hxxp://xeno[.]now | Triage™

Analysis

user interaction
yes
max time kernel
472s
max time network
474s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 22:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://xeno.now
Sample260509-12d1nadx21

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1182	discord.com
1184	discord.com
102	discord.com
103	discord.com
105	discord.com
106	discord.com
1181	discord.com

Looks up external IP address via web service 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
276	ipapi.co
274	ipapi.co
275	ipapi.co

Drops file in Program Files directory 28 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1529767943\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1529767943\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1529767943\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_980880869\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_883706745\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_233624529\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_980880869\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_980880869\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1666919796\crl-set	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1666919796\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_549767882\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_549767882\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1818351307\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1860324838\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_883706745\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_980880869\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1207980286\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1860324838\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_883706745\sets.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_233624529\automation.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_233624529\classification.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_233624529\extraction.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_233624529\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_233624529\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1818351307\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1860324838\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_883706745\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1529767943\keys.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1616	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134228381156960998"	msedge.exe

Modifies registry class 12 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2023547815-1162023398-1465618254-1000\{E99EF1F3-E08D-4C09-86BE-C456A3A791C3}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2023547815-1162023398-1465618254-1000\{CED9988C-96F0-4F95-899E-97199CAB6054}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4948	msedge.exe
4948	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 3728	2448	msedge.exe	85
PID 2448 wrote to memory of 1616	2448	msedge.exe	86
PID 2448 wrote to memory of 3972	2448	msedge.exe	87
PID 2448 wrote to memory of 3972	2448	msedge.exe	87
PID 2448 wrote to memory of 3972	2448	msedge.exe	87
PID 2448 wrote to memory of 4852	2448	msedge.exe	88
PID 2448 wrote to memory of 4852	2448	msedge.exe	88
PID 2448 wrote to memory of 768	2448	msedge.exe	89
PID 2448 wrote to memory of 768	2448	msedge.exe	89
PID 2448 wrote to memory of 768	2448	msedge.exe	89
PID 2448 wrote to memory of 4360	2448	msedge.exe	90
PID 2448 wrote to memory of 4360	2448	msedge.exe	90
PID 2448 wrote to memory of 4360	2448	msedge.exe	90
PID 2448 wrote to memory of 4504	2448	msedge.exe	91
PID 2448 wrote to memory of 4504	2448	msedge.exe	91
PID 2448 wrote to memory of 4504	2448	msedge.exe	91
PID 2448 wrote to memory of 2300	2448	msedge.exe	92
PID 2448 wrote to memory of 2300	2448	msedge.exe	92
PID 2448 wrote to memory of 2300	2448	msedge.exe	92
PID 2448 wrote to memory of 2380	2448	msedge.exe	96
PID 2448 wrote to memory of 2380	2448	msedge.exe	96
PID 2448 wrote to memory of 4392	2448	msedge.exe	97
PID 2448 wrote to memory of 4392	2448	msedge.exe	97
PID 2448 wrote to memory of 4392	2448	msedge.exe	97
PID 2448 wrote to memory of 4900	2448	msedge.exe	98
PID 2448 wrote to memory of 4900	2448	msedge.exe	98
PID 2448 wrote to memory of 672	2448	msedge.exe	100
PID 2448 wrote to memory of 672	2448	msedge.exe	100
PID 2448 wrote to memory of 672	2448	msedge.exe	100
PID 2448 wrote to memory of 2284	2448	msedge.exe	101
PID 2448 wrote to memory of 2284	2448	msedge.exe	101
PID 2448 wrote to memory of 2284	2448	msedge.exe	101
PID 2448 wrote to memory of 3300	2448	msedge.exe	103
PID 2448 wrote to memory of 3300	2448	msedge.exe	103
PID 2448 wrote to memory of 3968	2448	msedge.exe	104
PID 2448 wrote to memory of 3968	2448	msedge.exe	104
PID 2448 wrote to memory of 2344	2448	msedge.exe	106
PID 2448 wrote to memory of 1740	2448	msedge.exe	107
PID 2448 wrote to memory of 1740	2448	msedge.exe	107
PID 2448 wrote to memory of 4836	2448	msedge.exe	108
PID 2448 wrote to memory of 4836	2448	msedge.exe	108
PID 2448 wrote to memory of 3960	2448	msedge.exe	109
PID 2448 wrote to memory of 3960	2448	msedge.exe	109
PID 2448 wrote to memory of 1028	2448	msedge.exe	110
PID 2448 wrote to memory of 1028	2448	msedge.exe	110
PID 2448 wrote to memory of 3348	2448	msedge.exe	111
PID 2448 wrote to memory of 3348	2448	msedge.exe	111
PID 2448 wrote to memory of 1704	2448	msedge.exe	123
PID 2448 wrote to memory of 4416	2448	msedge.exe	124
PID 2448 wrote to memory of 4964	2448	msedge.exe	125
PID 2448 wrote to memory of 1912	2448	msedge.exe	127
PID 2448 wrote to memory of 1912	2448	msedge.exe	127
PID 2448 wrote to memory of 1912	2448	msedge.exe	127
PID 2448 wrote to memory of 3268	2448	msedge.exe	128
PID 2448 wrote to memory of 3268	2448	msedge.exe	128
PID 2448 wrote to memory of 3268	2448	msedge.exe	128
PID 2448 wrote to memory of 4292	2448	msedge.exe	129
PID 2448 wrote to memory of 4292	2448	msedge.exe	129
PID 2448 wrote to memory of 4292	2448	msedge.exe	129
PID 2448 wrote to memory of 4724	2448	msedge.exe	130
PID 2448 wrote to memory of 4724	2448	msedge.exe	130
PID 2448 wrote to memory of 4724	2448	msedge.exe	130
PID 2448 wrote to memory of 3036	2448	msedge.exe	131
PID 2448 wrote to memory of 3036	2448	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://xeno.now
1⤵
- Drops file in Program Files directory
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffb9d37c188,0x7ffb9d37c194,0x7ffb9d37c1a0
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,4186618907609873167,11067283032186111440,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,5108725553646877544,1462996918892745533,262144 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1664,i,18217823459824274225,13274358678163938956,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,13570138672231640849,3572787233607300766,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,9707348068831725440,189142006312733320,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,79002368522052048,5068834978364490748,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,5521141233063056604,1446894175340838678,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:2
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,346752217904892469,14299315645949172926,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5272,i,3542493756243560460,9026218011030140073,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,12994487885912300790,308493188101237084,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5624,i,17989415459910385412,14049010078508999429,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5636,i,10866953847997899209,12534882966924266546,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,10934571269759095654,9449879268114450985,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,1290208397557589428,9124615003574204559,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,13754085153749119993,14322814096759013219,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,13754085153749119993,14322814096759013219,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,16320816033411829307,16600167101307648455,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,12331271061696906802,3640147660909842445,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7140,i,13875525084126884816,5306623905239894088,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7144,i,16500519997564856969,9852428348003849161,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,10126423947413303377,3764791953080822566,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,6513070842516213785,3509156511144926149,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,17954650749077936168,3305443735708490471,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,7212166967106158764,9451357341956674426,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5948,i,14963665095988734136,152450183285482229,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=2796,i,5386626702448889573,16645375524267169108,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6484,i,15580670848775180920,4524264451006355394,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=4616,i,11485164867075789070,6591481620480446215,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5640,i,3076413441273657789,15605890936123646184,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=3988 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5416,i,2143670295256914444,3122901774567494201,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5352,i,10495425829754112525,15756018671649782657,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6032,i,3770555568102370726,9099821982879801552,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,991879778578415757,3655677499591301703,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,16936870899655428657,15234038694302010038,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5744,i,13336713418499664530,513848612727086249,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=5780,i,7719880380826328062,15551141453133795978,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7388,i,1817252072804726931,14861228135270702566,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7384,i,13583803828304141415,17048793767796066033,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7492,i,7735218055613456419,10687310197163718164,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=5360,i,18095433652136221861,17371794112147130789,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7548 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7580,i,17475430311329316674,16500198908745195910,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7588 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7708,i,15506887411164920819,7063529840123512299,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7720 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7604,i,17709542743128301719,554252187670790013,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7748,i,7040381494943808974,10580688169853028999,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8088,i,10832892750616125667,12921134286847008865,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=120,i,13234284268408899742,18253232669026761589,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7852,i,15385734499862852519,13197839564008157191,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=5132,i,211775447113928151,8428643903533368721,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7968,i,14613820359290640791,3828908628647237642,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7744 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7992,i,14953350904056220818,1940100583681600463,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:1
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=5280,i,11302884474981446022,7594089241878086912,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7860 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=4580,i,1462791448571019150,1680513071831420825,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=5840,i,16047047411120178986,4911012174653344361,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8044,i,14872177559592489429,14253845879923255097,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,4517076027094212486,10330452024935778765,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=7568,i,12958509460189385244,17216340255839898178,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8276,i,5799554820667017629,1533719406767028352,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8224 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7904,i,17542332281661878264,4127630308392628493,262144 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,3829555591214493572,7142847658540091549,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=7328,i,7059819588508790146,9975288528664992035,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=8184,i,1763754374747538556,15507598040252348472,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=8392,i,9536497941121307414,11550277139171389133,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8480 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=6308,i,18386878821616983669,6896579229027195419,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7328 /prefetch:1
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=8592,i,829395507372937071,8353935271350124384,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8636 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8824,i,8199122014095563275,14710149440761201398,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8908 /prefetch:8
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,4514055423641760635,15441366801351122874,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9184,i,7369562693720479092,16804815180383646123,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8968,i,9131697949982881681,1317954842708841660,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8976 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8880,i,5281169374550838727,4376928965167949472,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8896 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,9098930758434257050,10544440818934695672,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=6020,i,5998558468888049598,15977614642806209073,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8868 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,12475099549317419628,16686249451545515740,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:8
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=6464,i,16681221687874643042,16878100496707450214,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8648 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8508,i,9304907229937133612,628604815029745701,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=8924,i,6101446259342578978,9617164683407515229,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8500 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=9348,i,890109226876054640,6613212974435918747,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=9424 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9564,i,3851104091798031894,13294563048260476238,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8748 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9696,i,14190044242632427758,17289645937992160634,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=9708 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9904,i,1900730150141021157,9188184940665439553,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=9924 /prefetch:8
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=9588,i,615180854468092205,10510490002695040634,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=9932 /prefetch:1
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9816,i,7492510612955240745,10982805085644608797,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=9672 /prefetch:8
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10288,i,1755409892228864288,3572562891947786928,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=10296 /prefetch:8
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=10304,i,12917606243886638860,7057712080131762208,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=9568 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=8704,i,1574573758869298555,17394004620885713839,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8436 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9972,i,14334638404632726367,17395609495807390653,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8236 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=10028,i,9716048685609513812,471904036364650307,2097152 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9860,i,16069663259340431721,13917316615092930241,524288 --field-trial-handle=2260,i,8963805546050402961,14540626535465605010,262144 --variations-seed-version --mojo-platform-channel-handle=10764 /prefetch:8
  2⤵
  PID:6004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4536

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5052

C:\Windows\system32\werfault.exe
werfault.exe /h /shared Global\a9f85ab73bc6491b98a2b8b58cd6b9d5 /t 4764 /p 3280
1⤵
PID:3112

C:\Windows\explorer.exe
explorer.exe
1⤵
PID:2828

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
PID:4136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1207980286\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1529767943\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1529767943\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1666919796\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1818351307\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1860324838\manifest.json
Size 160B
SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
MD5 a24a1941bbb8d90784f5ef76712002f5
SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
TLSH
T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_233624529\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_549767882\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_883706745\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_980880869\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 346ea60a0ae4d17c01949616e7832cf3b359983afcbb7e8912fe8a59321ed461
MD5 203e8ac15dc2fa01607dca121531cbf9
SHA1 6bb9e33e0eaaee142dcc669c175ec6b9508af90e
SHA512 9cbb9572308545c1a11487db03ac7301a81dad98c83fd39ad60fc0ba640dee016818808cbd7f5e840f2b2084982cd60ac725f84529aac2387baa86bafeb505f8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T1DFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2118f3debea8e2640977d8aaf949f09ebd1208d30ba20757560f958087279634
MD5 8d9c606cac641db39043b73620b9af30
SHA1 5641a30c54a84af71f1a3aab03ca11b81a4d3457
SHA512 e3db3c84d1a85989aeb2ab3f1c4235705e72fc3ef797e27988b927948b985b91f9a11ed453d521868095f672866c1590fad569dfc486201d39a6df77306d4a6d
TLSH
T13ED0C04810711C30D09D90734C4977873408C9538C4357321073386C0C030601685187
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5cc77a69e2933d0235ac8a539206200c479816f5bda04a32fda5a396eed16f10
MD5 1c0c83b8e90dc2addc52496554af3ff3
SHA1 d51d2e4f19bae4673952b8a9a969fbf594f3b774
SHA512 8953275d791ff6c9f0be1af08ed082a774a4afed8467fd458e4c175381ed8191baebfe40ebe8844eaf7a7054a60441da2d5759499d2bd067a8d0315d8593071f
TLSH
T1F3D0C04810B11C30D49D90734C4877873408C9538C4397331073386C0C030A01685187
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 2891ec7a813ba845e78fea3c2a9e03daf29cdb956d992240c1f14d06736d6588
MD5 a64c731eebb16302b26cd6f455345bca
SHA1 e06cdf79f3b96149c3065e0280041f61f2dc6cee
SHA512 da209a92d836b333ab3efa9175a4d773db015b807997297ca22b3a596fb375b6f7b831fe23d15e73da60a1abeec136dd8a20b66cf30e65eead2bc3151f9c6e72
TLSH
T153E0D82C43B1C26C618194D692B5D71EA3C2304F95D8DEE5B20CEADD294208477FDEB4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 238cf5e15a39cc879af355abb0569556f360df7c2596eb34c9555ac8297dceec
MD5 8cecf08161a618c99859337c6d55b09d
SHA1 844c29c36f5abc9259eaa8f0830f8c8496f9463a
SHA512 9e3373b1f4eeb78911639544408906a941473255da017882c9d9bd2dbf04ad03a9a423bf8c04ae0fef66b69cb13664717d44d03f05f4d2c71b2b2b922dc50b13
TLSH
T173E0208C04CCC35EA2456487527C874DC2C13B0FD2C4FB852B00C55533434C067C75B4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 23KB
SHA256 4d374f815118157d4ec62c285937df74fec28c75d9eec110f48d3e04cb321ba8
MD5 ce7b262351203b245322fe75044fb61e
SHA1 46fc201fa3a9a56cb91f3a08f4a380f6d2283e0a
SHA512 0af2f8fa0171107ca26b73d1eeed9599c0b67953e163441bf65dc3a5bae5c9aa82bdcc54255996e8d1d472db1b09ba3286859d595619f1706a8e61c464081dff
SSDEEP 384:zApz2RXdsOYVa2CE00K/4dJfoLdmiJo0zADElg9jIKauH6CwJ6k5zRv2LbFq:oamOTZE0hAdJfoxmiJ9zdC9SpCwJoFq
TLSH
T130B2E1833404A6947BFF27130CF66A08E6B2B67BF63273054465483E42B52FA5B5977C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 429KB
SHA256 dc7b7f4b7f3714b560543a07dfe784a05672e147316e86d49f224e0fb0881e72
MD5 6c03e68993cdbb5acedb4c2d1cb00e40
SHA1 728e9d34137d91445eb521bfed6d03c2639d72ff
SHA512 43971de1e2f1cae2f47c9221b84891c97a8ac675abe3a3756f7eddb268add5f43f67e79d5bc8096469f4bed176e490030ef63001f72123bac5b4cdfc7c0c1274
SSDEEP 3072:zweE9O8TjldExEEOWK4KbBqCio0SPiIKOZdXA/rnI9W:zwr1d/W7aUCH9iIfdXATI8
TLSH
T18C94C0DC9719D428A4BACD3563C6A50C759BB48877CA7E3ED7009FB21DA344DB8322C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 20KB
SHA256 f7239bfd0aeb10f319f8cc9ecc7b7a11c93f83ec8e001d25f4fac155313d23f8
MD5 5e9da32054dc985c11d69209b5be8b01
SHA1 f9b478e30f81d1e7ea24db5c2d7090f14f25625e
SHA512 cb0693f9c04f21c4b349fd586701fbab9c8618aa492d7e7247a45d1519567d8023d2c2ae773fb1de742ee475b239c10a5d5765c8f40328e457c88c3f9728eeb7
SSDEEP 384:UXiN+go+u3cM7Yzh9wHHOOCsuwDqCaee6fyP1NvumScYpSFaqPS04Nk3lRdh:USNPo+4cM7SwOZPw+CaeeWy2mnkXNcb
TLSH
T16D92E1AE4AF09CD412DB51826670A7D0F14D720E7E6D849F09E60E35032CCADBBA3073
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 22KB
SHA256 c25864ba6ebde334c819c232f9a3e532b8ae59169a800c583fb7c6907ac72d2f
MD5 cae6524bc7d8e5e751ca0893ab048766
SHA1 bb39ed63577d69d538ece98c1f91d71923c0e52a
SHA512 d0be4aa0b8a46fe9112980e67c2dba58b7422af3f3c22e61fc33e5e0669b81195981e4e30867e21800dd2dd0139b35b44bdcd88ad7a8f1c52ea4276afd269c0c
SSDEEP 384:ckMnwTZdM+yXFA2BT2NW8FYJJp8mIiTyzC4+eXKmeYes4hVuDPobam/qJgN:fMwTvM+yVA2BTPRJJtZyzC4VKF24yjiZ
TLSH
T19AA2E171DC186103B1FDF07D51D90181A36A248AA1A5CF3F9F63A253EC5C0ABBE9C02D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 17KB
SHA256 d0779eaf08d0b7ae341d6057508ab971306a6bd11f16b2be84b46e82595f7d2b
MD5 b81b75f88a860a1059481ab8d9943095
SHA1 d50cab5654cbed678587079bd57f91a4a9cf25c3
SHA512 aab7270578cdcb4fc48a2ed56afbaf333fdadfae7db7280399b3bc854933ebb7c717cd1cbed97c9624ae156f58e9bc9d8620b4505fa45b0aec4253e59e173ed4
SSDEEP 384:p13oQrU3J2P1+wDVpiRlfSeIMlUm02o1CdSwc7joF:pWX2PEueIMuV2o1Cnc7Q
TLSH
T1CC72D198E7D94E766AFD34CEB6450BF67E33602671BD6C46C06460316CF1D66421202A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 61KB
SHA256 15782a719b8e86296a2964f07899efd66752e5ab34f2d984881116fce6ed9018
MD5 ae1a8c1460ef6cb25224b16462dc48cd
SHA1 de998f1c5972e43a4a485c3baaa96a83c08e07fb
SHA512 39dd31d879a7bc07cd8d178c953c54b2e2155d31b034cd86737ffe01086b1bf9339fb8532c4ded2c5c8effb3bb4b1d77b3a79d9002f8a90ebdd175271509f039
SSDEEP 1536:2U103NgXZPa5iv61PnzuIZ0oxa+3J+ENGsnFlNVp2:pC3Ngda5ivobZsyXnFlzE
TLSH
T1175302AA7C026ED63A79C0B237B0160652C6332C19949EE0FD44491F9FD5479E6F9EF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 58KB
SHA256 c4beb59115904db4ccc971a75f7e2acdc3bfe33e35257ba8f8be9f1329cfe8b0
MD5 f52251136892cba70aaa9f2d95c48451
SHA1 e34fee697829d1f6150e5a31afde15cb32c1f208
SHA512 e1c17238bf7d8e66c248882c1986dc150069d36d7755a9c13b309c581cbb640038ee5c794fb3aba5a5d07bcf902739b0dffed0acb54b5d40b0c33096c9c12922
SSDEEP 1536:Nkogz0che9A53SdCLOLtwWOoyT4CqLkQNQfvxkukpn:Nkog9TJWCLsyECqLkQiLGn
TLSH
T17A430280EB4AAF86CC8665FA216F2DDE9EEA1D0559F43A4407D3439186F0B39B401E77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
Size 39KB
SHA256 eac2cacbed7b986ee0a969958014e813d98bb1d848e8305ada767b5f9faaae02
MD5 4ec1be86664c01314348316698f9a240
SHA1 c53db6a731a9952fb3f04a7e6a66672eb2275da2
SHA512 5c804d1e88ff4ca216e175ba6bb7da849ac5dbb1dcc7406f4c29936d4a0000e7daa2607fe86202fd962ac7674cffc9daab95e0760b5fb909114b5374c17170de
SSDEEP 768:W3rL/Yvr/Jrz/Ia1YHqXdezrosQofUmN3BiP+xkP0pxOYYebs2eorAyy/6:LlrzLMqUro7ofUCZKP0zYYeorAL6
TLSH
T14103F184241AA71328E42C42477ADDED34C3D2E7BAB3336D570CCDAC6539E51F4182EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
Size 16KB
SHA256 6fbee5a08621606b859d0b2aac08fbf14f38d7f69af6a17d1ff085ec79e6afa1
MD5 84bade1a5b12c861cd621ebf5445b2a3
SHA1 a98310792889d8f38f09ad251f8a5486c57a9ca8
SHA512 45060a7d17f1fe84a5b3cc09d303cacbf97f4b51567f17ad03b593b7a7889453aca04a6e644db787dc8e7602ea797dc753c2b5796187a624e1f992fe64de5d2f
SSDEEP 384:mAAculwNtPYeJPkzjG6wEd43QFD/BX6rRsJM35EJeC+s:mAA7latPjRgjiEd43QFDIrB3CJ+s
TLSH
T17572D0E93293690E8492663CBC643217362CFA727F7A30298B2A5FB584C8C4C565EB45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 156KB
SHA256 3af518c5c9d2331e6ce3a89ddf9ab95c604b24bb26f8c1307e0714770f222be5
MD5 3a3d10908795a95cb3aa9e52ab036bc8
SHA1 7fa3d2328474e8de6d0c517be346046f17cc35ad
SHA512 5896b496cf6059aacd291aa32052a559367bb480d75dc93b04d39731f6d92dd51ebabbd6939180919b6ef6dd5e68835dbece0fd437cd18dd1cb815e6b7ca956a
SSDEEP 3072:Tj4c9VmCRwMRY4706kuIMlYMkMe1TB/cGirTm:Tj7Vxf/7jkuIFME1TBIm
TLSH
T1ADF312D049D564AD9D7AB5E06666AAF0AA69ED0703CD373E35EE17E42C8BCF0201D380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 96KB
SHA256 69673d64b5818134e76aba4558b018523f02dd2e9c8fb0cb09259ca82e93504a
MD5 cf88dcaf23a4b9b73d44dfb849dbbc15
SHA1 372111607b1e65ced041c82d8588ffc057702749
SHA512 a3fcc7aa92c51345e301e4827f9f40eacc6223ae643421f6f5228d38352e3b9b2902a489a0ebd00b0cd0095ffccbaf87c896809d019617348fc9bbca18e98ed4
SSDEEP 1536:lb8Z7Oon5QKyOYG0UM5o6nnifeK2Rvyb0151EQC3D+a+9j6vsAe+yCUjLmm5ASc:lQ7z5QXGXM5Rtyk52Qra+6vsAOy
TLSH
T132A302BFA9BAEC31E46009CD8F0F135446C6492613D725D19A163FBA2504FD68EFEC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
Size 46KB
SHA256 96c7c89823ef3b601a6821d843a97dc76e346f94249042f2c5db1df5b9bcc909
MD5 848ff21b7587ff706b2fb995e734ff18
SHA1 f09623247160c32bf5c2142d5ddb3b237cde0a63
SHA512 5a6db8d20e49a0cdae763fe3e173083df4985e30f1c9ce2637e11c5d6304b95d4abb93f9dbbc0934e80dc0de7bf84596d10018c53f39549a135811cc3d9bee74
SSDEEP 768:aioTcyUSnizR4p54KLq0bsoP8B+YUg2JqAGq16jAPDSDaPDC+YNzTs+UCtEHCnrn:rzHSn+RSLco8B5UBcAWWPDC+YNzYKtk4
TLSH
T19623F1C256C307A26D1D5723B129D877662DDF4873D0A3D297E21899E2ACEC0143FAE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 24KB
SHA256 91e0fa39b0bb992ba77f9ce041e0ed0805ee52b4353a6482b8d394992851f039
MD5 025023721e7b249ae4399e98a04b5afe
SHA1 f80b0cb165a1fe7cb5bb4a28cccb8c2e99e9464e
SHA512 c7602794e44fa9ea4aebf708d4880990c757a165df4993d83c98304ee66a44e7c685d7b1b5ca97713ddeeac04e292df9bce6f28ef62780486bef03c65daade64
SSDEEP 768:sTfeMmWRbj1sn8ULXXEFx5pshEtvHJBhcClQM:scej2n8UX6nIEdHJBiCP
TLSH
T150B2E2080F4C460955DA4781F916F62121F770E7D4A1E5EEFE1C953EE690B785438C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000db
Size 75KB
SHA256 dbd639cd06f5827d6fa2ebac3b0e2147bad02073c115efc05e93c1e876144992
MD5 4d40b435ca4654915f9a403a4836f4e5
SHA1 a1e85eb657aede12986881f38ceb56a886ccf2ce
SHA512 099cfe0ef0fd47392dc842d8e1728f6524b165b45f2fa72d219f786a923f4c938370d2521b2eab33f90536680697a21de88558f23f048d4d6c0cf83be4fbfa5f
SSDEEP 1536:ya/+bBd+7JKb6zay/DcURHVMqgZLP1YECEuzLgVZFgfurxK:p/ID+ob6myLFVlILPxCEuzsN1rxK
TLSH
T10A7312B1E36410989B067402096FDA2EB73B13E4EDFC0B9EBDC1A5ED81ACDC8671D456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000eb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
Size 163KB
SHA256 1bc2b55f53d05403b6dcd548294c69ad6d4d979fadc618adc72fe18b4d8fa4af
MD5 dda86488e38e5348a883dfc299c97a05
SHA1 a19e6c2e31598343c300fe7e668c31533e2fe0ae
SHA512 6a9dccbdb668e47f2bf494d8481bff51726be7898a749b5e7ca3f5f7d90214f186f9d6a41ba6e43055023d0392ad7f9ef94fa4a733b273795410dff89fda1459
SSDEEP 3072:wf9LPekhogzmJypjr9qDBdaWnrgDwhA/DKrJ19L7mNNFtwcPHl9tRC:wf9LPq+PpumWhhUDQJ117mNKclRC
TLSH
T1DFF3232651D78C38FA8C404C37550ECADC6F972794A5FC41E9A8DB7B468BD78E842CD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fd
Size 56KB
SHA256 38eb63a377078b10e8c2837601dcfddef111c4a7d1b442008b528f1f201f4768
MD5 505bb0c84f9eefda103bf69f4d3372f2
SHA1 be32e8de168e31761c51b6736cef4e8fd75bfa85
SHA512 8670545d8b59ec46b329aa94a4fed2b1e18a4f879218266d4b4db064cc4e71a3c001ddbada7449eed5504e2e2eff7dc0a7d01d63c56e01d5324e8661b34334e5
SSDEEP 1536:Ed2WNCdMTNyE7/6ubOqaEHmp6yJChdaL4o/KhfA:KCdurL6ubpGp6oChdaeK
TLSH
T1A94302BD04A961E7C61780DFF0C80619CA9EA9F867B7537F2029543E4BB1B03E96158F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000101

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101
Size 363KB
SHA256 987520c161d9a0a6b78a6a2e9ac48fff7df21258a76f765ec62e3d7d872330bd
MD5 b889c4491374b48bd54967089c47b24f
SHA1 a4a0dc062539561c1cf4db1f4eeead5182d86e6b
SHA512 daaf9a7078b7ee13a69823aac7ad50c7dc417d5287bd53b838b11ee99c290a9d8f7cad868703041478e1acd000c7a2e2a97b8d742acce7ba3d933cfae4fba1ab
SSDEEP 6144:Md5+VYpEzQqG1X55Ay0K4P1ucWp6qD//wwgVfDhyeGHBdmtPWVkjOQV3u3:c+VfQq8DITWpNwxdhjGHBUZWCjOQto
TLSH
T1FF84233119E1CC63AC01838B0E0DB54FDA677D697BAC153E1042A8E7D1726BE5CB25B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00015b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00015b
Size 21KB
SHA256 8f475b1dbea67888730e11e58d0d133d28d07d8d6f963d2b6ea7c4b7ba6393e2
MD5 4129df60ba7fabab162663fa592bdec7
SHA1 9da1e66b3df74e09ec7913392024ee82c0bf3cfc
SHA512 815c258fed3bd4d5f73a4a2c735a19d745c6dac91ff0b7de019acd9c4651aaf9ceaaaf1525d7bf6e64cbea0c5a8b4e385125ff399d15269076217b764963f7df
SSDEEP 384:4uOArazYE76pdN3EusSjW0fE8KzJIi0Qx7J0oGKaAcTVoG7uV+db70t4rq8:1azl8N0us6Wr8MIDQgoGfAcTZ2+db70u
TLSH
T1DDA2E12AEA49643F73799D23E846F92A86B7C309511C1B3694E4499BC83FF770E90A41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000163

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000163
Size 100KB
SHA256 44e4aba518029fc66a2f7a22a3d8efa75532fe4e87e35097d9924ed20669396f
MD5 8dd3fa0838b79c83788c90fca45e579f
SHA1 e5bc3818e5b5a80d993b445206a8203e71d9c845
SHA512 4558bf5a6b40845f6a2c8dd7896c0b94af0167952d119598b9db9e4a4dea041f6e4f79f5c3bfad1f6a274dde4128c114d0dbb6b1823ff7f1fbf61272672c948a
SSDEEP 1536:hlhCmpVnVsmSFgNRIj9n6d8Dsml+5fIPwKWpPcR8PtCmdUi3Tc2J2L7gmlt:RFnCmigNmjFy8YmlSIPwKWJr+IW
TLSH
T197A3024ED8B9CC710E9B913761353F1DC30044C7A098AA6ED94BB2A58665DFEC7D318E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 8KB
SHA256 51f451ca8cf2d26700b3af5df983b25694b96bbdf27a33307869b7586e45a592
MD5 faa38f50700ac5c6a06105fa248687d6
SHA1 ace840915238e6e191979bdacaab69ba02c09ad2
SHA512 37ff4a2141e34d28bd72ed753efcd9ac2f56887d28efacc01802fb07f1ab002ad6dedbef57ce156c8ab0fb290c8b7818c21582851532b4aa6d96ae1f2a0d3a4e
SSDEEP 192:0XqCuKLL+pj5c1fJyXI1GasswAxZNDiso8s92VZ/ZpULshBzdE/PWDnxLitQ1QUu:0XqKLipj5c1fJAEGasswADNDisox92V8
TLSH
T17402BA57889C4727DBD80A7715FB5E0CBA76D74522930E163DB6A5BCC832FA1B3AB100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 7KB
SHA256 6a1019048ba1a1e03d885b90872eff6d15712c4205d70cf92a6a1a856dc4624a
MD5 523a875733b2d32db67d5cb16109d036
SHA1 e5b5ad91776de877ea23edbfff74ba7a05d1ea88
SHA512 4fd6780694aeb307ef49dff43f0035e5cf7ce089c089b0ce335762675825bb717555f122738ecf6fbe4365982ae461aed1e891a4394ad79854cfbf788f52c649
SSDEEP 192:oXqCu7iL+j5j1ZRIqJUXI3lvCOxDoNzibq9eVIDs2r5BzdEpuxL5UreZfQ9+Km/W:oXq7iij5j1ZRIqJeilvCOZoNzibq9eVl
TLSH
T1D7F1995B88DC4627DBD80A7708DB5E0CF5B2E74967970E1639B2A9BCD432F61B397200
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 4a9872337fe255ecdd726439a7d936e44bbc7cbb7a54626c7c91b65496e102ef
MD5 204f204c8e0de72afc8d98493bfe503f
SHA1 40d65c9272030ff377ac68a7bda459a7666a076f
SHA512 367b4801495ae4e13450db56a3a40f030e169831149649416c46f91811213e2bed63364bc03db12366a57ecacb540230cb285cdb81fac3f0c4560fb18e2c81d3
SSDEEP 384:zsDAisjYG584U19LNycsBvGEcQe+3xp2GyYouCj6SJd9JOp+J606LI1EVp8mxKYo:zsDAisjYG584U19LNycsBvGEcQe+3xpC
TLSH
T12142A71695CD02A7DBD80A7E48EA9E0CB672CB4822C30FD73D75997C9433F9272AB514
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 516e380b4f6d7a75cb808e73550f4752f1b1f28ae95a5daca92315356c3bf644
MD5 693233f252a3ea50d184e6287d175612
SHA1 879e6218ca29e9f0449b705b9bc7089efa36e3c9
SHA512 0d4c6d2414b81b8efed457a20eace186ebdc96a637b74db71a922da5d8da114cea4d8e67c4e27550cbf2801d6b37e273d00340a05a4184d9e32fe9cb94fdb651
TLSH
T1AD717E8781958155EBE04DB756DF224CFAB3E79873830E2A3AF2D27CD635B125383804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 d3bd1ff62089de4fdf6430e04b728a3bba6aa5ae7724874e8270678dc0a23af9
MD5 8bec6cc6c959b0ec9b9b07e9c6fa7c6d
SHA1 c26fc260c24e5fa74ad8fc8cf7f586dba63dacb5
SHA512 d38b9585f1dcf35226948610e5befec6c3a868ea3b43ebee1f9e8dd12a5b01390bfc700e81226e9f1db8b7302f68a5d174bbb4ead5bf7e6fff1428a999e023c7
SSDEEP 96:b+q/2zDIs2BB+NuTJLqXXqJzEWeGayLj8RD4/AL+JcZ2RqFXf:Sq/2zDIs2EuTJLqXXqJz1ayLjoD8iWBU
TLSH
T102B1FC63808D4226DBE04BB319DBAE0CF576E78967870E1A3DB3A93CD531F61634B600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 64982bab749411d156f5a6e7acd4660fc76b0afe46cdf69bdf26e64135a13b6f
MD5 9340005349bac9338290565a242ebdfb
SHA1 144f2add3e849bb43f43ebafed778e84fcc07036
SHA512 4a8011a795ea6be634cc4bb2db11a62bdc356ef89ca2246777cd29bae2312498dffb8f2b7f92760191187d693b53bc73b1b0508e1bb55f7e9470ff463cfb63c4
SSDEEP 384:QKhDt0ijYrumNh5FJuUHLNTuvGEihi/ZF+QQxEalAeouCdj6Pd9JODM96LI1EVEn:QKhDyijYxNh5FJuUHLNTuvGESi/ZF+Q4
TLSH
T13F42C90695CC02A7DBD4067E04EB8E0CB672CB4822C74E977DB6D97C9473FA272AB514
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 1646b5ef2739aa97b41eee5941335de920bb7a675c2a0783d0fd1d81815c1086
MD5 e4ba532db158961577034db1088a90a6
SHA1 dca13adc3b2775850daa6845c38ccb228bd3ec0a
SHA512 d8513a78be2d19b8ab7bba1e06e43f75c808a7ff73b7783f76031b636c70a2ede2169a490889b048d05ef95ed46cff0b23b8c89a7a67de11918143d93777216b
SSDEEP 192:9XqCuaLL+pj5c1a1JJaXIzkq8swvxZNCiso8s92VZkZpQxshBzdE/PWDnxLXjQ1R:9XqaLipj5c1a1JJoOkq8swvDNCisox9o
TLSH
T16602CB57898C4727DBD80A7705EB5E0CB676DB4922830E167DB6A5BCC432FA1B3AB104
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe589d35.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589d35.TMP
Size 3KB
SHA256 1934b6fbec6be6a7e4814d3b28ba16f78e1487a2e05d5572971480c208eb4a35
MD5 fd220aed389314a231f86a79bb97dde5
SHA1 5e8ffb8b8e1ddfbc16021494ec14c89299f5443e
SHA512 1c8aa5561ac380c6f2c324021ee09c131c463e0de88e31580db1677b027d06f51e4861146db9eb2e3cf8c0dbb11eff70c44b43f6d8e6693d22856fe653b9eafe
TLSH
T150613C8781958254EBE04DB75AEF224CFA73E79973831E2A3AF1D27CC635B524387404
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 592a6c4b42524750f22126fa12f836a5e5c4589db45f061be99fa6b7c1d64139
MD5 74ba3d71fd68d21af44d5dea97c821e6
SHA1 2aac211b9ee4ebc31c6d6d36d44af56d9408147e
SHA512 2192c4fef4773de5e2beb83eb413f62ccb882599afc351b5570ffda3690ed9df20a0e70caa0aa025700ec3023683af382ef56a0ffbbf0100f7e1498b451c2146
SSDEEP 384:DDMutZDsluqPKPTPkPgPePbPIPNPyPhPBP7PPzfo2wzcj/tIjF9kGVTlLCHRIlMj:2gDKOMLWtI5ZrQQB+fW/0sS2tV9mtMBp
TLSH
T102929BF3C3E4862DD92152F8AA156F1FDE5D0924835C3D39C9E99F0BA7E2471E201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 48KB
SHA256 8d9b9a973fa969a4f0a02cc2fdd3df26935423226291f83da94031aa20c51db0
MD5 a7544768313ce77d67225d9e51aa93c5
SHA1 c791c8f0bf6bbf259ca91c43da24fed37c1bf6ff
SHA512 fd303321fece79cd86d67bcc4c3453273942c3b83a4d4f6df6e0f2b4a4846f922a3c7622617a3b373d6c2a6a1a34deb7523fa16d364d24cd4e10137d953da8c9
SSDEEP 1536:NSfOcA3CZBCwwY59E9fHu/0Tsc2Rv9WUK/nSu3YLy1t3MrmH+0:9
TLSH
T1BB2379F783F4866DD92152F0AA147E1FCE6D0925436C3C2AC9E5AF47A3E2471E241B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 54KB
SHA256 aa5780ddc11b326233dd13b227a74f903939f672e9333a329fd463d4bd52295b
MD5 3e78ef4e66d39bc2dbedd2b2162dd1e8
SHA1 8d388e280561f2772a8f003978b247aff63c76f3
SHA512 98d3c3a6f25b7ab16a0bf04b35a68102cbfe7fec4c92f1a9e49c29d468e3023d88c6db8d6407467435cc461740dac8aa955a7653ff3b68666b4fcbfe76195b8c
SSDEEP 1536:PgDKOMLWtI5ZrY3nD9fHu/0TxVz2rcIW3y+QSuoYLy4girK+P:H
TLSH
T1B543CEF7C3F8866DD82152F5AA247E1FCE1D0925435C3C2AC9E5AF47A3E2471E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 996b60028f8669ed0cd02a5006c6882d908688d25e476883dd6c6654beed26b9
MD5 ef60afaf9fae6421ef531691d3ad6f61
SHA1 abc8048f420250d49d61f69c54fec019e5a8a9f4
SHA512 a6c87e0de7f1a555eabe513b64a0d924c753b30e3c7e3155ebf8adf4744fe991757dee8a1f0b3848b89a0944f88135e287ed758956c7e9b295856a4dfae4dd8a
TLSH
T148D0A963630221B6A6682A99D06AE88ED327206A08C2EAD421A0A8E925258691907185
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5ce893.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5ce893.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9c71400b13c3e22396ac6fc2ad833e857ad23bc9207877743c1706e67d3ab026
MD5 b2d92d9c173094442bcb3babc54c8eca
SHA1 301b09eb54831508ebc2d1aa8e4301e936cea2b0
SHA512 11e67768d6621587994bd292aa03592b11441cf4787cfa85b45362202dc0217e87bdab2fd9bfa6d31e9e92cc850716fe63973e4647e7fe442b0c50be4cd6c8e3
SSDEEP 192:sxZcwR5yM//K1Ml8MkS/fksjhzcZrdd6NIdpViHW6+WN+5Ps/zEBkm4iwIg4J:sxZcwfMS/fksVz0xd6u0HbN/dc
TLSH
T13C52F912AA34597BCCDBD20DF905BB67D6F9056292940E54AAFCCB0C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 25KB
SHA256 61e7a30b5f887b9898f0e2244f97fe12852c4c681d3e5ad0362152c2a01765b3
MD5 a093a7065fc34610f344823c883fb75e
SHA1 cb6957ef0a8fbb5e0436d29fdc9c6b86fcde520f
SHA512 1b1389fe653d05ca2cd5f8777dc45408d8d059787a0570b1eed0b65af84286b405522ff1c2398c2a488ffa5e943d4896bf6e86a2e5096ecf4d37f41a160b02fe
SSDEEP 384:sxZc++q4m1S/fks6zhxw6UuZaYNKkvOHbn37XSlTsQ/8Lktr1qDO1VbqeOo52:sjB4m1S/fyzhxXUuZaYEHbKTtiO1woI
TLSH
T13DC2B793A5344AB789DB9529F420FF3EE2A50416DED84F956AECCE0C00DAAFD7401C96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 40KB
SHA256 96660627ac152dd615b4791a25c1bb99fba98a7b51f5cd7aee342140cf562756
MD5 82e006d8bb7d764598be5f801ef9edcd
SHA1 5ba33e05cca6c9fd68194eea00abc5547dc932c4
SHA512 78fa78a6ca23c1cdcd1d1d2b967706faefe9ad9dd7690786234e83c0b3d2dfef3ca9c9a0ffe53ab8737a5911bbd5cc5c38899004fcf2fa6cc6cac21cf19515b2
SSDEEP 768:seU4m1S/fyzm4Mnc7WeT+RxhUuZaY2Hb6TtiO1loI:fU4m1Pz3MmW7xhUuZaYy64O1loI
TLSH
T1CE03EA53A530C97786D75D29B43CBE3ED69900569AD8CFDA6ADCCE0C00DD5FCAA02C92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 2c49d2591c5e52b274751054da020ae0e0409a38d8d75532ec6716778386010e
MD5 4308fb18acce3b5ae5794c31a94f4b1b
SHA1 5ef0255b05d7b4b5a7c33c56b88ad933dad364c2
SHA512 b7c8ee832f90361db8da75031bdbf6d752e5f58a77fbb9f19cf7598197d27c699400d357c50ea95c6278648669390ca2f1d08a87a195b45edee9eb00217459ce
SSDEEP 384:sxZcwfqQS/fks6zhxj6uxHbn4mXVsQ/OtTAXpViM:sdiQS/fyzhx2EHbzOtMXpZ
TLSH
T14792B893A5344ABB89EBD225F450F77ED2F5046696E84F91AAFCCE0C00D7AED7002C46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 40KB
SHA256 c0ef1d53e9206e6f6df5682116c07f9831056129093b25bf64f8f9bb40981f52
MD5 9890990bd41ff257c5b4fa4da93cb59a
SHA1 f41158882c037a0ad801fc50754fed3cb620dab6
SHA512 aaa9da98062508eee5dc0b809ae61a9cb947177513e3facf8a3c7de537dd14e063878c35c52a57cbeaaafc51fb785e5a1055aa89dc103266b943c18323be8153
SSDEEP 768:sjU4m1S/fyzm4Mnc7WeT+RxXUuZaYEHbMTtiO1goI:6U4m1Pz3MmW7xXUuZaYQM4O1goI
TLSH
T1EB03E953A530C96786D75D29B43CBE3ED69900569AD8CFDA6ADCCE0C00DD5FCBA02C92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 f0c5c95c2a380c3040420acc46170dcf4e8ff15598e34a2c44d9696e221d1879
MD5 1acb9ea47bd38e72bff7c7b3369f78b2
SHA1 6641d46b38f0aa9f046f6286d3e0bac7f3347721
SHA512 b1f3f03fca0992ec4fb0240481a43671150ce48332fd350194a05fa963c9ebc14639b9abbd8eead024371b4f010888ae1b261ec7590693995b92611c32850f9b
SSDEEP 384:sxZc+fqQS/fks6zhxb61k+Hbn47XlsQ/rtOk1InV7eM:sjiQS/fyzhxeXHb8rtTInl
TLSH
T1A992A853A9344ABB49EBD125F440F77EE6F2046696E44F91AAFCCE0C00D6AFDB102C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 4c0535434fc5e358446dd9e8cb86a7e3bbe70a44f64be22697e68b29fbf55671
MD5 44a62b074bd37a8c187b9971d78bdba9
SHA1 8e00c683005a362e8ab8d34d61d1ae2133a7b698
SHA512 fc5634b4538c1f7318d875fa588de13476911137929b61035451afc32724e3835152266b2314bbb6eaec2cf7e22932c8ed88d1cb2c378c2c2538e9b13af0ed11
SSDEEP 768:TnU2JT37pLuLn7nWvB3I/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV8B0sLl4CpRMrou:TnU2JTxEn7nWvB3I/u1jaNB0sLiaRXu
TLSH
T141F20B7B3C4CCB7E4F804E9CEC2A7E9E6DE8018B9698899447F9844C03C66EF55161DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\38efcfc5-d8cd-4852-9a2f-8087fe5febd5\index-dir\the-real-index
Size 2KB
SHA256 e45243d1a712a7dfa7127df17e2d846775bca035fe28c4bcebcdfeede07ef0dd
MD5 496954a3c8ae8823f7af2bc9fc23ca01
SHA1 61456bb906aa6470f7a416ead5bcd4d841f2dd23
SHA512 666b7e3f21351eed28ea925de08bc30e89bab98c8b5f8bd181397ce7fe099a7958809912a0cb8d88c9b36e328170cadbab8e567b3cad17c9688ae927644385f5
TLSH
T15251B5CD4E4A6B9BECAC12B210BA189033B44BCC1B6046135CBC663A7D5363E1D5B684
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\38efcfc5-d8cd-4852-9a2f-8087fe5febd5\index-dir\the-real-index
Size 2KB
SHA256 8aca560260ec47d323daab7cd60a0ac4318117ca57f81714fe3da0e5adebaac9
MD5 0e2bf0296980e80f256ec2d9a459d43e
SHA1 20ff3e0c0630446f25bfca36d8eca20d4a5d8c81
SHA512 d143dd4af043fac56ce748ef9e12386423f84afee8b78f7634e8674c476a8dd118f09978ae35ca2cced36a33daf81b5bb9d777ad5b2df62a2c10beee0fa5fd50
TLSH
T10551D88CCC8D9F57C9A942F154FA112433744CFF1E589B032DFC25399C8769A2D8B219
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c9b1e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\38efcfc5-d8cd-4852-9a2f-8087fe5febd5\index-dir\the-real-index~RFe5c9b1e.TMP
Size 2KB
SHA256 45ef92ddd949aa476a7bbaf20243aed4b64e87a085cb511a6254fa9cfd837a0e
MD5 1270ef1ba275750d4cd04f2f04a26829
SHA1 bf415ef1174fe3385dc7a142c6d9d9e707582914
SHA512 adf9043c028b893b719e066cada7e3ad21f61fddd893a6d92a4aa8d7dc2af183c4d0d8da69cc327f6ce8524dcd450f70cd70301034eb3b1d5fd7548e81c01926
TLSH
T17A51C69E9C824A22CD6080B349CA2428333D68944988AF0734FC8A33ACC76AD3E57354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41d0daff-dc64-412b-973e-62a880cc9558\index-dir\the-real-index
Size 72B
SHA256 1c950f5ac69ada97727cc669b994e9b6ad5d61d5a9e4dc94ec4815b71e5e3af4
MD5 a9ae7c7d5bcb1f0662739fb70ec10a51
SHA1 6fcada2788d36c35026e524a79ac2c60121722c2
SHA512 f54156ea5728f6379ed6468fed60ba7d21e7417f17fb8b779813d4feb5cd87d92b76e7163e722a1b2f54fde93e2d335b43fcde2183514da187f0282bf7b0a1a9
TLSH
T140A0022855541585C06356F0615741503378DC552D02970750A53455CD9215B9D0107D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\45b6a842-8b63-4649-970c-c42c79be1ca2\index-dir\the-real-index
Size 72B
SHA256 7ef1a365454b12f4bb572a0845b87c73c96a4665752ed0daa885b9114430c360
MD5 bfba70ebe4d0bec667c45ac3998ad29e
SHA1 4003515547f2e765fdc153768ea2cbb2dcc860e5
SHA512 c45698e4956cfa02dc04c6652b1d0fe31e494bb14b667053eb8082d19f1b0994265e19fca3b9161dc0c29acfa9b19a983822e9e2f5f65a3115fb96b998269b63
TLSH
T108A0025C52916109F94613B01941537032549C201A1ED746809B6098DD965E05B1144D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dc314.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\45b6a842-8b63-4649-970c-c42c79be1ca2\index-dir\the-real-index~RFe5dc314.TMP
Size 48B
SHA256 861bd0714a72e2b7dd9550f020881c6ad984ba7bc263822e11ef30be9afcdf91
MD5 2c107323c25f554408cc166422674556
SHA1 84d143d546c2399ed71b424813839fb8e82df393
SHA512 0dc2276b6786e5fa8005aca406031f87c59543e3d58684f62597e2701bb6264642e767c0f57a15aabe5a667cac18c6cbf5d4025322fa0eda4d93c0586e29a387
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 fc6addfde92776c89862db4ceda6cb4a6a1a7a13420734b8444013a479c3c4d2
MD5 df08e231e241f0fd911ac57672a3199c
SHA1 102d33e2ffffad97b59c859cd6c46938fcdb6e78
SHA512 e10cb6753bad37dad37e0eccebd07d4826a2d1e148cd1c4efd398e55e85b4771d00db2a86f61393a0db7526147b16c17cae32326ce2bf84ab9747e188c7de149
TLSH
T118F027B6BFF71D05FCAFDBE9383281A086163C148444DC2F1456B29794B13193458C62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 707af9c8d99d1814af6bfd98fd42be328c710e120efa07aa530fcc7c93fd3471
MD5 4d24697b11af9bd04412c4629b7377ef
SHA1 d7803a5b9771a23e2d596355deefe2d81f605337
SHA512 184ff90874451085d74271651a6ece87410e523189ba7f97eff6aa9b81a20548ec3e4e4098128b80cdbaf446a418ad2527bc95a680a7890e2c7b69fcdaf3c683
TLSH
T15FE068BA7FF71C149C6FDBE8283281E0821238248844DC5F20AAA28710B13443441C22
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 a7f0fcf1edfb8b3094bb878bc8a83c13c3ec1b3d821a0b36b64829b859ed6812
MD5 2afcbd95555c8e663f81d4484c269c66
SHA1 77ba94ed6008ff024379deb641343d2494da2620
SHA512 07d538a89292b28363923858280c42d5a35379582823d133aba962f08f00a703e456b650a79601fe76e275b7c89402a8bb0ff30db65644f14256762f3de63a99
TLSH
T127F027B6BFF71D15FCAFDBE9383281A082163C148464DC6F1456A29754B13593498C22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 194effaef14870d776edf1f812077345004d95cde6db4cfbe5f53386a2d4ff6b
MD5 308d82feefa4b768820fd3f1d6962813
SHA1 3fbe0de1334434c83b6d8dda22b4edc7c7e7475e
SHA512 420956ef2803b6f6d4cdf611b6dca62855dfbd7caf82b7a61235f9aae60736609150ade7ac8e4a83b9a4bcd22ffe5f9cdb956d10df3759801cab4a53f7afd4b7
TLSH
T1D7A0026391640089D44002BC914702A86610981807862751C0FAA164EC52585513240E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cf266.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5cf266.TMP
Size 48B
SHA256 62b3a4f741f2ead6f6f07e124f011465011fd3782876e5a870d898b16d1c795e
MD5 d304c935e6d35e39bd7ce1d547be2201
SHA1 87b08ebbbe7f6c0715dcca6d01de4b1a955a5ed7
SHA512 e61cdad5e09956a18cccdcd8943739d6b61b16e413aa94faec367f25d7ed16dc088b3481105468563b5478a816c86f6e04c5b2fd975b2cec6f343e46b6cd3e85
MD5 SHA1 SHA512

Submit Download

Session_13422838454549325

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13422838454549325
Size 75KB
SHA256 f390b81d861f0e4d0e52ed71018f12bfbf0b27ba156afcdf9fde962392a1f726
MD5 82a98038b3efeb53dc8116306ce2b1c8
SHA1 249f7adbe374e1ac7f3199d99e67e24d81cf2d18
SHA512 c6c46e66160c55798abfc6841339469682236b3b57144e1350b15af0ac3bc00d252b71034bede214eff0376bfe13c680f538a409cad968c37a3d41c522fa8cdf
SSDEEP 768:1KhkhOJhOdeJwcccnM3e5hC8y+J8ti0W6UYcl515g9kTlzuV03ivgIMl0Ia63iGV:12VtAS8M01UYU515gil3YE
TLSH
T1E273DC291AE5123EF37E8678C7F522BAE932F55375D18E0D409143090913B52AF72FAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 793c9fbcb690d72a548bbaafcf0395f960350ff72a9cdf06931d88b4ea9a7bb0
MD5 f00598d019a96c8e75f702056aaa5522
SHA1 5c4da33a4fec78d76269fdf3747330643862b9b6
SHA512 de72a870a68180b3d4ef25764327121f27e3b5ad926ead6830365f0e64dcf99ef4a36871b1dbdffae0bc5d406e4d2ca0d215e4a284bbccca9d6fc066cbe46301
SSDEEP 96:K88gKFGNKOkKz6myKwKD6EpSKSE6OP6KU4Tz:KMXT3699e
TLSH
T193E1D110717B06803B7E2A4D96A5B46F66D170A37158A42B7BF800A64F6FE20DCFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590cd7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590cd7.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
Size 3KB
SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
MD5 94406cdd51b55c0f006cfea05745effb
SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
TLSH
T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 1db3e0c3a99cf79caf9d3a99994e525fb51dda4103dfef8e69cf0a1ee7db49ed
MD5 c1c980593e44a2869c79eac9dc6423b0
SHA1 96a589d30c3815c4605a23721c150b237148077e
SHA512 1658b98e440b7664406f1ff143cebf20495696156625fe211f5306c6505f19ffd38d5bd812ed511c2365ffe07c65cf9625bbe2ab9db1f2e6bbe00ccb5fc25f3b
SSDEEP 384:nfiFbCcmyWCysNx8TUNTUlIRt+9TrKEsvu5BFfCXt/j2sVusmdusYosrAe4KV8po:qFOcpycwg/+1KQUt/f1mdPkkI8p0xV
TLSH
T17ED292F198D79976E8AE4B87A33E6D068EBCD01775885994FBC85D0CCC861BFC306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 f8e0bcb08f1846d60821d4ad6b14682bbe112c7fac253141f96bf847221906e1
MD5 497d51f9ac690933dcb75cf4f6e461d6
SHA1 01f05e622cc7b6f7fda7b2d7425d8d95536b0dbb
SHA512 ade6a89c0d25cfa42f7919fd8fecbb4b564b557349d25946e94e194167eb8e35af382332e0e185af4abf8877b68a56cca01874f49acd2000b96133633592c788
SSDEEP 384:nfiF9CcmyWCBsN78TUNTUlIlZ+9zKELjJBDfct/j2sVusmdusYo/rAe4KV8p0BHV:qFccpBqwgD+xKAMt/f1mdPHkI8p0xV
TLSH
T1DDB23936D868DE7BEDF35B85F60B765B8EE011674598AEE4DAD85E0C00C71ED130AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 bff6c87f2e262c25a3b0174a9d5c2b11fceabd989c9a53ee0af485f6b2fbcd57
MD5 12a931f937cf487f1936c7aa976b31a1
SHA1 f96018f2c55991b35f65a4da9129ba5b199b2f0c
SHA512 3735ba969bcd3c2b30353ad504c194738ab6906309f10d3666d9c9cec43bed743b5cd1a8fb8c2b2a12328ad65c970b92422e8c36f673147de057d8d2df106f61
SSDEEP 384:nfiFwCcmyWCcsNx8TUNTUlIRt+9TrKEdvu5BFfCXt/j2sVusmdusYoMrAe4KV8po:qFTcpccwg/+1K7Ut/f1mdP0kI8p0xV
TLSH
T124D292F198D79976E8AE4B87A33E6D068EBCD11775885994FBC85D0CCC861BFC306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fdf25054148c36a53500671df93bc88693762e56cec00b126b88539e260367d9
MD5 225adfd1fdf17e4587a033bef5fc53ff
SHA1 7199fc5266492d71562361466be4fd1bd3c8a44d
SHA512 ae4601d4309564a0287e28142ece6cc7dde30feea87bef8b0055ebbd8a474285ae3358deee747b6ea763d21de7d5482ef5d4576e09c0d25dcc6ec0196589f768
SSDEEP 192:tON26xIQmiUyCTM8R/j2wz6Sus6hlrWH6dU6:tON26aNMW/j2sVusm8CU6
TLSH
T1DC02E6387C29BCBBDEF26E49F68777275F94102BA9552F48D6E84E1D00DB55C2302823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 124ab3abccc4118a33ec6d2bbabe84bfb7adc74b7fb0f1d36f042152e0ee6cff
MD5 58e66d75622fb00fb7e37a3e226d9a8c
SHA1 b14f186653025a93540d5d22b2a992196d664faa
SHA512 e68d24584466a483bd146585950164ae8d4ca94c108e23402674ac5f4d424cac3304472726eb77bbea9b0669d8b9a2c5efa11e0e79761d511e8df7fcb5b57a20
SSDEEP 384:nfiFMCcmyWCysNx8TUNTUlIRt+9TrKEevu5BFfCXt/j2sVusmdusYowrAe4KV8po:qFXcpycwg/+1KGUt/f1mdPIkI8p0xV
TLSH
T11AD291F198D79976E8AE4B87A33E6D068EBCD11375885994FBC85D0CCC861BFD306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c64e5f416c3b2d29932894cdb52491815f670e4b2ab88e2e4579825daec8debb
MD5 98edfb18b7f980914d279ee4e1702570
SHA1 38e5fe243fbdcab2f7fee3d67be5e591065abc35
SHA512 b07837cb8d9c108bd62427313d4a20b8c449fb509803d26d8351fd09ec8be5d04a3d9d47d54b0a150f07c84c6c4d520683eeec4539bf7c363092576434c91f5d
SSDEEP 192:dON06xDQmiUy+TH8R/j2wz6Sus6hlCSubezPwoX6s6qzAU6:dON06rPHW/j2sVusmdusYo3rAU6
TLSH
T193121A35682C7C67EEF36E56F58B33279FA4212BA9552F44D9E81E1C00DB55C2306C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ee11c0e89867577870720691ceff3d1231741cd133ccd1509679899dbd5a2b7d
MD5 32c3f38269b2f381b576560a12a3fd57
SHA1 f0997bf44c8528046bfa540a601db0c2d7659bcd
SHA512 09ccd8787fe4f3601c9c718211241b79e161cf340437ed22458ebb9596b4f02c790c7cf17c8573c2819b81f738e27c5b298cf264068dbd887a38db3c2a6a6b06
SSDEEP 384:noCcmyWCXsNZ0+9zKELo1h/j2sVusmdusYobrAe4KV8p0BHV:LcpXV+xK7r/f1mdPjkI8p0xV
TLSH
T15A826D316C3C2C779DE3A719F54B361B8EE4613B56946F68DAEC9F1D00DB1A8130A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 120e37ac4d52ae919aaef97b86870ae2600798b4453bd6a768febed8900381a0
MD5 c9ac6c27d2ae4f3494575d0feea715d4
SHA1 958375572cc93dd689eb3e2c49a1a30b7f8961f2
SHA512 1b2264489ee213b2d2f007581d466beeb06b28b67b1238727dc10422bb2f574bf1e66037f7c9b4cfce04415dfa8f023c8830ecce0a5abe6f593931afd50c8bbb
SSDEEP 384:nfiFxCcmyWCfsNx8TUNTUlIRt+9TrKE4vu5BFfCXt/j2sVusmdusYorrAe4KV8po:qF4cpfcwg/+1KIUt/f1mdPTkI8p0xV
TLSH
T1F1D292F198D79976E8AE4B87A33E6D068EBCD11375885994FBC85D0CCC861BFC306812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fdde6735ec9babf6b12b245262c9f6bd21359d9bd57802c52067294a39bc3de5
MD5 9ef94239b5307c833d772bbd6b3df2d0
SHA1 dc1d9af7c51223d4d62c50ac405d9c03d44cdbe6
SHA512 1a935cac79cc81c7b188c38a2b983b8fc972fe1a2088d673448c2cc802fa2559b7522de16118399263d1b847cbfa8e71adda583b8bd9a87ba0798d733c525af1
SSDEEP 384:nzCcmyWCXsNZZ+9zKELJe2h/j2sVusmdusYobrAe4KV8p0BHV:GcpXe+xK2eG/f1mdPjkI8p0xV
TLSH
T1C4826E316C3C2C779DE3A719F54B36174EE4603B56946F68DAEC9F1D00DB1A8130A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5fb83af4f93f388f64ed50dba2741d8463833f8206d10ef6abd889413717e656
MD5 dfec4c67862ce1c5e55f0c0eddb97c26
SHA1 9f4f794f3c483d487184a850c5b86260b2a51803
SHA512 46b41ad20e4baf0c32bc3e370f94e9fc2585d60c838946eb51d5180b98ea551db6c095ec0018153524b951664f7af9dbafdd9e8fe05c7c93d925a9aa17150d30
TLSH
T148E00163D70442FFC93D6B7402C71B303BB2A23283EB020A09210A787C03B806F30EA2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5712058ee8624678c76f5e72dec0e22c69f73285f8c277295cf7638e338603ab
MD5 e67cdb7d6e2cda58315ee3d7de4d92f6
SHA1 277c94eca41741b4e37586b02ad5a29aa5dbde00
SHA512 83c65948829982c92d187b676d5a15a5fd9b51cb467f74461b38b2e5ad71d29c9bfbb0b1c11d87bb1e953dec4a85f730c171f5b937f2abc3c7295ae281ed8414
TLSH
T1BBE00966970441BBD02C133152CB2B2036F2E12287F706075E2402787C573046E30F62
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e6964e9806d15c529be1bb82f7d310d2484d4d6e81d7a7d5af7c3500721ea2f2
MD5 924c8165dac4cdb1235b89f1da98cf8c
SHA1 e1c2100f1595d0125801b58adbe0a86323eb04ac
SHA512 14b1f4ad9409ede19079d72177892bfe8764ad0ad0df96374e5dc54377b6308656a8e38c9545c8ba6a45cf994f89c131fc40d60b41997deea8421646340aa133
TLSH
T16FE00466970441BBD139277292CB2A2037F2A12287A706475E2402787D563046E31EA2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1ff60f445f90a0abb5010dc67c3bb8180e956ef714ce31c8a58a1f0e3ab7aa75
MD5 a290f7ed954c678c5928ccc8a77fe478
SHA1 be9414b4c882f6ad3844aea39a5a46aa81ecdf34
SHA512 529ab8a34584c44634f06e7dc9a3a4e917f8ae3775c23f9323a095f58554b1f9dc6d0ce2de4f67a3ed97e069fb4599db362d154afa9f4618d7721d4e53e8164a
TLSH
T1ACE00466970441BFD1392B7192CB2A3037F2A22287F7064A5E6402787D573446F31FA2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 be086d6bc387f045c53518a62a6209f40bc9fa272ce5f45754b1bd4f371b6d3d
MD5 9fd243352938ffc4bd11e008d01aee25
SHA1 45d9d3667d6fcab19b7433cb0cc298c7c537cd3c
SHA512 64c38d8c22225295b2aa140cfd73d0c6103d8ec9e821746fc270e77911ed0c6fbeacdde87de4be1a28881df009ac12616089b5df79e8f73c40303f7b441e0277
TLSH
T1C5E00966970441BBD02C133041CB1A2036F2A12247E302064E2002782C563005F30E92
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2dd05b03edf0796baacae5a22a18a0155f39f8fc0557883da93a8bd55380f598
MD5 2dceece0a2e6a7078093022980ea6601
SHA1 2d455cd036807bef6ed511c0a2fcf830de3cb2c1
SHA512 55ff3800ba2e75c7794d5b0914f7b1090357049f216dbf8f7d92a4e453fafad3b151703d29e73862b93f5fefe4e47c351cdee7f21dae2c44cd007bc7a4f29f1f
TLSH
T1D7E00157D70441BFD139277551C7163036F2A13247B7064A5D64067879573445F30B92
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 660d965cc5877ec8472928a0e7da2c29d43ca4126d237b247191b4130b1cc45f
MD5 978795e25040f91ad94b1b105fe66ba0
SHA1 b4db2216ed3a465b0db96b8f64d704c156534006
SHA512 4dddde152569c5c568e1bc9aa7039b88680dcfeb6b2d5979ac2d9b96b8e054aa578612130aa0809aa4f756da8cecfbc6b002e383a0a7e711e6c52bf63678a686
TLSH
T1D9E00123E70442FFC93D6B7406C71A303AF3A13243EB020A0D210A383C03B806F30AA2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6fa223273e50b077cfed11ef3e0e70d77e34f9e87dcda8a5c7f6d200fa2e6f8a
MD5 fe34ad92e58ad069755e9374b6d58914
SHA1 ead2775465750e24bfda1d9026c1bb9ba54e9a68
SHA512 e0a544f7691afafd820d8b160af11dbd86dff6c94c8ca038284085eeca74f4b377b6434d3c08c45a58d78eb48095c303d67489bf3ab65f70862b043afe28e7de
TLSH
T172E00113D70040BFC13C673402C7163036F2A13243F7020A0920023838033001F30AA2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6ec5bf1cb0a6ea52a5e1739b0edeea77e56625e1d877582c783e87f1f46c4246
MD5 2fbd2d30c7608c5695e6326117bbdc94
SHA1 b7be959dc90d3ede027e985064f59938a025383c
SHA512 f29a6b5e4ef9b24b656eac4ae336f95182976f28a094eecebdd415740fe93023ee028ba513e009c791b504c06fe7a657d1342fb35a1a26665b23980f7d05ff2d
TLSH
T1F9E00156970041BFD038133041CB1B3036F2A12247F202064E3002783C573005B30E92
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7ab8772ca0b02f828522eb78033d2cfff5ac3474b26a52f4947792ec430695b5
MD5 dccbc772e14960a602657c79e3805a57
SHA1 9ed2a4005323119765735e8054f8c1def21231a3
SHA512 96187774baa101c352a20e0f6567cbb1515106b00d9fc669619fb3a55cbb314c556df53d2568fe2f2a7034708c5af9774d6ec035a2d0b21d30368de2d957d2b4
TLSH
T166E00146970041AED038133040C71B3026A29122479202064E3002682C153005F20991
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58b968.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58b968.TMP
Size 392B
SHA256 3ac6e43769cb70ccf4094c95c4ae53411bda56e6a97f1cc8ccdd986a26b780d9
MD5 2a92b2bedd3da0e308c08a96aea5dc4e
SHA1 97bc378c8456c974d5f7b21bf024e87a1ca4f546
SHA512 89bac4baaeb9387d9a8b912d3a4dbe1724d39ccef55823ea3fbf36cae0de497ee2ed0c877799ea4e0d9477d0418ea8e9a4cbf8ae593a1035787679b5d08aea21
MD5 SHA1 SHA512

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
MD5 91c80c5508982eaf5438e9211fb2a52a
SHA1 78c965a36a9f74d71dd94601ae92afdbc93f5f95
SHA512 7bc90c935ea510bef580cd0117ca240de86a2985549ab9e15e6f5b819635d81825fd42e6e9a251214ac4b6e9ec2411d9c4cdedde28bc5552970d614f0053e74f
TLSH
T1251112D25D6D2AC2D1BE0F6FD08779FD40D8C216F2A8707A1854ED54423890E144187F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
MD5 0ad641099b286eebf58a290b5bde86c0
SHA1 922d3e17ccc238f1bf276051af3ad5cdffb20397
SHA512 8661612608382058967a1f2ef25c7fbee41a3c2c748838346c044a48058ba081e84750e4a0de424903813499876fa7f69beba345d8ebc396340d830f1a7c81e0
TLSH
T1220110D29D7E26C2C1AA0F6ED08B26EC40C8D106F19CB07A0C8CF9D4823880E188283F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
MD5 bf165c172af1f75083dd4c7e8915ad0e
SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
TLSH
T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
MD5 2a769156fb0cdd33783892c7340dd22e
SHA1 4b7d27850b335fc293c0ac5f52ed9cf1604cb52f
SHA512 3bb6cd746bada6a1370fd3186f3c8ded4319de162f80beb35ac87e73d46ede19407f4cb1d05ec658f6072f3e42a5681f64d8b69a136afadbc7534d3074670bac
TLSH
T1801114D25C6E26C2D57E0F6F904B75ED54C8C216F258707A0C58ED94413840E144287F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
MD5 96814d4ed361ec8de1547566e582b0de
SHA1 f9588e0a74d9790991b254bfb0650af55810f778
SHA512 bebc0e98c4485bde4609e0a92f0a27ac1e621a63e154f220c2b8c3b11bfb2d4cc2443d6274f6046d42e28b28478f719f28917112090b3cb14fb6adab24770b93
TLSH
T12401C2D25D7D36C2D57E0FAED04B75EC54C4C11AF29C71BA0C58E994523890E244283F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
MD5 a15cd0a1e68c6b9c3945d3192091dc4a
SHA1 5162188f19a245162594501e5febb31a7626aeb4
SHA512 a7ec103cf7c6fa801e1850205c4c06cadf96c21b1fd56db058a2980c472b1ff2f25c69a73f943de8dff815d69217995ad880e85ca7b8ced8cfa1c506315f7368
TLSH
T18DF0ACD29D7E35C2D5AA0F2ED44B25EC54D89606F49CB57A484CEAD4913940F248287E
MD5 SHA1 SHA512 TLSH

Submit Download

a8d0fda9-4dae-4916-a1bc-1bbd35fd7818.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a8d0fda9-4dae-4916-a1bc-1bbd35fd7818.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fe321ad9f5d6948a90e22dfefdfe860d5a2fad319c32351015cd050d83f0657f
MD5 81c7d2c3fdef099759a28ae8b53eb913
SHA1 ec4669724fd46e906b7ad444ac20983d99ad4516
SHA512 d4db18c0eef82d04cea9d004d9ea70a8afaac8a3317959805e76d6b568ee325bdcbec0a3ec82b19903f2f2db4a15be4f11a40b4aa0b4ebaa4c401ad93f1541d1
TLSH
T1BD412D58A6FA114CB3B76E1A5BF6646E487BBD772E46D09E00110E4F0A23A40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

9dc78e5b-435f-4941-9781-522e8f9415bb.tmp

Path C:\Users\Admin\AppData\Local\Temp\9dc78e5b-435f-4941-9781-522e8f9415bb.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

afb2c06b-1830-42fc-913f-7eb2cc4dd08a.tmp

Path C:\Users\Admin\AppData\Local\Temp\afb2c06b-1830-42fc-913f-7eb2cc4dd08a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2448_1282860390\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96709500-1728-4d39-929e-8e5974ac2179.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2448_2093546929\96709500-1728-4d39-929e-8e5974ac2179.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 be9046ff5ed317e3118cd22f753fab802bef60f8f346b88a69c7db62bec44d11
MD5 e3fabc908f57ea34d63da9421a70839f
SHA1 e11828e5b2e058ccee072fd617427f4101009c5a
SHA512 c50f92f4ac1f861b7e7c742afe5d0600e5f8675c7fd3733260df5c0c72317d5eedf3dc5e977a6ef1f7fd87206c5cabd4eefc5c1aeb310a91f109ae592ef6738e
SSDEEP 96:9qQiJmusU4L+ANNQiJ2nHh8IJFnwRcFIaXH7NQiJrusMgAoNQiJnIusl+:qg+/A0Bb5N57zBIz+
TLSH
T10D021F10ABE61616F3F79A71B9727755DF3AF80959248A0E009042090E73F04D96EF7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Xeno-v1.3.40.zip

Path C:\Users\Admin\Downloads\Xeno-v1.3.40.zip
Size 6.7MB
SHA256 e9dc8b10b9ad9642166e8bd6ca795396c0f2940dcddbe711ab3b224ecb5c2641
MD5 32cfa82ea52789e3aba4f2e6bf035cc0
SHA1 c2cd96fed1780506fd658470289702c5e965b225
SHA512 9adb4888ddc062a385fc43b2246bfa9b38b0f925c3defb9783763a09c04015ad55f075a72b7c3dae9d9be1385b4cbdde575e0d7116f0043a8e8a75d4765ff05a
SSDEEP 196608:RxFTWNpLGBvG7bM0m2XaCzY/sGR28mg8jJcPdwyfHA:RxFiNpL/nM+hj8mgLPJfA
TLSH
T13D6633DD5AF800C3F2346239AD310BFA759372556716E95AA45C05A632EFDC08BC3B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2344-532-0x000001BA9BA00000-0x000001BA9BAAD000-memory.dmp

Download

memory/2828-3364-0x0000000003100000-0x000000000322A000-memory.dmp

Download

memory/2828-3378-0x0000000003100000-0x000000000322A000-memory.dmp

Download

memory/2828-3380-0x0000000003100000-0x000000000322A000-memory.dmp

Download