hxxps://cammsolutions1-my[.]sharepoint[.]com/[:]o[:]/g/personal/david_maicas_camm_org/IgBhfOMS__OWSJiCC3ZYnFAZAaPJZJGFmT-dyLqD0cmUn7U?e=Dmr1JH

Analysis

user interaction
yes
max time kernel
449s
max time network
449s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/04/2026, 18:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cammsolutions1-my.sharepoint.com/:o:/g/personal/david_maicas_camm_org/IgBhfOMS__OWSJiCC3ZYnFAZAaPJZJGFmT-dyLqD0cmUn7U?e=Dmr1JH
Sample260429-wrkm8set2y

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4744	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\es_419\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-sl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-tk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_186079014\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\128.png	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-ga.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-mul-ethi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-nl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-sk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\pa\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_557063445\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-be.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_2090610520\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-uk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\en_CA\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\ca\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-as.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-cs.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-hy.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\nl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1177863802\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-af.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-lt.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-sq.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\offscreendocument_main.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-cu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-de-ch-1901.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-nn.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\ro\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\cy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-da.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-fr.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-gl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-ml.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1672897747\Microsoft.CognitiveServices.Speech.core.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-bn.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-et.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_186079014\edge_driver.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\da\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_743512744\_locales\et\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1812646066\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1617113653\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-el.hyb	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4808	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134219597771322359"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1609746302-1884177235-1125644204-1000\{531B53C7-2CC7-4712-9186-BFD61DCAB1BF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3788	msedge.exe
3788	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4744 wrote to memory of 4784	4744	msedge.exe	86
PID 4744 wrote to memory of 4808	4744	msedge.exe	87
PID 4744 wrote to memory of 5724	4744	msedge.exe	88
PID 4744 wrote to memory of 5724	4744	msedge.exe	88
PID 4744 wrote to memory of 5724	4744	msedge.exe	88
PID 4744 wrote to memory of 5212	4744	msedge.exe	89
PID 4744 wrote to memory of 5212	4744	msedge.exe	89
PID 4744 wrote to memory of 4104	4744	msedge.exe	91
PID 4744 wrote to memory of 4812	4744	msedge.exe	92
PID 4744 wrote to memory of 4104	4744	msedge.exe	91
PID 4744 wrote to memory of 4104	4744	msedge.exe	91
PID 4744 wrote to memory of 4812	4744	msedge.exe	92
PID 4744 wrote to memory of 4812	4744	msedge.exe	92
PID 4744 wrote to memory of 4088	4744	msedge.exe	94
PID 4744 wrote to memory of 4088	4744	msedge.exe	94
PID 4744 wrote to memory of 4088	4744	msedge.exe	94
PID 4744 wrote to memory of 1240	4744	msedge.exe	96
PID 4744 wrote to memory of 1240	4744	msedge.exe	96
PID 4744 wrote to memory of 1240	4744	msedge.exe	96
PID 4744 wrote to memory of 2592	4744	msedge.exe	97
PID 4744 wrote to memory of 2592	4744	msedge.exe	97
PID 4744 wrote to memory of 6012	4744	msedge.exe	98
PID 4744 wrote to memory of 6012	4744	msedge.exe	98
PID 4744 wrote to memory of 224	4744	msedge.exe	100
PID 4744 wrote to memory of 224	4744	msedge.exe	100
PID 4744 wrote to memory of 224	4744	msedge.exe	100
PID 4744 wrote to memory of 2860	4744	msedge.exe	104
PID 4744 wrote to memory of 6100	4744	msedge.exe	112
PID 4744 wrote to memory of 6100	4744	msedge.exe	112
PID 4744 wrote to memory of 6100	4744	msedge.exe	112
PID 4744 wrote to memory of 2316	4744	msedge.exe	113
PID 4744 wrote to memory of 2316	4744	msedge.exe	113
PID 4744 wrote to memory of 2316	4744	msedge.exe	113
PID 4744 wrote to memory of 3032	4744	msedge.exe	114
PID 4744 wrote to memory of 3032	4744	msedge.exe	114
PID 4744 wrote to memory of 3032	4744	msedge.exe	114
PID 4744 wrote to memory of 6136	4744	msedge.exe	116
PID 4744 wrote to memory of 4056	4744	msedge.exe	117
PID 4744 wrote to memory of 5664	4744	msedge.exe	118
PID 4744 wrote to memory of 4032	4744	msedge.exe	119
PID 4744 wrote to memory of 4032	4744	msedge.exe	119
PID 4744 wrote to memory of 1592	4744	msedge.exe	120
PID 4744 wrote to memory of 1592	4744	msedge.exe	120
PID 4744 wrote to memory of 5272	4744	msedge.exe	122
PID 4744 wrote to memory of 5272	4744	msedge.exe	122
PID 4744 wrote to memory of 5272	4744	msedge.exe	122
PID 4744 wrote to memory of 1188	4744	msedge.exe	123
PID 4744 wrote to memory of 1188	4744	msedge.exe	123
PID 4744 wrote to memory of 1188	4744	msedge.exe	123
PID 4744 wrote to memory of 2556	4744	msedge.exe	124
PID 4744 wrote to memory of 2556	4744	msedge.exe	124
PID 4744 wrote to memory of 2556	4744	msedge.exe	124
PID 4744 wrote to memory of 4408	4744	msedge.exe	125
PID 4744 wrote to memory of 4408	4744	msedge.exe	125
PID 4744 wrote to memory of 4424	4744	msedge.exe	126
PID 4744 wrote to memory of 4424	4744	msedge.exe	126
PID 4744 wrote to memory of 4424	4744	msedge.exe	126
PID 4744 wrote to memory of 1428	4744	msedge.exe	127
PID 4744 wrote to memory of 1428	4744	msedge.exe	127
PID 4744 wrote to memory of 3796	4744	msedge.exe	128
PID 4744 wrote to memory of 3796	4744	msedge.exe	128
PID 4744 wrote to memory of 5360	4744	msedge.exe	130
PID 4744 wrote to memory of 5360	4744	msedge.exe	130
PID 4744 wrote to memory of 5360	4744	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cammsolutions1-my.sharepoint.com/:o:/g/personal/david_maicas_camm_org/IgBhfOMS__OWSJiCC3ZYnFAZAaPJZJGFmT-dyLqD0cmUn7U?e=Dmr1JH
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffbc19ac188,0x7ffbc19ac194,0x7ffbc19ac1a0
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,3220547636255797022,1448561262666800125,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,2908047196807810940,8301692066339598463,262144 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,8294797342519278879,6238802893213295033,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17921525237884215941,7126714302859542710,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,8043644344296651614,3088646157057400502,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,14642772043459916596,6513349235056847230,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4916,i,10453033536998002290,18009606416718237906,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,13573271153899602721,7534628678082645207,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,3405925863014247126,18307763933219632750,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5952,i,3796209900151845507,8322768079822788687,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,136975981456643127,11348877529396486999,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,136975981456643127,11348877529396486999,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6576,i,6729376990567547316,7544063472054544985,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3520,i,14692028601065978958,15998611872431329248,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6004,i,2327375018115295109,16597520050690675291,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,9003791873313275671,6490812457902427129,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,5165144627315001400,16914013717753086603,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,7258510596641752169,14380993833347754039,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,17561359350779557701,1611477085388850230,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,16500427883633402576,9755092875840283894,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6096,i,8972070420619081626,2744583618571284437,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5500,i,7341263531166039224,810717235829173267,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6024,i,2048978928165128709,17967124798367886587,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,2904253865662162259,7213940863268129199,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4932,i,18043510229896629007,9523380503741330,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,17814419562444655509,1124434196642744335,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,12457549068292055754,7711623496002642626,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7296,i,6298743572915723272,6347225116096280395,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7448,i,3117482710407889712,938036233312886286,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7880,i,18392533852707041155,12923824346537420333,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=7860 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7744,i,9514229131135201642,5944469757232083173,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7696,i,2485327579080277268,14387893213402317377,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=8060 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7624,i,5573973378290233007,3678539746947586077,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:2
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,8126228662145955315,3506799845006557449,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=7952 /prefetch:8
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7952,i,17698551336392295790,3582939549370523766,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7664,i,13415048006232433832,5786733629189622785,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=8188 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6884,i,18242549753576044667,4370726771121318847,262144 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=6072,i,99852667399647686,13614814161551282966,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8260,i,8904204618580747850,13897627812918746770,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,17032223415878860811,15796047234185909637,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:8
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,9540391140387118097,6140378770694277299,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7740,i,15510295645898610395,17538596858784758834,2097152 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=8072 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,4615791161239204086,12029409537567188426,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1032,i,14145466794646337306,6227457400534469599,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,1866473207056177786,6930132497709590324,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=1032 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,17228085110521731335,15877860768829953165,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6364,i,12502965988535644170,9091992752444950745,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=8200 /prefetch:8
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,14894414006398855379,17167190391321321298,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:8
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,8669903518401647926,18039836639160456174,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=8376 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6620,i,6577916097662659940,17820527372705773085,524288 --field-trial-handle=2256,i,12928514951294510093,2449563817789483375,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:8
  2⤵
  PID:5636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1177863802\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1177863802\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1397895178\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1421680044\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1617113653\manifest.json
Size 118B
SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
MD5 4687681b420a5c580fe40870ed6af32c
SHA1 1aa40f91b2ed8c5ea38cb30b81c87a9ac7e21e6f
SHA512 5ced299552785894df9aa86f0cb5d9c057cf73753f81112ef91a8b8dbc6147913e39c27b6327613bc41c447ed230fbbc74881db79853d38e365685132e618762
TLSH
T170B092B00C1AA43B22C09320ECA0668683F84218E8421B1A098036481F882B880362B2
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1672897747\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_1812646066\manifest.json
Size 102B
SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
MD5 ee1ed8500e24dfe42b5be26a96d5fdfe
SHA1 f4b08becd340a875a34eb0dc3fff2024625643f6
SHA512 0b782a4871d0fde1c775237f9392f9ecf7355b886f50584a101a0764631ddf22a25d0d19a0041bd22d943d68529a86168e202c6276d0cc9c5751b580f4d2783e
TLSH
T1EDB01221EC10B4B31004036C086CC3D0632B2F072C4079280DE19F84E90D9EBE872529
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_186079014\edge_checkout_page_validator.js
Size 996KB
SHA256 55dae73cfd507ed10739dc0b5865af797fe1ebfb7d33642889000aad5aaa906b
MD5 6d8dab9fb52752a6689b9de4dbc7d708
SHA1 783325b46fec74461f390b76b7359d54de93f075
SHA512 c8f92bf718c3a0afc361ced219aeca9a43b7f778b09cf5780ec3ae4c204031643e6b003de4017fba3071f83e72802643c4e0cf1d06184b79dca4f0de732b42dc
SSDEEP 24576:cs4imRAbs1vGrkJUA5jKQmwzErL9Ot3LYVfik0BwrpiUWLRKLRzMEiJsfaGx1huq:cs4imRAg1vGrkJUA5jKQmwzErL9Ot3LS
TLSH
T1D0253C84E1E2253466D74CB960B7D2C4B5EC04583399F1E8FA6C588ADB0FD4723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_186079014\manifest.json
Size 146B
SHA256 038bab8e2ed444c41a8c5e6bfd2ba1380b169ac1aad9f6e81d66789e71a2c19e
MD5 401aac9450ce46f582907a8f45459484
SHA1 23b6ebe459782a2b571abbacf7f8e5ff584bf3ae
SHA512 c024e588e5b743df45dc34b6eb5bf82e40d7db0db85b57b889a39da57128b7761b75c869cfd7efdc76f706fe8fa08bb5ba110f0a2e2d56520def5d607110d143
TLSH
T1C4C09B73C931AC71157507D449F59745EB74574BF511F0563730018D0B3D57550606D1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_2090610520\manifest.json
Size 52B
SHA256 eb3cf0abd2ad7de40910be5f35246574a6de00ce226c6e9cef465ce6691bb937
MD5 bd68a51e561ab1326b00278d86346486
SHA1 0929e44106b4b17dbac9104a716a05aeae6dba3a
SHA512 beaf2390b2c037268ce9518e6e7a49ebe123fa1bb6ba59e3d0641e778a11fed8f863a3c0cf6a505a5e404d4f9cb14f0eca72efc1efb56384e3ba190a57c41c43
TLSH
T1E2900270042495175AC10E606571F8C59391661955850D1D04451548029546CE0602D8
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_23903090\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4744_557063445\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c7296caf0e9cce556825f28f3642cb5ac31e31a0ff760d227744d879c3a93dee
MD5 1fd2da899cebd4d5aac2a3d85c0bfd18
SHA1 3f4e6dbc96df63582e9ba17acceda5012e453d7a
SHA512 840622178b39a880be2d80a1349d1dc0f7bfb63bf38c38c71fd96b89033d54de3e6a88f15ad237f3b66a8ebbff2bcfb19f5b6a6e94882c94044f73046f231584
TLSH
T1D5D0C0CC33B13C26C58C807004457F4D340BC4A20D42C3263433297C0CC30C428514C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd04dec9a65c9ebbd9698b7d59631c916e6b6a0a7afdb22ef48d8a4a82d902d0
MD5 5491f296a003c3ba16025eb18fdfb799
SHA1 8104d473f5d8f681400a64b5d0ac5523a5d56b8e
SHA512 118ab6dad3343099380a953888db90a14fe8c7dcb62f906e55a163cdde9b95460d37b865178c48bfd20c166ef6b725e5b61ca55fc83a0221383e062a36b68b84
TLSH
T1CAD080D837B16C26C589947104857F4D351BC4A24D46D7267477297C5CC30C46D555D7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 7KB
SHA256 a7acf7275fb7453e1ac00f92b15d5bf1ed284f67c89fd40ae1fea3023b840fb5
MD5 ef64b8d699e88710901b06807d8cb114
SHA1 d59527278ec1c5b0dcfaa51a30f60e3d535cb97e
SHA512 c02306cc592a3f4c270a81482158f0a8b7d4a40773956ce53b3cd0988c09f891c85ae7146ee7f691a5833e0f2770ca04c59dd60f608dea5083fd955257118127
SSDEEP 192:xjqTZzuFF000IwIwpVpVtt22zzMqE9EErrrKKRwTWIh:xjqTZzuFF000IwIwpVpVtt22zzMqE9Ej
TLSH
T1E2F15B9682D5C2DA9B0560CB8AA9635C5070370AFBECD908178CDDEE304F8DAB4B5AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a0c7cebaef7cca967d19693c30023b6c60a1bb2a18b75da011271bef493fc954
MD5 1fd509a982f7431f6364fc6f4b23488a
SHA1 0b8a2124f082c6cee65ab9ff4b0b5bfa3586b982
SHA512 c0cb0f8b4fe234c998a892d116681a908f8b955de8d52ae4fb54f3358737ecaca6e1aea2fb65d414999e73f9f82356f98d2f0fdc43fed927e6037f104db1a6b3
TLSH
T173E02BAAC8229C7B14FD0B2D20524786EF55135BAB508D4B3B3D92488FB0A374555C5C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 9KB
SHA256 b2386857293c52747b5e6af121daa283615a5ba8074fbb89f99315fa8f2eb178
MD5 0cb32e569a2abf8b0c5622ea14cdf49f
SHA1 08d569fcfc419a2032d3799466f2e8647f0dfa82
SHA512 1ab1b1f2f9d97716a53cc5a07b6c5fe40a105d4cb09c854d742591e6dd28bbb1e60e690f8121f403ad102f8cfa6b0617e36ffa4625c1e506eac560116203aa1d
SSDEEP 192:XcuuVIoWn6ODAOV0a1YlLkGnYOcHPw4gR1fZ+DDZH:XuZW6ODAxnlDYOy44qaHN
TLSH
T13B22D860AAC0BF20EFFD1CF288C0DE6962A087753127AFA737B1556D25176E50D0F4A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 67aeb7283ac2ce7dff48e122a9bff6b483f6900f0ee590c256febd35426c712c
MD5 86ff02b00f293eb36e31027948090ddb
SHA1 b6e39b6cd20d5be315867fc0ecd7a4dd92ca1a6b
SHA512 90926b2775597d1429418240a61e6a91c6f4f4e618fef00181604343526026a83b79a5ebc94d4fa6f8e28b074093aa9de37278f901563e0a82b304962e66caf0
SSDEEP 96:O8guZ5rlKJC7O739NFyC4FeWoh5qPeRo9VvE/VH:RfblKJCChlaexquIO/VH
TLSH
T11DB150B46BC08B25EFE92DF49DD1EC29B1B00BB530A7EF6732B1127D59223A10E57416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58b939.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b939.TMP
Size 3KB
SHA256 b48dbaeb6f15daea7de512ad8529c80ed960aee8be7b956f9a265cdf88e6a727
MD5 c61c960cafcffb6b958b15d5de82ba7b
SHA1 aad69c18acf444df2024c6a1abe512025c4dc2d5
SHA512 c93571637c8b871876b552e0d21d72de6eac9e676c12c66520ac5edc9d439863a7ed4a0e7928cb298614b4989749bd8ca5164912619834cd18e50eed4147eb57
TLSH
T103616FB56B00C929F7F960F4CEE0E12EB2B41BB93167EF3932F257BD5A50B111840821
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.104.1_0\service_worker_bin_prod.js
Size 121KB
SHA256 ed3803ef5bac39e8b153d283695ee3562398e5d771a6c7fe5d1a85805672ab3e
MD5 aac97879e3f1c5a71cfb46b0fdbb29a1
SHA1 0cb02f7bbcbf207606888361be551e6d682c4c05
SHA512 8878736f8500a668e51e1f543ad7fe13eb7b4e19632918714dc64e952cb1f8400fa2026cfdac9ec757f4a285eacf6ce89f606a395500c56d2f2f39f8a64aa760
SSDEEP 3072:L3zCum5nHBRKbYK2ANj6a/4rxMwDLE2sk:LwB34GASx/DLETk
TLSH
T15FC3E9CCB7A574664363A5B6002F000FB23AB8AAE44C85A8F188D9E97D7446D4377F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 23KB
SHA256 97b3b29cfee34b51c3e34b4956127ea0bca11a04644c148a6a31044ad7301f51
MD5 510edbdf4ab17db04d0465803be991bb
SHA1 6836ee21db6a3a8a5f06a11a6b5617a670b4d3d4
SHA512 f20af93613199fd32e5de67d810dc80515f2dd75d0f0f42fb3695dfbf5e73b8e24437c0c192542f06a6f654e75244f3a9daeb604db6bc9f5c6acfbff1ee0486f
SSDEEP 384:D9WQzZeOETvWn7H9eAJd2DRvG923JzM8oY2+oHq5FDDGZ5ywuidGBaInZik8mEFa:9I8+T2h+
TLSH
T1F0B2AEF7C3E8862EC92252F4AB156E1BCE2D0565436C3C2785D8AF4B93E2472F141A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 7dd4e490195c6981f5b91cf8a2bb15281d0eedf8f7c01a971b9846f15bfc9d9a
MD5 96b3949e1350341f87b9e9b3ae26040e
SHA1 87b3a3c7834e32c6bfafc8b0afcfcb91788e5d3f
SHA512 fcdd8d942cab23330bcec175d26907291bdae2414c5669e72964a45b4533ef55febe6c97cc951c345413a23ddb16fc3f49d2103eb884030765e6c9f7f9bf167c
SSDEEP 192:D9VYQzZeOEn+oHq5FDDGZ5yEFuidj6BaIEOZi6k8mEFuTT6aSi19j75HcbHGj9i4:D9WQzZeOEn+oHq5FDDGZ5ywuidGBaInY
TLSH
T10B32BDF7C3E48A2EDA1291F4AB153E1ACE6D046507AC386785D8EE8B53E24B3F14154F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 acf5856965b85860c9f21b79fb60ffa1f62d0a4073903bd4bb4d655c7784a57e
MD5 3101a4a82a578300711e48aa9d107fc1
SHA1 5cd905f69dc7c61e15dbdf52f1a6fcbd438722ff
SHA512 e876c0ed812bca922ae7d0d4c17655043bdac6ce2b759f6f98147bbd4d8871743ee7e448b885234654642d234f3d3310075abf2ebd7a2f90937505223fbbb14c
SSDEEP 384:DWOrIOeLDfjps0H9eAJd2DRvG923JzM8oY2a1HK5mDDGD5ywuipaIcZiy8mEOuTe:iqgT2h94+
TLSH
T17BA2CEF7C3E4862EC92292F4EB156E1FCE6D0525436C3C6685D8AE4B93E2472F141A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 5e2bcbfa867af1a732f94beca3536d4196bbe4dc83181d3d1c6cb24630dfe0dd
MD5 cfb9edead71bb9d9b0b4d5cdbe08b7b2
SHA1 ea9125c54a41eea91cefd73c8018a4054248c3ed
SHA512 cf18e15389f281ba8a9b51a1bc39e2cd2b6b1e1e12d0e1a09818fbe7817a84baaf5a3825e276c32c17e829f62ac75022a79112b20030ab4fb86f63bee240b5aa
SSDEEP 384:sxZGWuOC/fUsOyoS7v7s8wHbRF/erNcPF3:suMC/f2yAHbberNct
TLSH
T11F82E806AA245D7BCCD7D619F945BB53D6F90422D6804E84AAFC9F0C04E6BDD2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 c11567f0398eb334cf6661b7cfdfe80ddd1238e8679326ccb88f9c09d26af93d
MD5 a3acf72ff900b910cfdfc216de6afd73
SHA1 0941fa08ddf52ad414fd11794e7d3475df8e21f5
SHA512 2053720a1941ce222f8deae6cbb8f15203e87e7e184984103e6dd0c2933a8996dca7c4ddc52b8e17f3555dc243a959d7a32e2db43f68e2479beb35b2e8d94411
SSDEEP 384:sxZlnOWMC/fUsOyoS7vbL9KtuwHb5mF/MGpBubegNcPF3:s9OjC/f2y16HbmMGpsbJNct
TLSH
T1E8A2D657A5340DBB9DD6D626F905BB67D6F50422CA804E84AEFC9F0C00E6BED2207C5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 a989c617a707d6bdc74f87df09587b08c4182b31b926e78f1fa92bf88e856982
MD5 3045df85ad5e1fe9e7944258e772f1f7
SHA1 6fc5255dc5169d66af305468d18d3a6cf9812f76
SHA512 1e93c3d68ec717870934c5caa5e1011593a5442202e45fedaf91b1ef43dbc2833e897e7e46b669cff67df31b00d7bef72e0831f498e914a4c7701c5684ed32c1
SSDEEP 192:sxZGRNyMqZ/K1Ml8MkC/fUsXRBp5isK9U7vSzodp1vHW6+WNEtC/e3+KqG8Nc1pi:sxZGWMC/fUsB/oS7vpxHb9/e+NcPj+
TLSH
T12F72E7066A38997BCCD6D619FA457F53D6F94523D2804E44AAFC9B0C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 5fb8e9afb03f0704b0de22dd0e582ee09008cad17c5e0d4b2a59b9f9a67f0fe9
MD5 c66ba8409915ab2beba1cb4081b1fcbc
SHA1 3e4fb1a0c86a0e562e7ea19fe2bc451d38e5e29a
SHA512 7485094ca3230d5a765f2c82a014a240f354ec3ef2e7dc94556be7a5f90f080d2850c710517bded2a4821e362229f6cbf4ef9522e0ef3ea56d15bbc73905fc2d
SSDEEP 768:AasqZl+7pLuL/BlWvBDeT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyEx4Llhf51Yro0:AasqZl+E/BlWvBDeTu1jaDEx4LXB1jAF
TLSH
T179F20A3B6C0CCB7E4F804E9CDC2A7E8E6EE8028B96D8895447F9841C03D66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\96624b6a-d162-40b9-8a92-e680adedc754\index-dir\the-real-index
Size 72B
SHA256 cf3a2f3a186226250a83bcc6df486e3ebb81e7253d6e65629f7b62d625324b8a
MD5 d2faa66c66a2fb290e58b59e1b94f1e7
SHA1 e236b3551d59173fb63143a98026752390bdc2bc
SHA512 de139451b01e7fdb893c637c83ea3d492e61e270d9921fd4ea733b418f51fdb2cde6fbaf1f9d9c3102155e26821b456e178cb12848b3c25999d6be9877110fcc
TLSH
T1A4A002130394544DC41611B196D212812212C9185A40630694E1D088CC509C44D6614D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\96624b6a-d162-40b9-8a92-e680adedc754\index-dir\the-real-index
Size 72B
SHA256 abab8185d1e24fd373332e1bf136b4004875cfb0add27843ac09dfd6f0ac6da7
MD5 adb9961df1ba2da6d8340218923d4fb5
SHA1 0eba76290dcfe4a834ee81327148eb6efb73bb2e
SHA512 d35c9efbdc3342fe796d833704e8507d030be2f9edf5d63dc32eaa0095754a13156f437cec2e45e3a6aa42d1ff6a97b0e459b0adfd4d3845207058c9ae8984e9
TLSH
T139A0026C36E21436C95313F3269701413711F914120A1B8761F89444CC7497D6D9216E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d864f7e2-3df7-400a-972a-26ff447d73c6\index-dir\the-real-index
Size 2KB
SHA256 e29376e3f8cbbb2e10a701c689430ee439da8d21aadc34b911a3ef88ce580f68
MD5 32ed114a2370e4fc60047d0c2c09947c
SHA1 2ef10a3f460c28e7e38545cbf55c5ddc4974d795
SHA512 44477631f8707b3b0eb41f8821a8ea14fc77ebf990277a47eb5a816ef2a0d6b8dda0867c7e9bf4c8c0edf767cda42896f28ea21388720daba415e05c8222a312
TLSH
T1A251E84C1C736B67CDEC11B348F52801333668CD076D0E0B9ACC86B828832643EADB26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d864f7e2-3df7-400a-972a-26ff447d73c6\index-dir\the-real-index
Size 2KB
SHA256 09a3551037dbd0f5e8effda1dec684404fed3b9f19c594985c58a3270c574890
MD5 9fd7c1e5f4e7a94df96b1c402be8d2de
SHA1 82f224ecd0a1fdce6321a1a5960730589aa4037c
SHA512 d46bce236878102e4a9570a851c2b073ca6be3170e9373db286017a5d9bbc736ba7c1a4d50d07573ca9278ae19e4308f210662ade73ef085fdf680d913117eee
TLSH
T18A41935C5C8A8F27CA6D10F19CB9143A333588FE1A99470B38BD5A396D4B26129D322C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e48f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d864f7e2-3df7-400a-972a-26ff447d73c6\index-dir\the-real-index~RFe58e48f.TMP
Size 2KB
SHA256 8645f9ed7b7cc8f28de88e6a599efe2b6fbc5cd5c69bd7f9a24c7104e9b7745b
MD5 79f9b9b8cbf45dd4bc1d37e0413fe0a7
SHA1 19672500b044ef2c79ee7610567b3d686227f767
SHA512 a8bde2978bef8ee3e465410f7eaf750277cc7f01321a6fb5f6fdb504affc47726e455dc64e3b7e4a3b466256fb3f0c19e9ba23d300c1d372ebcdcdfa4fe09176
TLSH
T1AD41EB5A5D464E13CD7180B299CD146D333EE8950A449B0F34FCCA33ACD76B93D52254
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 474B
SHA256 a37ac293a7cc754d080fc33323fa2a5cb9506e3d35225bbf0c8c690e1b88958c
MD5 8afac54edc9245172691776fb864c44b
SHA1 fe5f6721aa90b0fb8a7613cea7fc7e6d44f65d31
SHA512 1235e6e51924c4f200407ff21043bb97f70fa654d0535affe7d5d992a0509fb7cfbd1f8b9288cd3349eb63d11583d2a8d7193fe405e8c18133908b75b0e9d8b2
TLSH
T142F027B73EFB1904BE9F93D928B1106500013C24D945ECAF6167A39790B1319348AD63
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 8bc100fc2db7aee62730fbd4aedbf983c705b79ffe536f6af62c821f3385d7cc
MD5 cfaeb75ce80fb023451b521865ba028e
SHA1 d4ed4588786df01cf22d04710a6ff7beb9812006
SHA512 0dd970c9a6629dd25ca1706ef67fe52d31f2fed102c2d98a68c28c8f6676e9175722d8a05bc29d7945627c471293a09295cd7b65ab49d9c5ad2658b293bff1bb
TLSH
T1EDB0110280083082C0A803BA20C282A022282820A22F2B8002E0A828AABBA00830B202
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59765f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59765f.TMP
Size 48B
SHA256 3af290eb819a57cc49d38c7365784ef213754f4803d9c4772be2c410a7467214
MD5 fffccf644b7ea5c39c0d883f238bf2ae
SHA1 b6a339cffed37141625e1287e19207568f600b0e
SHA512 9abb02916fc98cc60a6acbdabd18c135941b305e877c898aad14109fcf8ecd884e304e315a574fe8aa76f3598822ea0639d7437a01bc43736a7ce74ca7e152bb
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 7d2a08b4bb565d911767f6da6d9114a450ff38347a98224b18c7933f7b9664c5
MD5 20d5639638e2049bd329da8271bbb0ee
SHA1 8892ef37ea040924fc760316a5810dc787a0a185
SHA512 9d95b832883e9c1f4f9bc97288cda7e7b8ceaf423416523fa5625fcc0c43c02364c6a475faef8032b54f19168af0ee419c598e2d7c294fb28dcfe79fca8e3045
SSDEEP 192:+HhOVXSe5i+EkETc3+uWvwAn+mPoOTR7uVhrx9aVYh5D+wHMT7glRZVrd9th/qnb:+BOVglYXrbtZqRvJlLh
TLSH
T15DB25F11757B03C03A7E294E9595B46E62C270A33098B42B7BB944A64F6BF20CDFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.5\data.txt
Size 145KB
SHA256 8a4065abfc1647d1c28b75bf085aa56548564259e7397c4c69ac8897fe32dfe8
MD5 b0b20dbce9a6cb67e97955ab73f93e88
SHA1 0e7127af885c382f161187e7a024e807022ff099
SHA512 68530316e481625d6a5760791bde390e953fc3ee244211889d05148f54740335b096a2e0000c329a53e5c1be0dc9e5054146158d12dc72946c43508b66abdf4a
SSDEEP 3072:gPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYElKb5ZPa:sX1aI5aZoKzMJ07NeZPa
TLSH
T194E3F120CDC51FE8CFAC252CA0BE0F0963D1C65DC42A668AD773FD4AAF9790496275C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 7dad96e5b326f7e9653fe0e6d819e131e8041b46f742e2a0785a3bdb64d94872
MD5 4b2066af9c2b24f9ea29d98599338efd
SHA1 484f2280970fc0191881461f5e9f7f2be9fefea3
SHA512 a0189a52c5aa969a8444dc7d8baaa61cd9291b94fb526a3d2ff4041e92c63094cb52510489d9aec0dc04d1e02bc55ca37763b2b4da8bcc8c8e394b847d055eea
SSDEEP 768:uTFayv3MwgTil8Y10tGF3mo1ti4XDyeI0:uAyv3080tsmoXZX
TLSH
T1DEC24B31EC98D9ABEDE69FCAA709BA07DEE00197D58C4AD4D9E81D0D10971DD230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 8f56830deb64dd758fb7ab3638b5d407a31dac66e8e0e5d1d0baae8ec433d187
MD5 0158eb692d2022db67c2c8937b4b0b07
SHA1 8705b1e2ac0d3497b6b8c8e6083eb8c62eef1d43
SHA512 aedb972b9a64809a54ebb2bd960d26b67b717efcc9fe52cb3d6c8e09021ac729430b8c496c1c150922341dbb66b07fa1ec27a72f96e40076e6073f97ea223006
SSDEEP 384:nNiFrcXqnr6sNh8TUNTUlI4xsTNihe2u8I8vfDYw0H0tGZ0Ttr8OlQTWTxrN1k+l:EFzuewgLi4GdY10tGcl86pf
TLSH
T193E2B4F598D78976E99E4B87A33D6E029EFCD153B5884984BBD45D0CCC821BFD30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 851f561afc0396f0fa128b684e5833c64507bdaf65cbfc3927e6b0a931f0de39
MD5 dbe53c0794162b080a4a788040871156
SHA1 e7b54cadbf6eef8ee12efe1fd3a154dbd2875466
SHA512 90670856b7b4773d6e0b8889769d4b9e94f03b9be2fb94db208265c95357a42d919fb6123e213299cc6902d1a9d9a14cece17028fef826b2f3506b4f45ec5045
SSDEEP 384:nniFavqMg3sNN8TUNTUlIm2RihByzZ8vfDYw0H0tGZ0bn8S7o1dKuiNeXHrN1k+5:iFayv3uwgTiIeY10tGE8mo1ti4XDyeI0
TLSH
T169C24B31E898D9A7EDE69F9AA709BA03DEE01297C5CC4AD4D9E81D1D10C71DD230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b0a30fbc44278430fd13ccb9570e907dcb71a046bf2a77f4d5c456080845bd17
MD5 d2e42b6e0ad304d6a3225cb5a7001c5a
SHA1 6abf83748b3ef4af7dcd1c9dd8386088403b1d2e
SHA512 8afba3c15fc4ec74e168c77aac537046c8e3548fc2729e79247d42afc9b4c02294c40893562c17e143e8cb1728cb83eccb96b51a4895797c1bd3d000aa1fd471
SSDEEP 384:nliFrcXqnjsNh8TUNTUlI4x7RiheMJpt28vfDYw0H0tGZ0dn8OlQTWTxrN1k+rvx:sFzjewgAi4utvY10tGY86pf
TLSH
T131C23A76E898DDABEDE64F8AA35A7603EFE011A3C58C49D4D9D86E1C00875DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 03fc04fde20cc22f10368b7a5f8da0ea5f8c2792666e070522d2283744e9392e
MD5 395f99cfd27b1c93ae7e5356f31e64aa
SHA1 976a2038a3313a1995caec987d0fd24a67f72934
SHA512 14cc6607a3b178a359fcba5246a2238f44de800464229313bda4efcaf169a7558bd97de4ee25cca570034e3be0b9af5df4ce4c19703402dece5b95c5a0ffc823
SSDEEP 384:n/iFrcXqnjsNh8TUNTUlI4x7RihWJkc8vfDYw0H0tGZ0dn8OlQTWTxrN1k+rvI+l:KFzjewgAiLJY10tGY86pf
TLSH
T1D4C23A76E898DDABEDE64F8AA34A7603EFE011A3C59C4DD4D9D86E1C00875DD130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\crs.pb
Size 233KB
SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
MD5 8265ec43991e2a046a7c7de702678282
SHA1 84b3ab55cfe6ee24909c74000a875c3d4118b450
SHA512 21c4cd80df8abc08db43ce9c2663cebf2ecf9a9e3c6276cc5280b8a3cea5ef5ffbd25bcabb9fd53b8ca2dd8bc6eea760c4692c47ebc8a1df21097a130bcff422
SSDEEP 6144:KKiD4b7BVpsrYRVW+J2i/P66k88yST+uUM:KBo9VpsrK2GeQY
TLSH
T11634AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\ct_config.pb
Size 16KB
SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
MD5 442440bc4c725cf395df7410e58d9653
SHA1 3d387b0a60fa20c9c4a22d5e8f6ed5f6ec8d1520
SHA512 28879ff61c3933068bc4212bfd9da3956971fe6e45f5a8379910328899acfb489353afa41b67e1c961d95534aee7f2c004ae04ea92286b43491595a7aad63252
SSDEEP 384:btomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:bl5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T15672D9BFA1169F000383E558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A967B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
MD5 d05686bdc79220049deee3d07b28c41b
SHA1 d59bd95593290a239f6d4538ed1674d1541c4017
SHA512 78163f8efa0bf534325087b08f31ce488bfdcf154b79ef6c53ea41c648b9f11bfef13de21a2233b89a4a6d89e45fdc9e261f780a568be9599b8e50571f1458bc
SSDEEP 96:rxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:21IDCrBnYQ5jlMacFwn2c9w
TLSH
T1302204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e401f77550745c6eb3a8148e0d974411eb6f6e69f899d59dd83c674ac9d61559
MD5 8753f58640b38f64ea347b08e15b35d2
SHA1 c93e19844d0c0dc29333fa5e85bf6fb6e9c84ccb
SHA512 14f960a33d32fd46cfb93998c4fab544df3845e185a9a21a749011b46be6808d3f9fde50ec1e50981a44d0a92a1fb79429aad1aca0876e4fb5c0f7047e38c2dd
TLSH
T164E00202530014FDD02C03318087177033E2D02402F2131A6E0001731C131801F34F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1e1032d7545892bc1b33c1c8d95ab1266458182b03b41ba1a0d38ce16ff32347
MD5 36f3dbab0ff9821927890a580837a5ca
SHA1 8af75bdc077762d00834efca0a0ef49b53a54228
SHA512 d8d8d2e15fead8bf7cc46bbed72a8b39032bcd9539f33e4c99d40151bacc2f6dbd972f457c0323387130d5dfd630908570d9991fa946f3da7851c35ebd55c4ce
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe590eea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe590eea.TMP
Size 392B
SHA256 beb4ce2b4542b4b13a525d61197ecc633fa8e0ad4703087895dae930fe23bf2b
MD5 87b906c39833dc6bfb6296ab558d3104
SHA1 018155daa75092272fe098dacc6d41c2bd469496
SHA512 d184d80478eef6ef6a489fce3baa6a409c142f4b08b22c9a712fceb45fb14bbff59165f4f2030465bdc237c9d5dc342bd2ec4c953ed0a723d1068d51f72e9a23
MD5 SHA1 SHA512

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
Size 1.6MB
SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
MD5 acc4a11e2e7ba213daa0f5e73300f694
SHA1 979463888ec0a9931499a9b1bf6cdedd9bee0872
SHA512 cd81ae9130a4df9ff95932ab57a6f8410aaf6fc0df0979f0d54c2d8332f0c15dc860d0e59d3d6b32e2b14c47a89179c79f935f75498634fe7cb904f3374db907
SSDEEP 12288:1Po6kw86Bm53N/m9hb0dleifKXYXHX0Wi5QIQ6E7JOPo1oQSc9paunY:1PZq9+9hbHifKXYXHX0WwQIw7VSj
TLSH
T1C985B5F9DFC00194DAB8112D20BE71D8081412A540E5EFEAFE7C855F2BC6AC977E49E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 06e8e941bc9c8ca54c7669c1f33477f6f0e37a2ece8de730defcff5b6d48379f
MD5 3344ac4f10eb68e15fde08feec1e449a
SHA1 f52c39ed9aa04c24b3288ec9c087bcf6c77c4788
SHA512 7f272256ec53ec2b428016e24f48311ca7ee770df19e2292ecc4e587d86989f7fcef61518e1a60245b4fd2d47f07fdb5b203b02a632231a33bdaf75ae4b17efd
TLSH
T1504161E14C3D2AD1D4BD0A6FA85B38FC90E8C72AF4A4303D2864EA98433960E644443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e0ebebcd57b740d11df8d87e4eb7b528205c3eb069df2f14c23956d2587c87e8
MD5 5040dc476686b4b043d668efd6fba327
SHA1 8017014a5d3532633099964fd688fccff514f89b
SHA512 c1a85ef0272cc2dd29b09cbe7947cf20e2a2a67abf6be1cdf34bccf6748687381afb2670d3142ad70cccda2513b0b0746fca3f0d60c484a6d7e80f03910603d8
TLSH
T16C4140E15D3C1AD1D4BD0E6FB49B38FCC1E8C72AF9A4313D6814EA880A3965E658443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 b93c3edcf15a7a4d6e8aeeb4e0421bf9cb8fb114b3385fee5c7f9d96126557cd
MD5 57d2e3eb0048deb027c02104f5ca8bc0
SHA1 d5ec94fa1ab32784ddf5a29a9b38aabab9266c2c
SHA512 88c97d9985d099e0269ae98079d446a0121c4a73495baf0ea2cc2af857d3de6fc940730faa8817e5751643aa2eb297e18315a045b9b9f5ea68980e2d3b945ac1
TLSH
T10F412FE15C3E2AD1D4FE0A6E64A738FC95D8C72AF4B4707D6864DE98073960E644443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 c58cd649ee95c481a176b1797b02e49a6610318ef5c873551fae7e301fd8e4c2
MD5 f9d338be6fa725ed357da0bfdf3c9c32
SHA1 c88f3e893de895d7cb116ea662874f4bfd406e07
SHA512 740d23902b157c93fe42d6ccce83760e5c92f60e3975313557b34d969e9d36cce6e242c942e9de81cc0b7e0c629e85ef1bc10cff50a2e9aa565ce99730582efe
TLSH
T1894153E15C3D2AD1D4BD0A6F785738FC95DCC72AF8A4303D2864E988077960E254043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 3ba42e57dd0cb05403c94224757e144a0ae72237c8b047b9b988367f319892a3
MD5 ee8a569d113c36a9eb6ffb7a9951f409
SHA1 8a23ddcb915b9160112f3f9b0c20d8c2ac99f673
SHA512 5566a53767938c8c5e8fae05b4f19ee626c0ecf8ec22ac1fe4578bf3c7be3806085e46ccc3d2eebf3e2cafc1939375fe85e71ff75cb40caa8fd86af59bf00cfc
TLSH
T144412FE15C3E2AD1D0BD0A6E74AB38FC95D8C72AF9A4703D2854D998473960E654443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7e05f85d108053f6e7a0ae63b0a7d6af95985aa90d21e548c4473026222cb55a
MD5 9f5dd021a154dea78171f16c6ff5e168
SHA1 5383c9c2da8fd48fd41e57c31e885b81e6d21ec6
SHA512 276580d14b20f3ff8843c41b801042c74e04641d31016082d9a53451b05fc61a78f93e4b39bb69f8688e2fded0be90852809358c9fb4d4c1f5fc636cc5b418a3
TLSH
T1E6413DE15D3C2AD1D4BD0E6FA45B38FCC1E8C72AF5A4313D6824EA880A3954E658443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 6aebed3e26d9490f22933fc7961727f96503eae50370e8242bde76992544453e
MD5 751d99552d039f8bcdfd8d3c3689ffdb
SHA1 732cc7a82d84640b1f40088275f19cb5bfcdc43f
SHA512 e231866c582e04552f861f28a9a062b13fdab07238f8ce8dff5c91dbddde95a6d5c50fa09e562b2fb2f406a5ba69f9b4f2239bbc8ef75e0384e228d6de5adf67
TLSH
T10B4141E14C3E2AD1D4FD0E2EA49778FC95D8C32AF4B4707D5864D9880739A1E604043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 2726f1c868799995c1fc36796f57e43826a651a88eafd73d328162eb16b633e0
MD5 8d2dcd7b9a1343af2f1694f33d181891
SHA1 e7d3909c562ea60ed7e9583447b20224243b711c
SHA512 6db72f8b3ccd3b0d58a30f88dc03fb88c72f73687e0b1f52892cf0af999a9d73ecf27803986d926acf78ef954fbbd3b5117203543d0c568d4ef267d0dab8c6bd
TLSH
T1C5416FE15D781AD1D5BD0E6FA48B38FCC1ECC72AF9A4313D6814EE880A3961E648443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 5f477e65009554fb1b989a52911da3d5509b43ba7522a62a8c0d0fc444be4576
MD5 3aeea3455bae34573b010c7a93d3294d
SHA1 aae02a9ddf038f892eeaa42a4b6b35f4beab258a
SHA512 ac527e1f639a3db57142f9ed0309a3c9d6ff2ecafb3a75aed95b504dadcc1e7e11b3a690e2efdb49e44543b087730051bd03f129bb3216e0902aa67035bc415d
TLSH
T1D04161E15D3D2AD1D4BE0EAFA45B38FCC1E8C32AF5A4313D6814EE88063950E658443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7e7818570a6bc4b431bc2b549672d4c9871ea1fefeecf998a33d23c4d6355f74
MD5 ce1dddf5f5ce4c1690b48ed0e61d96b4
SHA1 9eab3d11f66cb2490b3539e3e3b3b0c366ba217c
SHA512 7d93d6499b4d1c1dce6f8d9bdb02de2bbb424e123787340176ecaac083b0d5caeee23bee6daf98288539335f75e6d573fa089794cde8c2e971b55670228bcfda
TLSH
T1204141E15D3D1AC1D4BE0AAF645B38FCD4E8C72AF5A4303D2854DA88463961E658443F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3859453e83e8a3cc50645a8730ba43df12f29d462dc6372ffe28b9a8e512ef50
MD5 d9ab8302080523b85f551a8866e3ffbc
SHA1 ab13fb51afe68b57d6d62ff406f6631dd72206fb
SHA512 6cbdc972fcc70afac12f782b25cf0af5f7c219d8b03e6b46eb9b5fabb4c461f10e7170151954cfb9ba2d99715f1e1dd7bb88b20d04da88807c41d2979a82842f
TLSH
T1E341F758AAFE1148B3B76E5A9BF7696E487EBC371E1BC45D00110E4E4663A04CC71B33
MD5 SHA1 SHA512 TLSH

Submit Download