6e7c6d730b45d4377bd0c535848e7818a644eba300f2680aa23dfe15199f96cda7864033be06
SSDEEP 384:inJgD09e57acJw1vZAWlu9X7Byfhq8VKF1bEYrwQ4uk:8ULJw1mWIp7KhYfbGVuk
TLSH
T19872CFB6D11ACCE3A31C357DFF8A93A6451B65E35CA68B64C2F5E124FA41E81404EA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 29KB
SHA256 6219bc4bfdfc5d9b2201dcdf046218b122a758f932e25ed5f168f929b7ca2311
MD5 e35fad09c70beb975a297c43c6af4e66
SHA1 561da8545041f3c8c081cdc50a159bb52da4d773
SHA512 cf69d106148044b54879b3f78e3834a5662e046aac7b869e053b58fcfd67652ef5524517dd87acb6c001f1f0a75774b76de60360031527f4cb9778011127aef8
SSDEEP 384:J8cfYIYWMUey5Fn4NuqRsLoInf1wxULqz9enQFbxj2iD0EcjycmxpPozOYs9QJJ4:NfdL5Oc2m4Uecg1qbvdmnis9QJEoV5ZI
TLSH
T15CD2E1CE2EC2128B8CA07649CEDE8E7D560659B4CC7D06E9A07F9D02D346D93AF50B25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 62KB
SHA256 ebd6a103382bfcef1e439eb34f678f3826d8df913990412faf2c91b0e9ce1d02
MD5 4707d10637fbf1f60a11c8350d09d341
SHA1 1db62499e6db34ad1a66d0eea33f77860f158971
SHA512 9afb4df7759def91217eb5e420864b58e29dba9c3eeccf5a5636900f4bc94c9c90cf813fdbf299d61a7618dd142828b46d5ed796db94cba3ee1877dfc627a05a
SSDEEP 1536:X9VaMhZG182hGenXypuu9RmfJnoD7ATBKWaoLKxJ1RS5kQRPd:XDaO2omyL9RmqEHedRSBRF
TLSH
T1AB53014965A29EE0E044E6DD448F96E1B23E370BE174495C6D0FC9ABC9A75CB323306B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 28KB
SHA256 b92c86ceeb94991654e3fc87c22f272dbec6a8bacdce271b4716649f3207b962
MD5 ff3988e1a3575be20086f898033e6c44
SHA1 dd6ff018a63b2aca26616514a5fbb4ec557092ac
SHA512 9894374aca2b0c64aa361833c9b6c1245aaa581617dd411f09141329dbaa44fc90f230b8fc453eea5fefcd9654caa160c9ca57e845b140ebe87596d4c6f16fd6
SSDEEP 768:TkY6A1TUEXceYbdSsMjDOmFW+r/AIiTikgoijQhR:TKA1TFXc8jDo+EIwPUjQP
TLSH
T1DFD2E176BA378868FC3C90CF524895871A96D0DAEAD7803B523400F5EAB89DDD1440F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 54KB
SHA256 aed296097b5c7a08d963c87f3d770d4ace2aaf097a987b3469f33819e6a046de
MD5 f25292daf679dae5bab808f2d83766f9
SHA1 34957659b6fc5cfa1c6a7cd15c20d7cc0a9c1dff
SHA512 39e632d63bf6666726ca9a109e29e1e595af362ec23f59de3c014a4f24dca00b80b9e470b4fc93e892ccdba4eba83bce4dbd11ac17e2ac7758816d1a12115236
SSDEEP 1536:eesWDTw4Fvi13bvPC6Z9Zlvuw7EtCuv3H+fAy5VsG8Fu:eesWDTw4ILv66ZDlvuXtCu/H+MFu
TLSH
T12F430285684D7851FEAFF2CCBB430DEB9D2A209B23154D9FF68117D774EAE50023A125
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 62KB
SHA256 391372ee29bdeaa4a5ea74b8903b8778eb2ac0f227eb0391895fd380e0af0ba9
MD5 9205f003b2da1f8418dfca19ec30f30d
SHA1 e0c26d32477bbdbce27143ee78f535ba2aa9aaa9
SHA512 8cc0ac8c45aaa5a00365c65f1f035cc58470a00e44904fccf0d7cfed7d6a23ee9be8cdfa502cca06e6f636d8d3aab2984fa3a1c38fd46a98cf4cbbc6519bdb35
SSDEEP 1536:kD+Yse6jREd68aVeMZ00MKKjyDU9Hw1/PWvPVidlyiK:i6pFE8TQMZ00XBDOEHWvPVidlyiK
TLSH
T1C95302F0A612D467B7E5ABFC397DEF40635321F48B28E1A36054B1C59B0825A9C6337B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 157KB
SHA256 b128d4a645aadf94fc582afea4da40beba96c14cdabc98671ab3d7728aa3c308
MD5 f0fc99feea261b51c07e8ca6603f30e7
SHA1 740d93b9bce5f588d1bfc94213ca0c706bd1b1c1
SHA512 6d17bdc3f27cc96b2186829e8b6da6cb0e2c70c6c592542df8e557425658d41e1f1c512aa359a21fa996c9f17eb4911431d2434af7e06e3738312f167d4b9633
SSDEEP 3072:VnYvIMkDtcLo8ftKNImDr5PQvQ7duvVx/jQXcgMvQRIGGctJiEFztrcoU6:VnYAZDtc8GKNIiCvaebjFdQRIGGctJ/t
TLSH
T1A0F3123A89014F14931D263FB6DD87392C807291ED26AA77983C5C964CD94FF8F8B9B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 43KB
SHA256 ba7653a714375acb9160b70a332019a81cdcd0e8eb07ff2e3e4657bcd4c1c858
MD5 6e2d46000b5c7bc010906468548992f4
SHA1 47e9ae0077dc7cc0cef4355d464342749b06baf7
SHA512 24d3cd71d978adda036192c346fb728bf7c53af706466e0867468a48a91a5a00f601646f87b7ba82770b0014ed89204aeddb0c3dc206bc10bf4e435b7ab7b8e6
SSDEEP 768:RxuY5GiREtb7a5Df+FXo+si2Jrnfl+FecnFQYyH0KUsG1pPKx4D4j:RxjGiREtbOf+FgiSnN+AyFt0fU7K44j
TLSH
T10913F1150FE5EE35B59F23B36EDC602708B486518BE9098F13058A04EC49FB84EB7A3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 407KB
SHA256 5cb386cfd5521b51a2b99649b5365b371a06b98c5226ad2fc1f11457e650e9ee
MD5 22b8ae54510d911ba563eb4e3c5a050d
SHA1 0c2020d0ad347ff39d87d92f55b45cdddf9c4be6
SHA512 abdcac9539ac4d3a0d6df8d872ff98d9ebef9201b14a5bbcd326127706e3965a0b2c7435ec81fc55367d7f16753afadffd87c6f96b977dae361f0b522211b622
SSDEEP 12288:lgj0lnzuEJMpT0ijsJLc5Y2xN7t8m0Aq6zR:lgol6EJMpTNsJwvxbtxzR
TLSH
T1F09423D5247B6A7C02FFA139D59A5E4057B43320E064F20A2FBED09A676FCC0D66869C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 28KB
SHA256 859e9dba2317a50edafca9259a37fda293d455bc40e6e8e141bd7a66dcef46b6
MD5 7cf40a06096cca572a63c6841919d5bd
SHA1 2479ff64fe107e661c8d3bb701a46d9a2fb755d0
SHA512 5ba5df380686bda150d8bf775cc05e4bda973ddcd6dedf639217547066b7273e78d4026b88ccb590e9cd930a61ce8ed52e8c479a25037c5a32b4fd73b4d17142
SSDEEP 384:HdCswT+dwZhqaMFumN8n2ddk6gZRrtEFM4Md5F1JwrpWF6B87niaPE9b6AdKN0OL:HdhcZMFum+9/th0ZB8WaghYNh0282
TLSH
T1F2D2E1BF0DFDA47414626D2C5DA9104C8E9DBF779AC825B79081B89B0F68EF3728A051
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 177KB
SHA256 5a9c118db1b5793946f19d6e64bcc1f6dfaa7d46fab61af1840fe914adaeacee
MD5 2909c428a028eee84e3e3c8e3afc943e
SHA1 b11725757d19c3aab93143c9aaa8762e5d8f351f
SHA512 2db4f2809e5ab944d2a079871007c44fea04de8fdee34aec264dfa5b016a248004f325ff6ab019409f4b7142691cb49043263f09b98f4a6b9a65ef9b0344097d
SSDEEP 3072:Fhz3fK6loDCkkyDS799ANRfqiKeQPIVC7dYH/e3DpYBq5GXKGe0lNf0DVc+VwM3I:FhzfBoDpkyDS79yPbKe3sKH/eVnUhxMG
TLSH
T15604236C3CE2084A3D4FFE7EB5CE2599AF8072CE61980C44B91BAA9774775DBC142072
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 73KB
SHA256 7881bdbeb1cafeefcfd2fffb9877702495a0848d0763ecdf559a3f8454770aa9
MD5 355d83bc933ac77a2a60c228a6c058d3
SHA1 6f934a6ece72946b5340bf88f6f42e1dda5614a1
SHA512 1b3ecdcc4f00366446f9f96c23aeeb8e0271ec5f8dadb85f7cb8c103257f488da5bd41e466ea781b3829402ae78cc3c7ed351c47b48b6a21178bedaca986bbbb
SSDEEP 1536:9+BtIuGx2g9hqmCs7pV887zFOCWwS5Z9jBV/m0DSF76Z9:KtVGllV8DCWH5zNMF76
TLSH
T17273128437DDE8136CB9E8918945C0D914FB7EDE60E668235700AEC78AEA4CDD42E1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 21KB
SHA256 232242bced1c7ae16bdea7ad636a2466d8c350499e9f0d63f8126d42735cd441
MD5 2bdd40802ded145ca9d98786bbd3dcd2
SHA1 f1c84b3b07e1cf24b1fcdcb8e31f0297f734087d
SHA512 a94f4438dfac41a6f67410c4aa973c84322e6d9383cba49bac808566fe97d97c4820d2270f9746cd9149250b428f5e49a6606b6d1cbd57533860d2b8252084ad
SSDEEP 384:syX+Zx3UAHPVcIu33J0jV52boVkgwEXZLLpk2iwnSBKpEwDMnUZUiFaIJzseJ:sAu2AHPuJnmkgwEXZL1FiwSBKWwDMUZ1
TLSH
T183A2F1BFE7EAE97D4D642F81EB113CD2BDE97291850031547A279AE0F0C291D69C5C4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 23KB
SHA256 6fa8421a44b1d9ea2bcf130946de9c1b403fbee175576e275399d86b42c8ad29
MD5 ac48bef59f5cfb1267217442d83b3733
SHA1 fa43d18fa5ee3ee3a80a52875b832d7f784eb121
SHA512 5f1e83a039eadf64593858d68ef8e8c34dd046fb4c86960e3da82c3cd81c28f8e475b7cfb7f637774651a6b54984f4fe4d53e4daca66a1836466c9a2fb469c7f
SSDEEP 384:INpdsD7MkA9eo2JTgj/z83SiMqGlx+HdgVBahN+gIjzNvDxae3vIMP5T6D4grPz:wp59eo2J8jbdiMVj+HdgjSNDODgSIwmh
TLSH
T182B2D18DE45573CAA033B731968BE64DC4009826DFA9A63099F81ACDCD5FD806CE5B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 21KB
SHA256 e38110ad5b0a2e1552af699b5966dee199bf62b2708b5b9878b223e0afdd1b5a
MD5 5d373078869daa3487dba22c9f40a977
SHA1 bb1fd04be4707f22d2e23a359133cdf3a6cc7bd6
SHA512 f9f06e93821d8e4605d72f0020afc4182e30511b545c4c352c24034740f1a5bf2afefb8f888729301361f37b55954f07aa754ae148cedf29367747a6884d5319
SSDEEP 384:cZGXdFKzCdEGUcuqic5q5U8ZewbC6BVE3XcbxXnrz81ssZNAE2Hb3OH4W5z:SGXdYzaEGVuqihU8ZeGhI3sbxXsjyHTm
TLSH
T1EBA2E188B0C1193D260AFC89B08FA6165158C77D5865F5527CEF4FA7B0B508ABF3D8AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 39KB
SHA256 495f8e07055e526e1da64a469d7088eed141c104ca92acbb3dcbba5f2d5e835f
MD5 e53cb2c86260e392d82cff5b8c8ce6cd
SHA1 3a8db72a99b6b00c5bac7be222b4c6cb6b24dbd9
SHA512 e302ed9f911946c1378cd3bc74d79b68785a2a5aba516533000b117c729dd1b532d9cd6e85a758d71940ec0bda4c4b2d27dee2e0c6e8f6c709854c9338d9e2b8
SSDEEP 768:jWcsyRAWPA7gNv8rXsu9JTL3MGnn9Gih+WZlRYN8b0IdfHV9L:jWcpRAWbh6Xs01MGn9Gih+VwrhvL
TLSH
T12503F198082D64714D7FF16C834AD0A1945CCACDE9AAD121ECB9FEC7E2EC99F9064137
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 26KB
SHA256 f92506f955464954070c970dbd5a7b62168ca0204507346c1df5328d1f239dd9
MD5 1ec74ed21dcab4b4ad007df08fb07c9f
SHA1 5d1e4e5140f25ab2c924e724ca3a7d3130c1ca30
SHA512 f4f0e586a0480616ef540476c493b3f6d830100f6e28390507a714ac58f668507b37cbdf5fbe022ffbddf908f3bb242141203195b007b2abea6ffe665dbedf1f
SSDEEP 768:sDo1+k1eIlLJBUgyYdASW3tYUp0FRuZ0PVUrZ:79Lvyb3maYI0PE
TLSH
T19CC2E0E0B111C562B3E8A0B8BF6C2F3014AFCE30881145DF647EBAA8745F57A75E224D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9045c15379a52549_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9045c15379a52549_0
Size 1KB
SHA256 7f7a7e4d6dcf5b4d157bcc5f6bc3cc780e8d30779f64587a77b22da53c98e0de
MD5 83bdb2ee9b961eeec91aa57e533d707b
SHA1 fc1023ed3337555a9f282c3e0ad9c9d571634011
SHA512 65580c6d0864aceada43f49ce696e9a00caf142b60470c888b9d0c7d5b18140de35bfd305b0d0fae16b339914f73a7fa334151d55c048498a8ac3027d8d2553e
TLSH
T1253144FABB945685CE3657F817E22A2693215148AC678E32B45086361D84BF3195F80F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 41bfa9a9d5db3ed651d9c0817548e98aec8ab80f3a0289c178277c95730548bb
MD5 2affdf3eaacc588700ac8b86e2b3bd1d
SHA1 037c62ac6c5aed1d6cdc30d3f86cf4ea5ba24228
SHA512 589c0d9d2891b8db13bcc6da892ec14f322105ec9af8b36c4862c12d4d9a92162365fb6a9155ddcffa2a8ddd3ffcab16606e4490a04951dd3d19f1ef40ccde1b
SSDEEP 96:Ax3jCE0+tjKa2Q2rMsc9kLdM5d7R76+/5wSTtUpj6OIhehsb21Oh/JEA9JHuniOe:W3uEJJ2Qa9MrP/4JAMh11ghpigMiAC
TLSH
T1C732C74D4AB94453CBC986B807D7847235BD734C4E0B3E22F67AEC7DA846B8C441AE68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 596326c7ab7dde87128c83d3948124e3130aeda5a8904ffc225a0dadb53bbd7c
MD5 0165d90f656ed4d9bb6dd057babf67f2
SHA1 98627c8b92eee3a0ee89a12f39b2580eb5ab231b
SHA512 1f6d34716d5a8224b5583c5d890a45541082f1c0e9b6f8a55d2c8282a1cffeb57eeb049b369a840551b166217da0cb5c6b72525d34e8bb84f073e9968c99c092
SSDEEP 48:q5rkYujdHSxtignTOOlc9jopXr5bFDxy2hqdCc2lKU/1QciGTYXFyqKR9vg8Dui0:crzgyrB9d1PFMdtNi1/6FfG9v6iCuw
TLSH
T18891A55841A5822AEBE003F15BD2D4B636B6735C8E4F0E9535F1357FA42A722986FF0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5899f9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5899f9.TMP
Size 3KB
SHA256 b63efb9ffe5f454bd8c1ab6ff027c5972b22eed1f090e45caf002bf92c8788fb
MD5 f44526ee893cfee68dd98c83c56d61b0
SHA1 746da856d238c3e221f4831237d9ea1c9ef86ef9
SHA512 5c76928f2b4965fde5d9e05fa135733ae6579fd1bb2663c773bd0e9406c42b98573b556f7e1665e289286bfeaa2812faf78a5a997b5e2d67a6397f8378bc9a67
TLSH
T14B615F558165802DEBE043B15BD6E0B6363AB3690D4F0E2936F2307FA9527128D4FF0C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 f57f5178bdfb383b997c8e44fda7c08682e3656f253ba3ebd3f8c3ad04c8d9cc
MD5 6f8c4c95ec0e0ff39477b5cc1660d8bd
SHA1 07af961c0202106a3c16cb3eb768445ef1adc971
SHA512 c59c36c16541f0b8737bd2cca0732a33b2517353e6315aac3a5df568defa7da6adfb24ff38293ec8ab572b17f44334e8eeb77de70c66559adf05e87b3b2e68ea
SSDEEP 384:DvYlgsenJ/JqeHLK12De5eJre7XDSFgFtFnFzaGG5io6FPyvRzqu+dUjF7d/tv+H:9NxkfFz6gg4RG2JkWsC
TLSH
T14C62ACF3C3E4866EDD1156F57A142D1ACE2D0A2843A83C568AD4DF8BD7E3472E28164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 30KB
SHA256 e6b19886f187fdb6cc9180ed848ebfe6908730c01e2e3f92b593c37cef41a32f
MD5 b0ba607460931250808c08ff5f2e8b2f
SHA1 0ec9baeb14a9cf55c0487f8c1f0e746b570b8fc8
SHA512 2bd29a3c5e80b21117bd5a44e078e430af48fb45206b4a066e1983f2714d8b433e890eb51e9f5795e232c050bbc254b7c756c34a258178527f180180518df1eb
SSDEEP 384:DvYlgsenJ/JqeHLK12De5eJre7D96exsbR9ZUIYsTNww2KeCfYoZPDSFgFtFnFmp:9N4jkfFnRg4RG26RTR23ErE5Ygueza
TLSH
T148E28DF7C3E4C66EC91152F5AA147E1ACE5D0A18436C3D26C9D4AF4BE3E2472E241A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 f55fe539e05777a9b5b37387eaad33828c588b2df92b93199f8b52fc67a22fa1
MD5 039189565eaa1ce28f403da26fca1569
SHA1 a9b33d91b1a78cf1891a57de7737bc7cf43d394b
SHA512 e08a2c904d080a252cfdcb95985ae957cc14c9fc23d5b99be4dc144fde0025b6f7e3c5e7cd0333ade337caef9c7f1885fdd2c0fbc1d59b75a83221e1fc9657cd
SSDEEP 384:sxZ/IqFn/fLsSkMvGPHb24B/SrbaIDo3s0HHOefD1gO2DAVrb2N66X:s3PFn/flk1Hbj8Ys0HHOKGk0NZ
TLSH
T11FA2A59765348EBB49DA8935F591F72AE6E10426D6D04EC1AEFCCE0C00D7AED7402CDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 d64c932cfee41602a53f38cfdb529d5a57500eac36cc639dd48cee61478b83ea
MD5 c3123561d2bde93cc1e1a5ecff946435
SHA1 301d1bd4a863ca23a6c87a2513e9153502f3fc1f
SHA512 2176ec50432cd35be0c900968fddeda432921c3a0493353a84487f2d91941305a69fe0d6290cfcabb82b45a40a4c3d00ff99c400f1bae57f5506e3fb82fc79bb
SSDEEP 384:sxZ/I1n/fLsSkMvSmHbTe6B/SbioX0HHOaK2zV+N66X:s3on/flkEHbTBvg0HHOaJz0NZ
TLSH
T166A2A557A5348E7B4DDA8A25F590F73AE6F50426D6904EC1AEFCCA0C00D7AED7102C9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 82ebd649cd8d782db77e940ec2469759803a49d568998e5c9441ad538df04d32
MD5 0c21759e0b9c2717016ac650d4e9ece9
SHA1 c0dc14bef44607ebd299412253323c2546aac60f
SHA512 8284bd503164f00e5eb329c8432f2188a0a2653d98d0e5bd7a2a28d6a812fbeb89dc1d8f81208ac14c242145ed8abbd310bf00d4cf0feb2c19f9e3452bfa0b5d
SSDEEP 192:sxZlRXyMqZ/K1Ml8Mkn/fLsP3SpgBqGvgzodpglfHW6+WN58L/+fc8cZ5ORtQtvn:sxZlIMn/fLsPaMvDuHb6/+0HHOGbN6jC
TLSH
T17272FA5669389D7B8CC6D619F595BB63D6F50523D6904E84AEFCCA0C00E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 1ef4ed17c99694638a8a20b5d5f7d36649a5f1ddf0a304f48783224fe2b6de2a
MD5 d84a86cf550aa2a588ce3f5b7ead7288
SHA1 0ad6e05be221e22f27951934aa8b0d089dd7c86e
SHA512 68258f3e19d617b613042dcb46992f49ac2b10f10c3e248a32ed058ed72f067f23bc65bc7c3cb8ebdce1d79cbede59685077b66076b9c761b96d3c3d3e98b33c
SSDEEP 768:AasqZl+7pLuL/BlWvBDkT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVFEx4Llhf51Yroj:AasqZl+E/BlWvBDkTu1jasEx4LXB1jAa
TLSH
T12BF20B3B2C0CCB7E4F804E9CDC2A7E9E6EE8018B96D8895447F9881C03D66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cd6d5b2e2dbb6d5ece8d81b518f195fb5c7c8cee8417eb69c7b2853d635b08bd
MD5 8ed87ad6a510f73851238688c87eddff
SHA1 c9b16896fa775948e3d13490aae6f4fcd18b23d9
SHA512 20630c2370aae65a3f60e1ae439c206767a88e17eaa299cde4b4bb6d1e7f1af6330292fe9adc962da1ef47cc0d1af948d1bdb6b09138a9659f3611f20e618b89
TLSH
T19AB012118C9E1300C50547B9412468503A20189960082A52886D50F8CA262C0058F117
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 7c931f9a083f2c13ba34c38e94c6b4d952c4e1358ae56728b69cd8c28cba7e04
MD5 6f80bd0ec2e0828aa7d1a20653cda318
SHA1 78583076b0f26ec1c7a0e953488856d8f29889b4
SHA512 e7bfeb591535211dc8e6ab5634d5600265869f074e74bb39800c2bea2ba5be94319a95f47029c667a6d77ca609279ca608e56e9b7ea70d9aea3ccc951079fc4a
TLSH
T132B02200803FA083C008BBF2E2A3308033303CCC038220A088B8C8FCC8803E008C320B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593ee4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe593ee4.TMP
Size 72B
SHA256 0b4af40d22656fbb9a4e32c10c6856092dd6917fe822f4683d56ceb03df4068b
MD5 01268de4c024baeb9d14dae3883f5abd
SHA1 977800dedb5048c42f63c95cd5ae0b0b40fdfb37
SHA512 9b6a610362f608e66a00f17657874e46422d7aba5290cb65f8dfc1fc9fc67fa6d34f387cac5fa2f025998fab1ddf1fa2768ffb55476d944cc3ea63727fab9232
TLSH
T134A00210965B1410C80815BD5005A24423B18EB9410056025490B1EEEC916C16DD1123
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 29ff5f1185f0f6a15c8923f3217b1851649ef0a78c72a631d8eb39f8cbc8e69f
MD5 49ea0d71ea163aa982a6997ecb1a8092
SHA1 7c8b5a70c53437582f0eae7c67a3d015a92350f9
SHA512 2f4dab77921bc8f1833be80829b5f07b964ea09ce485a22c71b6cb78c3ce3036cfd61257aa6fecd283352f3f0c54eba3fb78b1c2dc21a0237eb7f3f0ee37c5ce
SSDEEP 192:+HhOVXSe5i+EkETc3+uWvwAn+mPoOTR7uVhrx9aVYh5D+wHMT7glRZVrd9th/qn5:+BOVglYXrbtZqRvJ91GH4
TLSH
T142C22B11763A0380397E258A8194B56F66C270A37098B43B7BBD44A64F6BE21DDFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 6450f4565c4b6c9070e7e8eaad12d501f8a477fc8929e71134a4bd5f273af81c
MD5 b79640817017fda5b8f7be93dd5f9667
SHA1 2a922c97b372aa355e1c47017f9e34598bab0d47
SHA512 36a8dbdc42098032d8778c1031c3fc742ec9601047c4823da46e917c1874e82812608e69811d641ec1fee8113acf45f5fe486e6d1350e4c9a7e59627e4378989
SSDEEP 768:uXFayv3EwgTiy1YoJliU0mteMmo1tiDXsG:uEyv3sXL0mbmoXWr
TLSH
T10AC25B35E898D9BBECE69FCAE7497A07DEE001A7C58C0AD4DAE81D0D10D719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 bb43656ec8ce6b1368e34cff20c3ae3f1d831e69257121469a2795b47737632e
MD5 0917041692fc6172978a632148e443c9
SHA1 f8a3e2d910bbdb2103ad753379deb6f7da17fdbb
SHA512 3a7fd32df0967e419ee17a75b557d86d77e88a8e54add538ad31c06e1c0c035cefd4dc93d0c63fbd8a42efc5e72efc08bb57f7fb5980d2e506b7d260ce8b03b4
SSDEEP 384:nxiF4SxmoWE3sN08TUNTUlI4IRih6J1Au84fDYjcJliUqZmLhpTctunVQNvUmrNg:YF9x0E3vwgriCnYoJliU0mt51VCTW
TLSH
T1DFC23A31E894CEA7EDEA9F95F78A3603AEE4015785CC5ED4EAD85D1E00871DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9675bac5f607bc186e04e919b19229e9867185ddc9f2cbaba16dc4c13dba63a1
MD5 6debbd7a798941db0c4c0ad90fbfe0a5
SHA1 c5bd2c4873a09acc1233824559648f714bcf1c58
SHA512 8cc3887f45161021ca169290f17b4ef40be6a8525b352c620c2b9dc9e1630be4753762752f2232e9e49e894bc0008033636e3a939f9f18d371b9cb315b665a21
SSDEEP 384:nziF4SxmoW4sN08TUNTUlI4IRihczJ1Au84fDYjcJliUqZmLhpTctinVQNvUmrNg:eF9x04vwgriGnYoJliU0mt5DVCTW
TLSH
T1DAD23A31E894CEA7EDEA9F96F78A3603AEE4015785CC5ED4EAD81D1E00871DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b17cd3b8e0be799720ece475ab673f83040bafc2c41a5bf9acc3f2a16eb9a351
MD5 4da59f66a098db02a7512537cf8af37e
SHA1 38a9fb39eaa245445de599592b7f78fa9ea43286
SHA512 f35d4842547a384682dd441c362b73c44bbda3c177d3d6edd6e1fbd250baaefb9b3c28b61ac779d3c12393a70cb02a8f7ba8c4060427ff115c15e5baf0555082
SSDEEP 768:1Fayv3/wgTi2cYoJliU0mt5jVmo1tiDXsG:eyv3xIL0mvRmoXWr
TLSH
T16EC25C31E898D9ABECE69F9AE7497603DEE001A7C5CC0AE4DAE81D1D10D71DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 df762b1d2b1c59ce6de3c71b2d17b11b942d1f3fc2f9ac2358e80526a49027e9
MD5 f03cb1f765fa8f2a43c798f853ec3a5e
SHA1 62399ae71370f035a5004155bcf764e4ae5d1302
SHA512 7fd02b925d9746e17c56e69f4f1dbd0bd26dac48b923c7f789d543df2d7ca35ddcafbc73471527852e043a165e30e5e29a89c6334eb09d2cfda929448045ce66
SSDEEP 384:n3iF4SxmoWJysN08TUNTUlI4IRihpf1Au84fDYjcJliUqZmLhpTctxrVQNvUmrNg:yF9x0gvwgridnYoJliU0mt5SVCTW
TLSH
T1DBE2B3F198D78976E9AE4B87A37D2D02AEBCC153B1884994FBD41D0DCC861BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4d3863211a55bffb8b747344e51ab55e70392ec2437c662d61b9452073a8575d
MD5 71454ded57fb3bbd53ee286b1c2b3e62
SHA1 c374f5622e41ffc1fffcc207a8e1cbb09953cea7
SHA512 8de8026c4095ff89258c03d59afb95974d5d555c7e2574989cbb5499730829c96c25cb03d97be95c22b1eb0463d4c8e57c3181940e3bcc434323cbaa1abc2b73
TLSH
T12BE00207D30504F8C07D553050432A300683923440C002455E7001883D151009F34E40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 12d14f7cb3e58d832967d20507978ea04d7e7fc3e144c38fc3750017b12785bd
MD5 ff9557227790a165d507fc9aedc90f4e
SHA1 b4caaa706f41c132c93b9843e8c1aff77cf176db
SHA512 3250794570b1733fb6ab94dc7347a12b4ade9904da39ee3e6029186885d796bcbc534e1097c625e7ca0433f2ec3e1ec1725baee149b03167b8c0d71dcf4f084a
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe58f538.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58f538.TMP
Size 392B
SHA256 81be78b6fdfe4a1e3189b44bb9d7ebbe2cd79017093c9fb69061ea4b533babd9
MD5 0151b146055713f7298dd8b9e52925bb
SHA1 ed0fccac44d92ecbdc944a5b7afa3b8b953357c4
SHA512 8352a061d6e0490ce7687b2c1444bc08ebe60b818b3d478fdc70d5798fedb19eded18e43c7f18892162be5295ba6c41e9d91681296de9edfdc39c5c3f2f19e60
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a0af7fc96298c2b27953e0ba133c85ce4379735b2a5790f07056594f3c4dc034
MD5 e8672eff1f82b139097f49ce19edb6b9
SHA1 a3d8b87ed6d8137b5d58a0fad58e8ba850bfb207
SHA512 1fa036787f5f182f2382149529d47ade302a0773ec457fa7202fd9b9cc2c9852aef2ae4bcbc77c0c1c9bc6c360f9cc62b7430e8da4e09f855b6718a801b31432
TLSH
T1D4411DE14C3E2AD1D4FD0A2EB4AB38FC95D8C72AF5A4347D6824DA88063A61E644443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a0daabccd35466fb06b6dbcf4b3256ac1590f5e99976b44dd4c9ea21ecd236bc
MD5 267473f12e6491330dbe9a50aa4be196
SHA1 ba47536da080a14faff53c112acf95a43f1c9748
SHA512 f226a86b0d59235ca02348f40b2f3118da47f4b1f52ddcf23db1f9154f8638cdb425bb3d706a75c74c92cd92135096d95bbe390b9f868746a9a3d76380eaffda
TLSH
T142411DE14C3D2AD1D4FD0E2EB49B78FC95D8C72AF4B4747D6864DA88063AA1E644043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 590a2364e07bc1d8a49f0dd9d81a8fdcaae16238644ee1d8c157a8c69f9047f8
MD5 faf6cbbb34f5895b745befc755ea501f
SHA1 8f7a0d461b011f56222a06a53c748ebc972a126f
SHA512 9754651e2975b22931fb3c0704bf7709cf1da0711c4288b2e3cef14f3d2a69a5377c8e975aba5168569275243e38a7a3b51d3f6a23f43e89e6ace64aae214d64
TLSH
T1764150E14C3D2AD1D0BD0A7EB49B38FC95DCC72AF9A4307D2824DA88073A60E648443F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 826576f82ed1c4f6bf38f9103541d64e8bfb5210c4300371699007468b06be29
MD5 e1dec1359c92bdd4fc50d44f615e681b
SHA1 f8977659988bcc6e544c4972faa270078784dbd1
SHA512 9e57b22c5bd35734130a693a7e79a7ef2cb75624d47668d25d6f8c8d7cb0966e460b90a8f96192260b89fcc7a7248706d38eb172c5e03c25b7666e4e3a9c6b6d
TLSH
T1DA41F768B6EA1148B3B77F56AFF6A9AD847FB9772E07C45D00010D8F0A62A41C471B37
MD5 SHA1 SHA512 TLSH

Submit Download