hxxps://www[.]cpuid[.]com/softwares/hwmonitor[.]html

Analysis

user interaction
yes
max time kernel
150s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/05/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.cpuid.com/softwares/hwmonitor.html
Sample260502-pffftaav8p

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
676	msedge.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_187311044\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\iw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\lv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\es\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\no\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\ml\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\or\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\service_worker_bin_prod.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_1747270060\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\ka\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\ur\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\hy\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_704688687\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_704688687\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_187311044\v1FieldTypes.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\sw\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\ne\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\fi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\mk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\de\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\af\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_106370525\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\offscreendocument.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\hr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\ko\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\th\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\tr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_1747270060\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\my\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\bn\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\gl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\be\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\vi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\sv\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\hu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\ja\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_1747270060\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_704688687\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_187311044\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_106370525\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\eu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\lo\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\kk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\en\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\am\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\sl\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\bg\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\te\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\sk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\as\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\it\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\ta\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\page_embed_script.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\el\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping676_2135948323\_locales\cs\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3884	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134221978087390874"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-914486190-3969805341-592249730-1000\{A832061F-D3D7-40E4-9111-B326BDF1B370}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
888	msedge.exe
888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 35 IoCs

pid	Process
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe
676	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 676 wrote to memory of 2648	676	msedge.exe	89
PID 676 wrote to memory of 3884	676	msedge.exe	90
PID 676 wrote to memory of 944	676	msedge.exe	91
PID 676 wrote to memory of 944	676	msedge.exe	91
PID 676 wrote to memory of 944	676	msedge.exe	91
PID 676 wrote to memory of 2076	676	msedge.exe	92
PID 676 wrote to memory of 2076	676	msedge.exe	92
PID 676 wrote to memory of 2408	676	msedge.exe	93
PID 676 wrote to memory of 2408	676	msedge.exe	93
PID 676 wrote to memory of 2408	676	msedge.exe	93
PID 676 wrote to memory of 2852	676	msedge.exe	94
PID 676 wrote to memory of 2852	676	msedge.exe	94
PID 676 wrote to memory of 2852	676	msedge.exe	94
PID 676 wrote to memory of 4016	676	msedge.exe	97
PID 676 wrote to memory of 4016	676	msedge.exe	97
PID 676 wrote to memory of 4016	676	msedge.exe	97
PID 676 wrote to memory of 3652	676	msedge.exe	98
PID 676 wrote to memory of 3652	676	msedge.exe	98
PID 676 wrote to memory of 2872	676	msedge.exe	99
PID 676 wrote to memory of 2872	676	msedge.exe	99
PID 676 wrote to memory of 5284	676	msedge.exe	101
PID 676 wrote to memory of 5284	676	msedge.exe	101
PID 676 wrote to memory of 5284	676	msedge.exe	101
PID 676 wrote to memory of 3832	676	msedge.exe	102
PID 676 wrote to memory of 3832	676	msedge.exe	102
PID 676 wrote to memory of 3832	676	msedge.exe	102
PID 676 wrote to memory of 3964	676	msedge.exe	103
PID 676 wrote to memory of 5300	676	msedge.exe	106
PID 676 wrote to memory of 5300	676	msedge.exe	106
PID 676 wrote to memory of 5300	676	msedge.exe	106
PID 676 wrote to memory of 3028	676	msedge.exe	107
PID 676 wrote to memory of 3028	676	msedge.exe	107
PID 676 wrote to memory of 3028	676	msedge.exe	107
PID 676 wrote to memory of 1176	676	msedge.exe	108
PID 676 wrote to memory of 1176	676	msedge.exe	108
PID 676 wrote to memory of 1176	676	msedge.exe	108
PID 676 wrote to memory of 636	676	msedge.exe	117
PID 676 wrote to memory of 976	676	msedge.exe	118
PID 676 wrote to memory of 636	676	msedge.exe	117
PID 676 wrote to memory of 976	676	msedge.exe	118
PID 676 wrote to memory of 976	676	msedge.exe	118
PID 676 wrote to memory of 5208	676	msedge.exe	121
PID 676 wrote to memory of 5208	676	msedge.exe	121
PID 676 wrote to memory of 5208	676	msedge.exe	121
PID 676 wrote to memory of 3924	676	msedge.exe	128
PID 676 wrote to memory of 2088	676	msedge.exe	129
PID 676 wrote to memory of 2836	676	msedge.exe	130
PID 676 wrote to memory of 1092	676	msedge.exe	131
PID 676 wrote to memory of 1092	676	msedge.exe	131
PID 676 wrote to memory of 728	676	msedge.exe	132
PID 676 wrote to memory of 728	676	msedge.exe	132
PID 676 wrote to memory of 6048	676	msedge.exe	135
PID 676 wrote to memory of 6048	676	msedge.exe	135
PID 676 wrote to memory of 6048	676	msedge.exe	135
PID 676 wrote to memory of 4952	676	msedge.exe	136
PID 676 wrote to memory of 4952	676	msedge.exe	136
PID 676 wrote to memory of 4952	676	msedge.exe	136
PID 676 wrote to memory of 2488	676	msedge.exe	137
PID 676 wrote to memory of 2488	676	msedge.exe	137
PID 676 wrote to memory of 2488	676	msedge.exe	137
PID 676 wrote to memory of 5832	676	msedge.exe	138
PID 676 wrote to memory of 5832	676	msedge.exe	138
PID 676 wrote to memory of 5832	676	msedge.exe	138
PID 676 wrote to memory of 1388	676	msedge.exe	140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.cpuid.com/softwares/hwmonitor.html
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa038cc188,0x7ffa038cc194,0x7ffa038cc1a0
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,11028402532481818938,15071472650957049316,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,9183669858963983247,10124303321123477397,262144 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,10379155789625865465,4947489853545199035,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,16899789661313112253,7146989921966789554,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,14491275142429205137,15479571391536801216,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4520,i,11478767317924645136,17740217242740349472,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,1759869406556121846,16447924638616050661,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,4297666098411035473,2588276066251864494,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,2397938158017650093,10346969882343004388,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5892,i,8732938268940549749,13219442907271638784,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5952,i,17064018094148425448,16412430174529322895,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,2397938158017650093,10346969882343004388,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6588,i,8142044312379779898,10547921534615236693,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6832,i,9461491691442338127,179366467953010567,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6312,i,784200857447145116,4664435679651911184,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,8747536509234038484,906234441649378298,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6404,i,14287486957208229118,9220521239847009013,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7700,i,17788398452907656405,8428121377864407491,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7824 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7304,i,1426813375087798727,9080550854484779765,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7300,i,425736338598596156,172698530296815539,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7316,i,4772745173169910977,7224732727289126091,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7344 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,6308442572825825886,10080300358924158631,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7832 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,2545703959939533819,15993610223729456860,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=132 /prefetch:8
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5292,i,9045022690306984916,7429108487525222029,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=3656,i,5719242713369679364,3370550402297923262,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6048,i,15013497270155431668,7660942860816011700,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7700,i,4277229882530786742,12920933429769838690,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5036,i,8435024024570112643,2660505782312832222,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6916,i,1709471258307461355,2054013875078390634,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6952,i,798537206221765511,5007199602092531787,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,10482061411112779582,5455130522304285391,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6608,i,17067663887287523719,7318221390601496425,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7824,i,423929575673110484,11140967273114873799,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7512,i,16623394663897447654,3584964143396955468,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,17742474121634991279,5718738029313125952,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7372 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6120,i,16959138157939167021,18349697532920633607,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,214659596505066031,13127761890198093177,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,4206702663282388721,10390297357570814582,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=3712,i,7455975252510159881,4687892538924217062,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5940,i,3979005292220840591,9168849262965873387,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=2388,i,13682530305109010575,1537692310349365701,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=5300,i,7924390141686005717,4772425902247409410,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=3576,i,2453878651708565740,9756185492908026194,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=6232,i,14908867794040331527,170636132195190616,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7744 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=6492,i,1912208321125409050,14439122970201096793,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7504,i,10853936557294033750,8245537852612858711,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7864,i,14518344216224662320,13364811448634856463,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=5272,i,8610523806995042868,14757750419191957575,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=6648,i,3000829613710074153,5201645617420106244,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=8040 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8156,i,2621016060838748030,7880631880033142895,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:8
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,15193817944194238776,16964990254381344732,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=8284 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5216,i,7509064988439145360,2976296810636151812,262144 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8340,i,9908485741345128695,1011708484478291755,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=936,i,12956652005974868785,1711852959314350664,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8376,i,1251913128113732582,6781610247533081516,2097152 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=8260 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8060,i,16523625839967014707,10822665762251848988,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,5545789037552929509,1611244741595884293,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:8
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,2423144383365109479,1889453373467025555,524288 --field-trial-handle=2064,i,6821317947791867502,17012699875129429662,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:8
  2⤵
  PID:4952

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1096

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping676_106370525\manifest.json
Size 52B
SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
MD5 50ba36034cb8b97ce52eb941d76e9103
SHA1 a8757a3700f2af777ce5efc382010d2619f51491
SHA512 001110c3e45514a09cf6f60ca14855524e83ac15cf56776cf3005e016464dc6584b107c63842328a7c1738cc7f2154d8689f84d913b9b8199367699c3f9085aa
TLSH
T1FC900260082491171AC10E506570F8859391661A95851D1D0445154802A646CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping676_1390055307\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping676_1747270060\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping676_1747270060\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping676_187311044\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping676_704688687\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d68b8059d1fdfd8541892ccb136bddd7ec7601b55110e2cdd4c0e5ace97d9da8
MD5 531be76c0b4d3ce6131509c7d95980da
SHA1 8d06c8ade4d281ea8e43a1dd0a469db76987e5cf
SHA512 3f61844b74b97a902b9307c088590e72b7ad0e95c0f14948ae3780aa3e04b871d8e5c5cb6ca5f5fdf524ad8258178623c85c528a35deec8559c2d1d114436d1f
TLSH
T125D0C05C12B3BC35D4CB987004C13B03323ED893659187307C2234B80C0304048960C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8b1e4ba6890ec60cfe9f6942acc1937ba6fdde042b45c0a2e0b7e13ade701cfd
MD5 642961cbd4f67f82b3038bc1275d24c3
SHA1 f1df4ba11ac13409c392147b2a9da411bc9cd6eb
SHA512 4f7f98f2ebf15c98a7f379a7975f6dff1c7086a1e3cf81d3daec8c9be6212ba05fb4eefc5fa2c0486a277860dc8b2aecdded5e174409117a0736b1cd3b8443d0
TLSH
T1CCD0805C52B3BC75D4C7997045C53B47373ED493659187317C6274B90C534504D961C7
MD5 SHA1 SHA512 TLSH

Submit Download

9a676ac5-c2d6-4026-838a-e564eb95797c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a676ac5-c2d6-4026-838a-e564eb95797c.tmp
Size 35KB
SHA256 72072ed01eb4b420b61a0a7ca4699deda8cbedff1aec92d478ff1190aaf5f52a
MD5 e7fd742f9b5d78e699b8dc57e9a1e806
SHA1 999c92b5fa48c3708e785a2c868ec035f20e7792
SHA512 16f9d35297d83ae9c7a583ac932872c0164736ca74451213ea8aef1afeb0cd74b461adda9df47c27d86866a1eea4e92fd9134299bd77811243aa8e2894027d6f
SSDEEP 768:Jdc+tx27pLuL/VRWvV/gH8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyDFkLlMeNtFroD:Jdc+txWE/VRWvV/gHu1jaHDFkLO6t+M6
TLSH
T1CAF20B3B2C0CCB7E4F844E9CEC2A7E5E6EE401CB96988D5447F9885C02C66EB55171DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 c5ae96b2f57ca17e2254107c387a196ebf178fbe1c6579e4111f5028210cf528
MD5 72133e6f7a5d279d0f5a7fdc011f91e7
SHA1 91d3a58e2bc271a3355a24f32132b2c69b9936ea
SHA512 496ab2b1fc93ec841328fc403fad74542cd64f7b86a9e430738dd88b7c991ffd0b9e1ada2e60bfa482dca69b28a991b9e2bb339335884a023657659da51bad0b
TLSH
T181E02BBAC831EC371CFD071D60654785E74423872A80590F3A3C85098FB0A3A418586C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 17KB
SHA256 9d2e53d562d93c62bbaeef89b73163de07e71e1c17ee1b270cf6b6505e15c8b8
MD5 04678ffd1255ab3bf889f95571ecc42d
SHA1 679c9e7e3170860cb7a616c455d5150b2f7312be
SHA512 0f0cbd34ccd7586df275dc70c6ed08e16f767f505aa5d89b48989e51483b9999d6aede255964bc8a526bcd23a02847a57e0433decfbccb5a14b7481369c3dffc
SSDEEP 192:ryWhNQ7zKoRZCfubd9aZN9BDVOc9LxNkUiFTzg+uZnst5uId0U+xBoL8vr1cxU03:ryWhNQ7/zCPyhfF3g+uLIM0DGDcl
TLSH
T146729599779A20720A37306976EF6188B63E44379C047CE1FCAC4A941F71D2A1369EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 31KB
SHA256 5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
MD5 4514fa5a5b3d1e0b14aa32a7d068124a
SHA1 e634977bfabc20ed15fe7ed03d3876cf68834b93
SHA512 5688e1ee21dc661d8bbd6db76821b29789043f5f9528dd7ce40954e0f0cbae6d1153ab430f9ae70b31f6c8cf72247b918f84747d608c94a6147eeee80b41621c
SSDEEP 768:2Fdq5E8aIKvbTEuK4hMMyIVZXpIElYjuXy:2FI5EHPDwuKGuwsEejuC
TLSH
T1A0E2F286486D0F1ACE28B7BEFFE732D064A85272CB72CDDDD4642453DA5D5075022D47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 115KB
SHA256 85f769f3bed5129bd72b91257f77e43900de201cbf2ad42f1f229ce0789fa034
MD5 4714c8676c2ecdc94ab15dc309c8d807
SHA1 2289a4c3fdff9e1d76e85b020d258067d0845c39
SHA512 64a6d27f148bd16c52cb021d7e97fa08fea20452fdc57aaa40f388b10a7d78ae3881d891c6f98a88401abfc616615321cc1479eea022a75c8241db8b60758ea1
SSDEEP 3072:sclQEDZ1a+tz5V3lfCi7S4tj13BsY5MF1KaA0MFMbh7:dlV6+t/laiGQReY5MHK0cMb9
TLSH
T1BEB3126486D6AC219D1B410E8CA01B6D37759399BC76D3C13924EEBF6BE0C32D4B18F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 54KB
SHA256 adeb1620f0622c8f96a14fc03e1a83d3c667058c1efe62b11366cde6d956dce9
MD5 ec0b6a5b6c0ce039bdcd481c6bc62a83
SHA1 ee1a19ffd482952242ef2940ab43a95b962407e7
SHA512 b667334dfbba4f6e834a0bb234c0993b66fc2e7d220e8413a0c19ada2b6f7e1cdcd24f21cb2cf1fadc13ac0748cc651669c934cf17068e49c37c5f814ca4c400
SSDEEP 1536:vKuRKmvlp4Ryl6678juoWr5TpEC7AO6rx+4M6i6h:L0+LfQjWTEX/nio
TLSH
T169430186BABD00F189F3EDA88105655573F015444EABF3F282397DFCCB62B60076A56B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 145KB
SHA256 98d9db4cacf43a583f1c8c141956d9713ebea7b049d11fbe7cdf4ba8cd6f4db8
MD5 366707a4c8654a498f6672ad35ed6fd5
SHA1 79b2db820cb892b01c40507a21e156dbf23b6e95
SHA512 f574a500a8f60b1da206b0c9f8668347bdd6043074e7ca22a6ab033b16c9b3c3a7d3506d873efd6c354a8552f0978c0418b44e7b8d2653c926464307cf775846
SSDEEP 3072:Y9yrZNWyhfSvOzbQETkxg0cuJbb6We+exBZCvRVaMJCn0HkGcLz3G0V:FNlfnMEkncYb6WmB0vRV38EcLKg
TLSH
T18FE3127039589EF4F72316D3113066ED780E61EAC63A9904095BE41AB7D178E3FC46BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 177KB
SHA256 73ede753e899736ff8b1447b01e9afeb4db873c2c49ce4752ce09d8de798bcdd
MD5 6e8deb3a00df20a0bd21248a89e8d30a
SHA1 556fbcb2485cd9123627f7217dcd4f4939a66df0
SHA512 06fa36774ab338aec21167dcf0b75cd1b8f2a92e2738c0137a1751f30afce948d924b2385c0694a9a6add037fad43eac0f5f4925cedea8033bfb925f35905de4
SSDEEP 3072:2b/xbTMOq4HyMnpl3JHF8Xed39F0wqrSaEMOlZ/B80VgkOUJY3W1gomACqA0Ex:2b5hpfuX0xaEMOlE76hglApA0Ex
TLSH
T1DF04129CF82689530F9FC49EF348DC13A1712816605CE07C292E67D244B4DB7B7A96BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 20KB
SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
MD5 8bd8220ca4c1c9bf2756086b9cdd2737
SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
TLSH
T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 73KB
SHA256 95f0582481c517b9aaadf864034a92458e7631b7555200cb80cc98695e6ff05c
MD5 28c2e68218562469237e0de1c5c7c48b
SHA1 471ff79ca68ab4823af695d9c719e66e249cba2c
SHA512 9834825498634f65fa613ab1557c454a9ec22358bdfed19bf6e65371174e50f27bc3af822ff13b4967bc274c33818f95f5fd2b73291b149db40dc2eff3f1d2b9
SSDEEP 1536:9+BtIuGx2g9hqmCs7pV887zFOCWwS5Z9jBV/mDO+XJYwmfM/J82w5:KtVGllV8DCWH5zNiOOcwJ7o
TLSH
T1FA7312842FDCDC13EC66A4A3C54490D72BBA7E9E04B964055B01BFC787BE49DC92E1AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 22KB
SHA256 ea4f2642989ee2494483c8cfdce978e7944216d091a3e5c7c17ca67d252bf3e7
MD5 f2af52a34f5731797063ae206250b07e
SHA1 91d89159bbb1015f1246580a7e15c4c22d4dc981
SHA512 b9938df883ef4327985e23738bd995cb2844484f5f2683cabd86399583dbd21bdad6819f7ac379960b801b78e73762eee87a9f955cc22ece873f4c64d5f06115
SSDEEP 384:P4nyII/P7H/N5QFz8Rc0WhnXztAlLfdoHOTIRVcZO2JnTBklAcBuXqk:QnyR/P715QFzUNWhnXzelLfdoHkwVJ2/
TLSH
T1E8A2D032C3A3F8E276E567E4AFD3EB8013ECAD558A0038981B1411CF0D55EE91659DAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 22KB
SHA256 a98d0d4af945bf8ffa1b1c1158986d30b5204ed4f3f5f246ee45a24c1de4b276
MD5 0792a0dc91da66e261c54b80e50b7698
SHA1 72e7c4195ca1d2200d28d59b6ea647f3febe1407
SHA512 a728b4e4d128e61de91de0179c94de0d97e7705b0664945b092ef8f587f3af6c1a3b5eeb06d64ddfccf4e68ea9ed0eb44c8edc3e1957aa892cf83f8ee091cdc4
SSDEEP 384:w3LIVxO70VzWrIIGEvMT54PF7dKYLB7G8FDIua1SAs05u68LXaz0Wx8MY:w3LIVxO7iarIzQMT5CbBpFI8Ax58CY
TLSH
T156B2E19D83B65AA1A683637AC12006176F70C87858FDE3DB2873CB288055DC3738BC58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 21KB
SHA256 76bb772510b6c189f97315d7de2cdd0e669bc7a42a870d59a883831d235fd60f
MD5 aa4fe962088acec2ad7e93bb7d2338df
SHA1 148543b99d0b43a648962ceab5125dbba7d7ded9
SHA512 2bfff035f4e2991abf4dc8340a656e2acbc5612dfeed35392e1ab871c1a423cc28f8ee1934a59d8aba9c730cfd087346c3436c719f7860f07eaaa7127bd3e4b3
SSDEEP 384:pKv55X34hwPK1flApFufoE5YNvsktHR4JYuZssrfX35oOHMVeaZfzPvg2nZ:wvj34CPK1flApF8dOlh4ekseuOH2FzPJ
TLSH
T1E7A2E10209C28564A7532CDD74F4FB3AC32E031615E6850BFB4A7A75EAB501D43979DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 22KB
SHA256 6835280897581983fb91b25f4d724ad972289048929ccaccd966b1bef42921aa
MD5 86ffeb5ba99a69fefdd4ba556daf5cff
SHA1 484ed5953d0a2e3231b334f2d74b88bc3b9ffae7
SHA512 a9b8cdcb46cdc32e039217393add7742c0900824f673738d0a2715076db2e30d114478b2fbea02713943985f847df48b34f8dd2f63c1b0932458a8f431008ceb
SSDEEP 384:e/sUarwCqTDZLi6oPxz6Xxl4qj3jpzd/oO/vEEvyDjD/YhShGqL2psDQ4Qr5MdV:e/ekCqHZLi62xWhnPRvqPDYQGqZDQVU
TLSH
T163B2E10A145423A41B638CB9A8BFE7ECBB4EFDEE6B211E4320F14405E5C86A7977D4D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 64KB
SHA256 f4218c9fe1cc7af981d6f2c11a9ebc6aaf4094dd46def9e84080bc832caa7bc2
MD5 c87c18df0287a0ca0beceb7cda88f3f5
SHA1 7186deaa5e203461759d12ce00a2bc03c7c39151
SHA512 30dd11d60200d2e94fcee379cdb9cef7333bf3fca4c538e019827f4c07adea7c10ea6528f315835c53542b1bd995b44765d1e67ea6cad6f45c7993fbffa3cb71
SSDEEP 1536:fDTX7dJNl8LYrQFMAVSvOsh9iuOHlr335kDSxNjIfUFS/6:fDT7dJD8LAlYSvFiVFrHueNjYh/6
TLSH
T1985312CDB6C77B01277C4A9C97533688D06ADD34B27CB216D3E88F47708606196B4BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 21KB
SHA256 6463918226136e7b06e27647269e9b28d108fdb9418e40dce43a371db924b4b0
MD5 af72d17220d8441f5836593372376faa
SHA1 3a6dcb10a08718a44b9782cac5786ee549bc254c
SHA512 f91e1c86d0c6b23e7fedc5709dda5dc264fba9588de5cd4f6007044b416dd7a55094c2b4add47d50769597803f4a574389dc39155299b9327b7a118effb4178d
SSDEEP 384:Xb684eHwuKniWkk7PF0d0asgUxNu5asqiWs+bUNbYcg4XW6MBJp3L1xdCr:XO84eHw9nnkk7PF0Cf7ZsqzXbYhg4XW2
TLSH
T1EDA2D0E1097B98140783131FF161BC4A88B2D4C40559B0DE9DB3713782E6AF60F3636E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 59KB
SHA256 94cbfe216ff5a1acee212eacbaffddc4becd52544df9bb6f99e9487fb3244d1c
MD5 a16399ff963fcf04c2d92db4ef33f888
SHA1 625ef6037986ef4cdf3b0c5446cf17a68b4264b0
SHA512 0dc08cd3555affc0e82a1ae6e960ac857660871155ac94e30392510fafcf08be7734d995177a2690f18ef6d716f2d477aebdc5a00934ee22af0ae86dc6ba577f
SSDEEP 1536:J5aqYLLivKKznqI6Qzms7I9uhqP/VDdDcldYMh3ZuzxGA:JiLuvKKznqI6QzmEiuqHVDdYc8A
TLSH
T13A5302CD71376D96C0ADD447E3B9A41E34A252A9727C2B61B8AC0CFED8F5DC70A84364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 115KB
SHA256 249d691c030d6b25a5375e180fc7ec535ec07fee4ffb79eb8c3d6ac44e0d6441
MD5 2914607fecc78988b08fbaeb09cb1078
SHA1 3f2eedbaa731e32a0478edd55c57deabda128d89
SHA512 e63d13e495b6b6c05d6b44aa0bca9c19ff7b702ca344926a96387fb4f61a714be8b56d44b1d4e09d39d3340b1c26cef8f5019b6696c5b80f20c656dc2aa9be81
SSDEEP 3072:UzJufLEHh04+tzpklfCW7S4YrWgtoUiQF7h/33hF:UKof+tylaWGTSgo+/33T
TLSH
T1A6B31278C4ABE031D863440F84E5561E78A2835DAD63EBE2271AFD76EED0C324471977
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 28KB
SHA256 d500fb48bc4ebe2f6feb7a9480b7c79567fe69585573f7de927782957226b378
MD5 657f4668dfe98e8afa2b763caa464c14
SHA1 19785dbb1a3ec1230767612a82c09fc0236f861b
SHA512 54cf2b04b14a3a46d632338c45151ec75e15543191c174bdec3078c86ca1a31ee08a7ca494dd08f4d2518e40c1593395ea0cdc63cd167ded072357cbc4bf0aa6
SSDEEP 768:FMkMnQ4EAntDj/+RvBVkABdhLyeIomUxD2M0hiynN:+k9tmDj/+R4AXhLy/h1iIN
TLSH
T148D2F1A210BC173D3CC1D6AC29EB27529E090E6C76C24D536C9FFE1524F997567B6021
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 604KB
SHA256 9e94932743e0da5c523044415ab0bed142de7683f5dbb54165d1a73c62ae1c76
MD5 fc6551dbeb634f7bb5e3d690abef7695
SHA1 33e8c66ceaa0cce81a151ebe9a9918a36c719f03
SHA512 5050868eec0bdf7febdf2abedde4c2825b3fbdc6ffb7b4c6c3aae527cf5be70a60f57dab5b449e8586a8b9b530ef8ca966a4b11f9a5591096e9cf90596f52de0
SSDEEP 12288:1MevnpYl8hIYPdVUG+3PySyyAXGwEYRaYriSY:1NGlebkvyyAWwRaYWX
TLSH
T171D4019BEF24F27BF7E84178C451E3B6309ABF74D539381EA26166DE29B6445C4028C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000111

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000111
Size 30KB
SHA256 3370abdb1cbaa0d7b4765b24bb06407f5c3e6ba666318b5d96f72ff37e3157d7
MD5 f286e5c2b8df18b6d825b3b3b6b5a581
SHA1 3f92295099675b80300a838ade67658413bc4d25
SHA512 73a695b3c44618db3a5d090da19425314ec815e0b117a5027f5b51a1c74d1f353af5a40ce0cf5b4bcc4303ad36de26891c417f70526c2d3ba5d1d53f2ce14e46
SSDEEP 768:XVYmPaQKIxvfII28ct06guuwRUFY8Ut/zPDLYeCU3tyS5qoM:XumPBvwd8cxguHRtD5oeCU9ySBM
TLSH
T1EFD2E100DF696C2B7AE89DAB4AE8DFB07E8C405BED6A417E96B54049F1C01D084D76F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 e747782a5d6a38a99a9ebfe3ad0dc9c8273c9f92a4c5d0021522e157d169788f
MD5 b26cd8586a7cecaa701b47145cc9f39a
SHA1 b54e89b47e61085dc8224d5fde9e7622f9ec6446
SHA512 e0f7eaffb1b0af99c37e80001016f44777e077ecae76b9dbd0eaaf7eb2e7b3b9556d085e462f68740fb0a8f4e7642fdfc76789eca6bc8409310f528ed6096254
SSDEEP 192:WZziKCPaSa7Phbzzdlgoqoj05aQdTWMlKk/:WrVH/7ktTPlKQ
TLSH
T13802B924A0C058F7FBD60AF982D39C72B9316F94323BAE0769B7E57E254E786C09151C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ed0b9f80e135df8b0db7633259216a18386c11e625523a887c97e5804b8015fd
MD5 b6e76cccd0fca23c5596ae2b88f7292a
SHA1 93807f20627c74fd9bd941129291c00e90b0a317
SHA512 4b26cb8796b83861c514265ef555a39399782e27e5d4cacb333ac96a499386e0c1bfbcd5f52c4c6c8b3b8ed372a7e5897bcd7b2c4a2c169cf7e17eb7d7ca72bb
TLSH
T1A0818304929154F6FBDF093EC7E2C470EE627F6C3386BE0275BBA6BC0A9DA56C041418
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589e9c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589e9c.TMP
Size 2KB
SHA256 18d98d712e75759a3254a537afdf9235f9e76cce9b49527783313a7e9f216b12
MD5 60c15064f2845d0b5d75359c21e81511
SHA1 e0fac11b1459df2513f66ca4900e7b4d6a5b5e37
SHA512 870632b7313e1f9c8e9a54b772ba4074a85b119915b752c0458a2638cc19f8b34155264ad4fa4126122fdccddfe8aba4248e314d58f2dd2e5d62956830bcada5
TLSH
T1DD518548814194F5FBE3057CCBE1D0B4FE72B314635AFE06B2B3793DAA94B22D091464
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 31KB
SHA256 67d2e3467f71ccfe951a352a0d2e82c69b61def0af6a7f227b402a78a9397068
MD5 6a02695654f72c7409698319327d79e0
SHA1 6325eb3a807f1927613c26c1e55c7d1df5e80e1c
SHA512 74b9c18095ce8dbc88922572eed2fcdd972583dc922c23db7fbc3a7e414c9a330d6abd36a9df77d6ed6dee675832bab3543ae764bf0783955e30995ddb79f3df
SSDEEP 768:JuCn0AP0yaJao455N6/x78+kMwMA0iFGP6zexRnPlMGzGAC0ue:8AJN+xA26axVT
TLSH
T1F1E25A61B5F9120AF27B9FBBA8B617A25C7ABE452D04D81D6860621D4C31F40CD73B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 386B
SHA256 64bb8880cc283b8c8397054692593fc3ad26c3f60997477b32a44ebbba2a2c40
MD5 179485d7cdd36d074f3d1e21d71d0c55
SHA1 238323330e4d8c0478bb2997a3acc01951383e27
SHA512 db438212b3f5289d51bb7f6099a7eb14c482f703d135507e2c154be151a3b4aa888ebadb9dcdcf495f76c6e5653aece039971f9d1b7ac2dd1e5dc093ec62c396
TLSH
T1EAE09B7C44CDC19FB198149B9268FF0ADAE3764B9ACC6D895B0CC554B083540B6ED370
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.techspot.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 a6100b1adc248012776674e52b70ba31e0ed375756af7e4252abe6e732d7fc11
MD5 758faa052ea29c3a79556c2942ad59da
SHA1 ed6b33cfc43ce9e76e91897e23cc931fba495ccb
SHA512 2f8b88b74e6d309c0c7129916e46299170c54966f6b842ec1f2f7adea39df95078dda92e0043ab78d0645e51794cea8ecb2d736dcbd36c19026ffda7e8d2f30d
TLSH
T1B1D02263130130B5E9AC2EA3516FFC8FCB2B002448C2DEE810F198AC05758AC86071D0
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

adfd2a23-ea05-4310-8b19-5ae52af68546.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\adfd2a23-ea05-4310-8b19-5ae52af68546.tmp
Size 13KB
SHA256 af171ae4f4289ae6c862c3c6300bb54bf0847f470dea6182108852e8f2a3907e
MD5 ba177376f83a44a83d935a02b9cfcf23
SHA1 2f48079cb68b412a49531789e4728b846bcccd7b
SHA512 d20d5a70c2e54c1892416c0a0f4a49fa68482c4bb648094be6b16799c53c48c778a7945f96bf8811453d130a8cd4e8341ebad4d82dfecdddcc756ab9f9d5d0e8
SSDEEP 384:DEri6XDJseS76KJfQJwXyHPe5GjZdxIGGM/ipUyrUwIN+NMd/nNn5yX3ADD+eyRo:sUC4FPrNu1C4/FP
TLSH
T1B95292F7C3FC852DC92652F0AA28AE1FCD5D1924931C3D2989D59F4B93E1031D246A6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 24KB
SHA256 a699080e58e21ad124f2dd9ac0512250fde068d7a7f28e5e6cebffe2afed9531
MD5 6805706a5029a306ddc25b5306c9ec1e
SHA1 6ff7c7a37434ff2d4c775c49e4a5bdca9562d8c3
SHA512 ea7e63a91bf395c6d184fe759235635d844f7ac221b420eebc09047dd59c2d65523e35f79acd5d901437fb4b6992e50556a7dbdec9d2d5e1e148760bd757b895
SSDEEP 384:sxZaeysm4//fTsoP+zc9NmtiHbPzXrMgJcTfiOcTG3/mVlrgRXs+I46yyUh17in:svjm4//fXPzNrHbLYgJcj8+qr6sbK3E
TLSH
T133B2D7936534497B8CDAD625F421FF26D7E84423DA904EC9A6FCC90C04DAAFD2612C6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 1ddf7a0d879714ab8205d168e8ac1316757f557d3231f6cef69ec9423c211a44
MD5 179f29a0433e6db4f24afe8851e93891
SHA1 a0250e8f7fd692ecc929e3ded495a0a847bbfe78
SHA512 2a073f3d542cd4f16529eda44756c5028bb9b17cc355a0c81468758790371f194c8e3f6822c627e2d876e23f34b417ae05b25c556bf9f9c01eb92eef5f851a46
SSDEEP 384:sxZNn5juP//fTsoP+zc9LpN/HbDLXrMgJcTfiOcTG3/mVlrgRjs+I4t:sF5w//fXPzLjHbHYgJcj8+qr8sba
TLSH
T176A2E797A534197B8DDBC225F445FB27D7B84023D6904EC9A6FCCA0C04EAAED6212C5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 bded3073f87100ff5511e34dadda168b23271a334bac00857cb56ba43aab78a1
MD5 702346dec48d1d06047a33169d7d34b7
SHA1 060738af0c48371735f7383647d554ebda7a7b91
SHA512 b8ad9fadfe7ba0929528fd230c429c97128375ece7c12dab878f27c8566d9f386489e0d61daf0a2b3872b47bf9f9cc96bc5e7b7ee66c46fca0e42ddfe0f7c4e8
SSDEEP 384:sxZxjM//fTshV3rf9c7rHbn2/r2Apfs6s+jQ:sJo//fyVZcXHbsKApHsF
TLSH
T1B572D6666A38597B8CDBD219F544FF67C7F5446392904E88AAFCCA0C04D7AED211382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 8e0462a1a03fbe4825390c08e6344b34a720bfca30cef4320b94fa764157090f
MD5 6275162cd95071fed21ade91ab081f78
SHA1 5d4a4657391bfbb66ca39b7919fe53ffe3eee897
SHA512 bb7687223b04c336021c21faf450eb1c81079cff1f9985ebaedbaee52801394c0c875abc5ca3207f59123e08a4b9ede64c219cb84d14b51cdeae8160af83e523
SSDEEP 768:Jic+tx27pLuL/VRWvV/qH8F1+UoAYDCx9Tuqh0VfUC9xbog/OVyDFkLlMeNtFroj:Jic+txWE/VRWvV/qHu1jaHDFkLO6t+Xz
TLSH
T1EBF20B3B2C0CCB7E4F844E9CEC2A7E9E6EE401CB96988D5447F9885C02C66EB55171DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\91d73940-0d21-4161-b459-1da74c6e5c7d\index-dir\the-real-index
Size 72B
SHA256 df715ae479910fc32e22c47c3934d72c4e1d1dabd21fc583e8fbe5a01c822c65
MD5 630955b8ca4d079e69ab3882ad3c5a89
SHA1 4660489ca0dd0ccfff86b5e21a16dcb01f9367eb
SHA512 004f75df7277a5b379b6d84d0bbf2b532813b8d7abe0c71c8ca4c54bda58e7ae63f4f518096cebc2da5367d569184acbaf08ca7c77b721a8ee0c8bc20d8528b4
TLSH
T1B6A002901681C995C09312F5EED21642B351DDD15302234742B98148CE5964149C256F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5961dd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\91d73940-0d21-4161-b459-1da74c6e5c7d\index-dir\the-real-index~RFe5961dd.TMP
Size 72B
SHA256 be6968aa6cf5982bbb2ac946e2bd3175c192ee614f083ea712f20f8cffabf6d0
MD5 3c2e7fca20b066a280afd9892ee41a20
SHA1 e188621b3860dfdbcda4a133adc2f2e90d40d6f2
SHA512 a4c47a64baf33e6bace343a1afb758cf6807df6de41e0d28022b51699824babe0322e721c553fca30bbb427cb23661d81ac7092de44534f9115f1f082f9a2445
TLSH
T1ABA0027013C20206DD1311B36992424612118D615308231650B50044CC60580D57302C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9ee838dd-a441-435f-b78f-4a16a5581428\index-dir\the-real-index
Size 3KB
SHA256 12f2913d663de7adc441e8f16f661f634d2ac16b4136142e59615eb6a631fe50
MD5 cd59a915e8e0dccd23e7d2d13275f350
SHA1 98e48ce97f763d1b945b8dc4360feee70e2b78cb
SHA512 3f1eff6b99fe648969845b4d8b555b62141c2e8cb84059578c4d2a147dc767c2ab67b71e721f1e62acf8ebc87b4dc7bb0697d58411dc6a0037efbe4b163e3ea4
TLSH
T16951B7CC4D4B5AA6CD7C49B259B1009133780ACD6AB4AA031C6C6676B5CB23E1E4BA09
MD5 SHA1 SHA512 TLSH

Submit Download

4f2277ea2139c475_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5c3c74d-341c-48de-ac10-3ec789c3eec5\4f2277ea2139c475_0
Size 65KB
SHA256 82bbcead87bd73d7d352cc5533243f9fa067e5e613c96b7ec97c1924bae2e24f
MD5 df548b02f23a763cfa7449ebc86ed206
SHA1 fea3f34610c7117c014663f1ae35f06f22aff892
SHA512 8efba4ee1f472d337b47de3c3ac54e836d4f1442078239365b3c1c228970d8fd6c7429e81a4d3f4fd77950291840f897e0a186dbed8ce9993d9b84712a0e105c
SSDEEP 1536:cUTi+Fk+X6kDjWj+IYs/b23ehz5CGmNH1Zokf7+UWv7HPwqpzkJ/Nv9:cqFvbETYs/hzUGmdqu/3
TLSH
T167632A97B062603587AD21EA64673B00F52B17563548C9E8F0BC69913F18E8B6377BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5c3c74d-341c-48de-ac10-3ec789c3eec5\index-dir\the-real-index
Size 72B
SHA256 7fd710a02a04520b5baf7dac7c875bf359cd8c25419aeb21fde9268191e4dc33
MD5 85e50a24b88c3834889a45d3fd8984c6
SHA1 6610909ea62e5e94357eebc50f7bd2444270f4aa
SHA512 b240227a227f7708e91437abfbdb83f0296fa8ff561d32fb9d8f4cad0a5b95339f26fa7c43dbd38e41b062e63db8ea21b2fd77e57a60f08f385a170eed5f1031
TLSH
T1D4A00220995D0569C00106F655830F5033B4EC999205574BC0908467CC5616C5E41044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5c3c74d-341c-48de-ac10-3ec789c3eec5\index-dir\the-real-index
Size 72B
SHA256 d7f58a0d439353a3be200594bb95ff3ccdd423e02fff153a5c8a684f576b4b59
MD5 c616ed41e523543d8ddf1fc85a325011
SHA1 813a7662effdf2126f74ba27143bce2e6fb0a4c0
SHA512 bbd11d36f1f1ab322476dde108f6606697f64a02d847a3c930ac673f0e06e7ffb6eb53a7fe3d624a94abfa5098347b5f5795e8d226106016b3771a0028692a7a
TLSH
T1BDA002310195A959C02246B4554606B123A5DC552145C36F45D014D58C65159DD120C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595a0d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5c3c74d-341c-48de-ac10-3ec789c3eec5\index-dir\the-real-index~RFe595a0d.TMP
Size 72B
SHA256 7cc9b2e1473504e14db0402c84419bc88701bdfe2dd01bf2018a5c90a2b44833
MD5 ee53d0dcc9d79d40ca7d2ec4ecf3bb19
SHA1 f94421070f03e95b1049409e095170d9234f06fb
SHA512 9814308d1f7751bd579c98dc89c7725502019b7618749f3b93ec2c4948c54770385d825d4f3af09300bfe5c1daa272c0abb70c47e39ce75f9d62ca2747e2cf0f
TLSH
T173A00234565603D4D0004570D90142546344DD22160B9B4776B104758C668584572050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc84f0c0-b039-4eae-b495-76fa96508a9d\index-dir\the-real-index
Size 72B
SHA256 cbb4262be629011e0e45f53f791f2527f1853dd5d4cc6bac8e32dcdc1910c6d5
MD5 aca02726171c158413607d837153f627
SHA1 40a8785a02c901595358b54de5bcbe8674b5560a
SHA512 5d21b2baa9b9ef298917e09b2e4d7f7b789ea67a47c083766d749139eb5f8e00a43a5a0c28e104def372e522cd0e542f592275608a0be70a889d637ad3874015
TLSH
T1DAA0021B16804662E05563B414D51654B39C4C12265153459191B8C4DD54640D1471ED
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc84f0c0-b039-4eae-b495-76fa96508a9d\index-dir\the-real-index
Size 72B
SHA256 065c8f7d4e18a408d735449bb09a8b03f3bc70f3a6e2795ca5850d4718170bee
MD5 ca7aeb8965bf01176f5a1d5e5f64cd1b
SHA1 52ea2870339b454ad4f76689d3350df8d1ad7b87
SHA512 32443f924fb141702806bbaaaaa0a1e6909f05f67a0860158348f7dfebfdad01315596fb65e5e9c81fbd397c97d6fd99f30d0ac1d280e0ea0d1d6f0d289eae10
TLSH
T13FA0022C22801323C11403705895158422154FA26612536D499000F4DDB4140C14326C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595f4d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cc84f0c0-b039-4eae-b495-76fa96508a9d\index-dir\the-real-index~RFe595f4d.TMP
Size 72B
SHA256 88075793baa948e545919c3319b1e61f8c110051bdd33aa983e7585176c22b32
MD5 8f13153c5fc8a1ec90af7e8d19da6d51
SHA1 6803ad64f398def8cf018a7645c27b8b1391a28e
SHA512 2e9c487d940ba7a18ed04f3cf86861798185bd8804402de2d2fb46fc3e79c7ddfd0e997946c27468d80fad92eb2454b11baa393916d28496d6a57820d8bee013
TLSH
T1DBA002148A48D501D04211F06683474852A88A6065131342E2E4A9B5DE620567552425
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 3d797c57c7046902e371f1eda2d88b236a15a15e148203d479c2cb6e0bdcee42
MD5 413ff17e7af6f96c0e9bd99f94d2c6a6
SHA1 4e1b0bce505332ab83f887b295b726c46cb73b99
SHA512 f98c6bd5375dbce821e6fa5e4c10299c4027da9bc5bcc9075700d908adae5ec9db6a9f02fcf5f30f74e28c6c1977f8b5c74c28d6bb0fa4885cfeb45fc0c1e915
TLSH
T1B0F05CB73DF31D10FDFBD3DA247144B00969B844C994EC8F142695D3A461314108DC77
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e1928a0d356fa4fc83eeb7ba02580afd0c36cda5329ec685666a769fdd7f2813
MD5 fdccc53dab1dd4eb8ad9ef4a314b03dc
SHA1 01012b48519837ed82108a2bcf842138ec992546
SHA512 ce1baeb88cb95797e1d13d6a7565435f85b9b000e99ae0b136c2fe9fbbcf0b610290cc452e2c2fab3d9a757427b3f4ecbc1d0b9ba2b87a38e446dad5c9693b9f
TLSH
T1C9A002E79B7FD4A1C70006B930A765803374CC9911662A5258ECA4AD9D9915199C2182
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 6f0462646c02084344ee9a13c154f5a261e67754b5da5255586f5c86965f08a2
MD5 f78aa14a4c1d40824a05f7739ac778b7
SHA1 967239d6d47945701e04d75501fe9ad38236cba1
SHA512 6af26ef690320c4c984bc84af90afd43481e6425e2e3c234f4213f35f4b46d7b1c2b13215f3aeafe2a17b39a73c2d78c77a6c1e3ae74506e50697418107c58b1
SSDEEP 384:SXEpUTaFkzG/T1ddEtgjzzLlRQbz4BD30LK4xfoBv:SXEpUTaFkzG/T1ddEtgjzzLlRQbz4BD7
TLSH
T12EB25910313B06803A7E699E9595B86E62C270733058A83B7BFC40A64F6BE14DDFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
Size 145KB
SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
MD5 370210ebc9e63f6f39a4185846435533
SHA1 17b63f65390d236465b6952953a7df4cbc6fce1e
SHA512 e594ebf58d19f6d9e7024f98107c738142c6cc2504a0ba89e13f8f771c6a600427e75951ccbfe105983c21b735dcde6e6e173f4da37745c4de51bb9f5e86b989
SSDEEP 3072:7PAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEI/tLZjUd6mG:LX1aI5aZoKzMJ07NI/leBG
TLSH
T105E3F1108EC41FACDFA8291C70BE0B1D63E1C79D84676585E773FE0AAFAB90462275C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 279e8e7ee63d55cf3b6f1d7308430a8f5bbdb439bf1e176d27da6a62cb958ae6
MD5 3af479c378dda6290940ef8a5c9cb9e6
SHA1 8e59451481e1163ee6b5d17bf6d94ee1cd80dd39
SHA512 6420ab3d33bc225c8ff563e21b5ffd1a73c53480f2c536c7c3426f36a0b65b1de1f12d41013312e96a3f9ca4f73631d6fb1f3f6980132e27e37cfa85788bc2eb
SSDEEP 384:nAiFavqMg3sNc8TUNTUlIm29JCSv3vfEPJl1mQRyFgIKdnS4mtmlRYrNlk+5vI+/:bFayv3rwgBcPzyF9KdS4smlyz
TLSH
T183C24C75EC58CEBBEDE78FD9A7497A07EEE04197998C4AD8C9D82D0E009719D1307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ed4c3a0f4036b71bca86caef4c3c3220f0fb5376dbaa566efd4ed82ae2d7d07a
MD5 a98782f47d8596c4bfb5220139c7adbf
SHA1 42289a2e7b9986b6628a251607725711e0930a0c
SHA512 5a5e804d739bed1ddfad6d59f97299275b9a173ae2a81ddd4d07877f75c815b5c1e6f9fbb01c30259b11e79c25c9a6a679ff0d360437e06685927f9cd745025a
SSDEEP 384:nXiFacXqnJ3sNVP8TUNTUlI449J89T3vfEPJl1mQRyFgld5tglx53MqrNlk+5vIq:SFYJ3oPwgygPzyFm8lrRB
TLSH
T108C24A71E898DEABEDE68FD9B30E7A43AFE051A7858C49D4D9C85D0C00D759D1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 b25dad994982fcea07654a0ace703285d0f6def2120aeff416979628ac45c902
MD5 11f2a9be369c4e9753c9feacb66da789
SHA1 f8e472c0edf0d9b9e03edf14f743545b736500ba
SHA512 44844c2e72d6f7b166d3a66b15a63404f43f2f99ff9072dbe6f1aa11ada7b3a9b87c70d3932436e762ecfdc3cb41b3e394aaa41f2f1f18560ace1068bf4e2c35
SSDEEP 384:nXiFscXqn7sNVP8TUNTUlI449J29T3vfEPJl1mQRyFgld5tGlx53MqrNlk+5vI+d:SFu7oPwg8gPzyFm6lrRB
TLSH
T136C24A71E898DEABEDE78FC9B30E7A43AFE051A7858C4AD4D9C85D0C009759D1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 f72dc00d9d6eb9f1ce5b0f9461bb57cb0bd353720161223ff926dbda8a8b0988
MD5 ab641521b0798723d72bf100327fb95a
SHA1 0764e0280e9a610b4d6436e12ededbf532db40e4
SHA512 fa17a31703324742142f85a99f10bba3f612c7452ac06be07f9b9739492729973a99ddf3104e76fc0d982990612fe487d29830879db39cafbafd8acb3b13de2b
SSDEEP 384:nmiFavqMA3sNVP8TUNTUlI4M9JdcT3vfEPJl1mQRyFgld5tXlLrNlk+5vI+2:NFayD3oPwgagPzyFmTlXq
TLSH
T149B22A71E858DEABEDE68F99B70D7A03DEE041A7898C4AD8DAD81E0D00D71DD1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 69f5e9352deb56e7e695410962f1934bd18fec6febe58fb9231bbb8cf5f0e974
MD5 ff26ac197e6883d7f911a659b3e9e007
SHA1 21b49a83737dbac135f2a326371a57a311e27aac
SHA512 5d5e18a3cbb6d39cabaa202bf11497969d11116e9a02626d23a84358da3b024298545f62dca5abac46b6301037ab589855d08d74d0975fb8f457ee61c2d3f7dd
SSDEEP 384:nmiFrcXqnb3sNVP8TUNTUlI4M9JMcT3vfEPJl1mQRyFgld5tglx53MqrNlk+5vIq:NFzb3oPwgvgPzyFm8lrRB
TLSH
T1C0C24A71E898DEABEDE68FD9B70E7A03AFE051A7858C4AD8D9C85D0C00D759D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f6fe83e24bf8e79fe9210bc771f389e97a6638ed5535d40647e666624ff8db6a
MD5 7cb7d90d5e88bb3265c66d48f0c82f8c
SHA1 b850c41d884f7473e5b8a6a7273ebbf309953842
SHA512 922a2d4bbd9759ae63e6807f801bb79cf971f9834995f42c9b4dc6a86a8554f1db68474b0b1648e617405313ab4b24d4f8b8073009ad5e11903d1edb01b574ac
SSDEEP 384:nXiFrcXqnN3sNVP8TUNTUlI4M9J89T3vfEPJl1mQRyFgld5tglx53MqrNlk+5vIq:SFzN3oPwg+gPzyFm8lrRB
TLSH
T167C24A71E898DEABEDE68FD9B70E7A03AFE051A7858C49D4D9C85D0C00D759D1307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7cb49dbc8b362df751433045bf4652854b6eb132e53d9d28f5cdac443aa77c57
MD5 0fb8b522ec4b1610f8167321491d8b78
SHA1 d8a61197b304cafb01d330fe061ed0055d588a8c
SHA512 23ab6410609807b28bfe37898bef0e44e5de5c3b2870be3c72d7e6c78fe2e2a8b5a767ba5af3c7ef5431020d3c8bfd4d3c4343195a2d3925d3a078c54b5a31f3
SSDEEP 384:n4iFscXqnP2sNVP8TUNTUlI4FTeJlv5023wfEPJl1mQRyFgld5tslx53MqrNlk+T:DFuP2oPwgB0GPzyFmglrRB
TLSH
T193D24A72E898DD6BEDE78F89B70E7A03AFE051A7858C49D4D9C85D0C00D759D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2fabed6d80daa5d588d3601d7d2069fae904889caccce2c29f75e18adc01accf
MD5 c62030be06c4330f6edd05189abe31d9
SHA1 9f0044bd3a46826df6a00b35584e0437be776618
SHA512 c58b71208a12441c73846e386965f9e1b631e96d9307423e5234b7adf6812ea6e87e9ceed66f7c7fbab882332f0bf808195b56f1e911f049ea94144c812dd2ef
SSDEEP 384:nyiFavqMg3sNhP8TUNTUlIm29J/Ng3vfEPJl1mQRyFgld5tildnS4mtmlRYrNlkW:5Fayv3YPwgzLPzyFm2ldS4smlyz
TLSH
T167C24C75E858DDBBFDE78FD9A7497A03EEE04197998C4AD4C9D82D0E00971DD130B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0469df1880340d4e1c49bb7b74afd02c1948ad687cf5d78d097d50db83075c30
MD5 7251fc38ca7fb2423c54eb4536b6dac2
SHA1 e246f6793988ce56ea176710aad5a579058d1eb4
SHA512 22a585b8e0536c5e137d457b12254b7eb4474100b821f9db69fae431d501de32dfd27c0e2dec1cdf1219871b8ef95cb3ce0c6030eead3ae95f5b3d17b7ccc7ca
TLSH
T144E00202E30041B8C41457301043162106C3813000F407499D1405483C571306F74F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 60c1034a15df8ef956d99b076162b1722c160fad697a62681a1c032cbaa67346
MD5 0b9e226cbc7b1561e79f57fcfa3f2715
SHA1 c190468e5331e6aa251780fae263cb634e9a5238
SHA512 080e40be663c3ff083c088643090fec888f7acdedf5a44ced8502f3550c33df5bf1e7a4ab96535add885929ee3682f9714f16e0256f6b221d6a1bf4a43d65e23
TLSH
T10CE00401F3004154C41057301043171107C3C13000F4074DDD14054C3C571301F14F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5904c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5904c9.TMP
Size 392B
SHA256 3b33e2d64e0e7ddd712c436ed91701cc53eb1fd0df95901f4955361ae38c7e86
MD5 0f9038a136053fb4f260e1dd949eb1a2
SHA1 f9c1ea88031c5ffab9d1658b1ef3b98e31bb91a9
SHA512 bb16e7ad08acddebe3cfb3414931a834d437c00bd1fd34e49085090c582101c77b3177d3055282c7dd813f5484d322903dcb062af8a8a2ccee5b04638f23b347
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 250d89a0360ff60efb7e9eebb5c1fd4f041eab4dcda87a67bc8669f97f4452b8
MD5 9508516491740f0e5cd1f1ee25941e80
SHA1 6c6571233e08c0d9a7734e510d70616fcc1d9914
SHA512 77f23a8aa4802101155207531d79c881c65f7cbe4e5c89812a17e8e0607f32b641581faab3e2f570994c76d67df19cc07e5b54c5a98ac3f20fe5e9280dee2ab1
TLSH
T10E4130E15C3D1AD0D4BD0AAFB89738FC81DCD729F5A4347D2864E998073960D244043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 2711fad8d59a1e81bb276cf07979727d7a78628066b1625c994e92527b6794f0
MD5 6eedb35f62b85ec405080a212fd84fdb
SHA1 eb832a457251dc224b032b99ccb90421061c59d9
SHA512 c06fe4b870d0f0352ec8f85d3461eb4965302e439ebbe8ea53e0453bc453b063068596a4e71415a23aef3ca8f35ff0a9368341c3d7133fd21a0483f56b026166
TLSH
T1564151E15C3D1AD0D4BD0AAFB89738FC85DCC729F5A4347D28A4E998073960E288483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 fb0eee622468f15c4273fdc04888a94f77f305bc5ae5c10527813648101c1113
MD5 2f5ee645c4e46302bbe069ebc624a208
SHA1 81ff6c0911684d88f8b0cf512961601473d8a7a3
SHA512 9d061a0c341d375fc5a53515de9947d09e983dfa310ce62dda517a958aa5ddf1628faff1d4faeac8439839c8efb01d7729e6836d0da249e30b3ac27cc1948724
TLSH
T17C412CE15C3E1AD0D4BD0A6EA4A778FC81D8C32AF5A4307D2864E9980B39A0E644443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 ca0002136f1aa7f94c632bf96230963c23fdd5a6d5f15bccd8dffd4cdc0b0b62
MD5 0b60388e5e0e0ab9f2fda0705f5fde6f
SHA1 f255c872096dc37a6907292f15c15f96911da027
SHA512 7b617a3ea11b6a0cc26f408b3c61c4ae3a368190b4ade3b4d9aba3839a39893e54e256e3960dd3426c96ac3148c0539b193447d44592f6ff9e0d9dfc9d7c3f7e
TLSH
T1E4414FE05C3E2AD0D0BD0A6FB4AB78FC81DCC72AF5A4307D2854D998073960E244443F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7114841630cfc53f9c0018e9fe561e98c26a6c958ccfa87bbfd00685e31b3009
MD5 e3d122ead5172c6c3ae83d08e8b35852
SHA1 a860f3b16138ce657be20ea4315a8259fba2cd68
SHA512 03818ac8da818a584ba1dd827e28cd630063a6b1565abbd15ab69e23e2f55c8a9aa5037987bcbd8621e170570cd016bbbbbc0d8983dc2ee6c9d5bbcd0304484e
TLSH
T1F4412B68B6F91148B3B37F5A9BF6A8AE447F79672E06C45E00110D4E0A23B41C872737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/1608-35-0x00000274C8BA0000-0x00000274C8C49000-memory.dmp

Download

memory/3964-445-0x0000027788800000-0x00000277888A9000-memory.dmp

Download