hxxp://projectx[.]cloud

Analysis

user interaction
yes
max time kernel
319s
max time network
322s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/05/2026, 23:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://projectx.cloud
Sample260523-3ecv7afs8x

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
51	raw.githubusercontent.com
55	raw.githubusercontent.com

Drops file in Program Files directory 26 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1969203736\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1147858017\classification.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1583395345\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_143248423\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_2132266708\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1146382097\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_693016064\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1147858017\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1147858017\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1583395345\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_143248423\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_143248423\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_637478026\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1147858017\automation.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1583395345\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1146382097\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_637478026\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_693016064\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1969203736\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1147858017\extraction.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1147858017\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1583395345\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_143248423\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_693016064\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1969203736\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1969203736\sets.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1852	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134240523312708270"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{E223DFA5-CECC-4E11-B78F-C817CE8FF16E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5804	msedge.exe
5804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1872 wrote to memory of 2720	1872	msedge.exe	86
PID 1872 wrote to memory of 1852	1872	msedge.exe	87
PID 1872 wrote to memory of 4804	1872	msedge.exe	88
PID 1872 wrote to memory of 4804	1872	msedge.exe	88
PID 1872 wrote to memory of 4804	1872	msedge.exe	88
PID 1872 wrote to memory of 404	1872	msedge.exe	89
PID 1872 wrote to memory of 404	1872	msedge.exe	89
PID 1872 wrote to memory of 2132	1872	msedge.exe	91
PID 1872 wrote to memory of 2132	1872	msedge.exe	91
PID 1872 wrote to memory of 2132	1872	msedge.exe	91
PID 1872 wrote to memory of 3752	1872	msedge.exe	92
PID 1872 wrote to memory of 3752	1872	msedge.exe	92
PID 1872 wrote to memory of 3752	1872	msedge.exe	92
PID 1872 wrote to memory of 3480	1872	msedge.exe	93
PID 1872 wrote to memory of 3480	1872	msedge.exe	93
PID 1872 wrote to memory of 3480	1872	msedge.exe	93
PID 1872 wrote to memory of 2220	1872	msedge.exe	94
PID 1872 wrote to memory of 2220	1872	msedge.exe	94
PID 1872 wrote to memory of 2220	1872	msedge.exe	94
PID 1872 wrote to memory of 1264	1872	msedge.exe	98
PID 1872 wrote to memory of 1264	1872	msedge.exe	98
PID 1872 wrote to memory of 1264	1872	msedge.exe	98
PID 1872 wrote to memory of 4676	1872	msedge.exe	99
PID 1872 wrote to memory of 4676	1872	msedge.exe	99
PID 1872 wrote to memory of 2276	1872	msedge.exe	100
PID 1872 wrote to memory of 2276	1872	msedge.exe	100
PID 1872 wrote to memory of 2296	1872	msedge.exe	102
PID 1872 wrote to memory of 3644	1872	msedge.exe	103
PID 1872 wrote to memory of 2296	1872	msedge.exe	102
PID 1872 wrote to memory of 3644	1872	msedge.exe	103
PID 1872 wrote to memory of 760	1872	msedge.exe	105
PID 1872 wrote to memory of 3232	1872	msedge.exe	106
PID 1872 wrote to memory of 3232	1872	msedge.exe	106
PID 1872 wrote to memory of 4020	1872	msedge.exe	107
PID 1872 wrote to memory of 4020	1872	msedge.exe	107
PID 1872 wrote to memory of 2736	1872	msedge.exe	110
PID 1872 wrote to memory of 2736	1872	msedge.exe	110
PID 1872 wrote to memory of 4752	1872	msedge.exe	111
PID 1872 wrote to memory of 4752	1872	msedge.exe	111
PID 1872 wrote to memory of 4092	1872	msedge.exe	112
PID 1872 wrote to memory of 4092	1872	msedge.exe	112
PID 1872 wrote to memory of 3084	1872	msedge.exe	120
PID 1872 wrote to memory of 4628	1872	msedge.exe	121
PID 1872 wrote to memory of 360	1872	msedge.exe	122
PID 1872 wrote to memory of 2552	1872	msedge.exe	130
PID 1872 wrote to memory of 2552	1872	msedge.exe	130
PID 1872 wrote to memory of 2552	1872	msedge.exe	130
PID 1872 wrote to memory of 1980	1872	msedge.exe	132
PID 1872 wrote to memory of 1980	1872	msedge.exe	132
PID 1872 wrote to memory of 2220	1872	msedge.exe	135
PID 1872 wrote to memory of 2220	1872	msedge.exe	135
PID 1872 wrote to memory of 5300	1872	msedge.exe	137
PID 1872 wrote to memory of 5300	1872	msedge.exe	137
PID 1872 wrote to memory of 5568	1872	msedge.exe	138
PID 1872 wrote to memory of 5568	1872	msedge.exe	138
PID 1872 wrote to memory of 5684	1872	msedge.exe	139
PID 1872 wrote to memory of 5684	1872	msedge.exe	139
PID 1872 wrote to memory of 5684	1872	msedge.exe	139
PID 1872 wrote to memory of 5804	1872	msedge.exe	140
PID 1872 wrote to memory of 5220	1872	msedge.exe	142
PID 1872 wrote to memory of 5220	1872	msedge.exe	142
PID 1872 wrote to memory of 5220	1872	msedge.exe	142
PID 1872 wrote to memory of 5308	1872	msedge.exe	143
PID 1872 wrote to memory of 5308	1872	msedge.exe	143

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://projectx.cloud
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff8ab2bc188,0x7ff8ab2bc194,0x7ff8ab2bc1a0
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,14204261234773282871,8110833846138600811,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,7827552626341658316,7918314790409707908,262144 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,11405251536467399835,16095016417675191692,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,9287140504590150553,3972098291804322935,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,6813159689626535323,8592447401192289107,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,3915480461725614003,4542688682735973500,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,3105494860976345561,5585221789536916621,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5112,i,10132871371239778150,8488520133090677655,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,13599637360539228066,10905138081761307138,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,12976428604651702448,16149301593893843918,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,16524392878274784021,11030854527577367052,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,1781666101128787139,4274314851239795249,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,14957010872034892915,6082682276640616489,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,14957010872034892915,6082682276640616489,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,16957597606928956157,17642023967081127389,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,6017547113011226689,7988154490359405523,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,161525307103332440,5739530605564436988,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,10507238097059461162,14512443563348105929,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6520,i,509996262629916663,18245665184967838857,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,14995593929350095228,11802543215691823155,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,5600492598068049943,1106324041511950217,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,12235988123188371618,12066490215863153509,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5388,i,7558684175385365435,385807630621893390,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,18055907794958929083,15741554738033663913,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,13338626037742269506,12436113220635961618,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,9326198319580678841,5721996806859243294,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:8
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,8424507604609857084,17484397613127625831,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6664,i,12242341004957162838,615842587788321801,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4512,i,11677565113747612752,6871801284099001820,262144 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6668,i,2289694361862914269,282795506904702793,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6748,i,5075186964803461376,15287167060027067062,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5736,i,13905011113114892182,16209247862115591026,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6724,i,15571096131860225861,15962637553936394538,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6920,i,1168463208067291328,18380991177072094991,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=5264,i,10691460088708525829,14361281009627975029,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7108,i,7218560003652785123,295701389512438661,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7180,i,18132118609172415558,15620617647475403449,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
  2⤵
  PID:360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,6372556324526864405,369300854166565397,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=1508 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,17353053376360381595,8200671008782520368,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=1508 /prefetch:8
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1300,i,13346886535948345110,10266703038763262430,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,8528651195989774789,2991067614455019708,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7544,i,9774885363231417787,186720886874522108,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:8
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7756,i,12752705655494141410,12959648779456269171,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:8
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=3512,i,2032356781532240475,10950856319110115479,2097152 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,10758402692398942348,10408686518855388970,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,15574022810103706532,595955065172377995,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7272,i,7119124020500116392,16835307690667450089,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,11944784543736293281,15679160594510140605,524288 --field-trial-handle=2308,i,16217763047113242677,17456672826249561542,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:8
  2⤵
  PID:992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1146382097\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1147858017\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_143248423\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1583395345\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1583395345\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_1969203736\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_2132266708\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_637478026\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1872_693016064\manifest.json
Size 160B
SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
MD5 a24a1941bbb8d90784f5ef76712002f5
SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
TLSH
T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 4970154c03e71372a250182be039e454337be64d232075875a85fe45679e9791
MD5 f5c5af3b32bf2f99864931d9fb64fb42
SHA1 f24e357193c4d16a3e2dd7ccb217f49678a9ab6f
SHA512 e13cff7f429aabbf53f978beb247cb48c5b6dc77f3bd5cc5401dd0008d1b0788c163e99967285b341713f8d21e369c5402e6a1776cbc28df24efbcdd678eba70
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T11EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 df0f2ab00951f3d67f3f1989fe48bd158a0c564021a2ec66ab49612be8d1c03a
MD5 08c8cf555d74454bc23d7ed3318653f9
SHA1 8be669e5b7801b656654349d517d351d622eafd1
SHA512 bb6d9cd525650c5a6b990eb9a0070fb6b6d0f4934b736307657a464316b0eba4b53a890ba217d711065520eb35024bd9b290f779a9b7062e4e8fa56def4cb987
TLSH
T11DE06F2957ECC2B00D00A6C6A7084308C0A0B00BA78CE7CA3302E88CF692648838FCF2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 34KB
SHA256 ca36ea379200cb2b9850c80e55a943e4c5302fb294357343c98d014d4433757e
MD5 6f6a46634ead7af938f86482a2c6253b
SHA1 2d10d0a3a41ee3115c24aa0ceabac9e680944852
SHA512 6bd0a5153354b9935206976afb811c12d65b6900cc113691b4e7fc07b149ee460de8aa94a21723a41ec5ad3381a03271bf49f37e1e34be56b8c9721d023902a7
SSDEEP 768:Bnal3EgzIkJ9ey9z8H+QSRaCPkTUVFBwRBeRyD:Bn6EajJ8yh8eQohIeRyD
TLSH
T1F4F2E1CB7E8840699454DEB18499675800B06FDA683D3D6F232A4768DB03CBDEE7B25C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 400KB
SHA256 a4c853620a7c2d01f7c75db203efe9c2b8bd6d0e7ff55c8fd10c12faa372d407
MD5 52e528a49d253fd907626a5a3c786cba
SHA1 193a55bc10e185141ab0e52f5dcf6bd85aeefa79
SHA512 2fe7e0d753323d3d4972d629be99836aca2380355b914d51815e7fe113880c71b53eb60449420649876532466b08def8edff02b586b54e9ce77262740e38eaec
SSDEEP 12288:R4d+ZGK5AlQbQvgD897xGl/XmotVbc0jU7hBeKrcUM/:7YK5AlQObxYXH/QdhBrc7
TLSH
T15B9423B6B0EC64314621221DFED98783433229B815591B8F327DCAAD7191F47E7B2B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
Size 96KB
SHA256 b5cbf937d316c21e9ff19bca9141f56204c1134877848d77c519271ed0ae3e61
MD5 19b0c2c779b3fd711e3fd0ea54eb4c2f
SHA1 bd693868f58bb5b4a763d07fff14e660b8ea2e3f
SHA512 1efe1c6f1518ee7e017e0a97b31cbaa8670dd1d45dfcf07986e7888a3728b7c69eefb3046ed2931e59c361dc553804fd710b28a7609088090408be0beec9c7ac
SSDEEP 3072:+HGoXXyDLanLSN9xMhV6FmmC6e1d947mQyU05c:+XiDL/8Q3AT46QyU0y
TLSH
T19CA31229BFF41B72E074649EEDC2C3D5AD72938699E4362761EF8077319119983C3E82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 67KB
SHA256 f24dfdd6bc3511efb4058eef7e8f89dbfe260fcd8c0d3641cf5738d870365630
MD5 e9fe651b65b43390006b6ce80719c6ef
SHA1 d91f0e4e4f34de21f59322209a8199b7defcae3f
SHA512 4fb1b78cff7988aba32e631984aaa97d23620fc460b0485f91c48f22cf19884e4202c7fc1c648107e6f75b8f7cc272e3388f1b9ef4eca0421ebbc76ea750d547
SSDEEP 1536:ojvnMnsRAOXWGapXq8t8wsBbNGQKV0mdWS0BF1ChpDQqbpEr3T:ojI2XWG4a8tcHubN0BF1gsqIj
TLSH
T1DB630290FEE1B7FD46C8F80B7E48D45C0C8748815AB2D44F9F572CEAA82B604A65C775
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 27KB
SHA256 97b5c3b18d66eefb5c1c8629a0a979875a7334938a121d940ae9eb4d4f14dc9f
MD5 f3c0878adb6e3d757c88acdf6cbcab23
SHA1 1e1fbf12f0f69a382f1c239ac3525b6582733a8c
SHA512 884ba4bf171c912ba7f9422046a2e824afe386a0590d0eb4628314f83e165037cd8b5a88712083caf6164f343a1d0887ff2646d41e3a9313a7527e0761c5ac4b
SSDEEP 768:KU3SHZcK0jhwdklmvg1a9xYHGY2wO47HG:5zlwvlMHnDG
TLSH
T16DD2F150C15DA61BB72D1AE9CF5FC7394DF4EE80224F780656ADF06BDAB00115B8970A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 77KB
SHA256 bfafb50e2396237773469600c02f72886e76c35f0f6328fe8d8f43176faf0466
MD5 41e923ad2173d1eda236f6de2b44611e
SHA1 a109502edc18363426a04e28690f231197b3ee8f
SHA512 8c69c1d1d99882a34f133de1876b3be10da4707a3f9146d7e44732282a6cfc0535e8d1ab1020b2152996934395ac9f789e3f01b9cb00511bab4077d58bb3ba04
SSDEEP 1536:vRj5PjwI/z8A9BPAf4QC2pRQNw0C4xfUIZtiBtQWCvj1sSvlAEoVVdjuFUFA:pxrXOiE+3vpcBtQWCL1tfoVXSiA
TLSH
T1717301DB935F04CF786A91927EB973428E285C3F851E122E1EC4C16643FB979C1AA70C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
Size 19KB
SHA256 03f3736b7fdda1c0bde85178a61e30b0ff608bddf76d98afad7bf9b82909b59c
MD5 d1168adc8bc688ea09891b76fbfd9c0f
SHA1 3d81ef6bf679575c6728d2903a84ef5f8ca315fd
SHA512 1cbcd471ab95ed351a9a717b9b0660380628e480eee99557c6adc3516fe4dc320f0c7c5a7baff7e79d817b45190bf9c9c63fbbd55342e8725f45be1a26eecab2
SSDEEP 384:uK5Cs5V9bAF4JcdmCZWrXU10ev0Ap/K2fTokuzKlu0yxV3J1Wj/3Cr5:BCOV9EVZWrE5vh1kkkKE06JGO
TLSH
T14792E00EE862C06C8448C8B91006D1F0AF9381F74326AB4378FFAB9A55F6DB17B93171
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 59KB
SHA256 e56f67232ef975b3097a84e3fa7f8a4b0288681995723ed9e3c712f8ae09a77c
MD5 68235b85330b457d7da53397dc8b769a
SHA1 13896d11cfdd5ff526b948f264894f1d1984e32c
SHA512 458e28b8ff4df30736a3106b4c1f6e1cd0a9a54f870b7f104a2fc0489bbc681dccb81d0a3cf6307d9c8680942a1d695ba7a9cd548e54013144282926fdcea692
SSDEEP 1536:eZRcbMx5s6mgb57WxAaOGmh41svJr38Ovi89/Mw8d1xw4ZHydEY:enciLmjC5GmU+JL8T89/Mw8dwIHPY
TLSH
T194530244C4670BC87343C9AEE083AD7D69DF1139EE5A40FA971231DEDC5B1A88CED166
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 72KB
SHA256 b5bb8b05bcff78b66faf53800650b04ee085634c9291093d1f7e6fe4460e5d26
MD5 152913f8a9e6d1304df09c07ca6dfa61
SHA1 7fff4a11d639be448888f636eebeb8779b3be90b
SHA512 fc0d55a75a7910fe6feab04ec7b777e6938d1f777e34d8a2d88725a313131e08d34b65d2eede01a170ca67b09abff5e75bfff63df6ccde4670997d615aa0c98b
SSDEEP 1536:quTWYKgz6ehsYHrBwvj5RBwkeAl8Qm6Li19j/X8I8qPsgSk4s+:nTWYKOjsIUNjwzAl8QhA9j/XLKWO
TLSH
T1CD7302C7CB81AD79B84CB598C0A7C61A74CA942C00163DDFDD64F7E6C4F367CA858A92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 17KB
SHA256 b839510968946d1ee6647496711a20da5b79e0a94039549b2af70d9934bd072a
MD5 6bddefb8c7f77a07354a7c671d320b3a
SHA1 e39a8b27d50dccc6f7b0dc204b9ed9add41e2e30
SHA512 e8b13a6efae345d5c28c489ffc0905c6e3e88e227273b242c6a133fbed70885c474a6ddac1e8830b1e79e7566b82779f980f759c7b9e0cb25dc3f4918082060b
SSDEEP 384:RHYWadscIexeW5gKbMKPcIYXj7wC6efsLFllcQFSz5vPJ:RH7mpN5gmMKeRf6jcIYJ
TLSH
T19F82CF1A009088EC920F9443E48BE69BF3450B8AB45A738EF1DD44E73BC86B957E3221
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 5056dbd27e6385b51b7e3e3d29d46e99e3f3ddb45fb0a6d80776b478cdb97c6b
MD5 d9f5dd1392fc1e2bbb7da28841cc4c21
SHA1 0c48bacc7e85e71e86075fd4174519d0267c64ac
SHA512 2fa8258be9f325b41903a665fa9378dc476a0189c4fe62d9375726977ed1af26154709e9e2ce6e3c575e20ef7d9a71ebd89655b95b21b62ad4a355ee34bac780
TLSH
T1C471300C12263593F3531174DCD1E6CBB471909E44776F1D0588DBFDBA1A711816F50E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 51d0f68b74ec0318474e61d3261d601fb1a7eabc0cf4904ef6feb1475d69d3f6
MD5 7aad5ece8f80dce290e54917fe36648b
SHA1 c3d8563281d73590e705a545ec437b316ade00f2
SHA512 0e221abd2c07692c9fc8ddeacad51275704e433e9f9cb1fa9b4bc3789f766636b77ff1f0b018d161ca36bc377ab540106e49e07c807141f133d7ccf1ce6218cf
SSDEEP 96:A2zil3WEafvuL5odD2rd+1/EndbtVJMWcGMQvOp9LOdFraCXA0FVxoiwdpAAPrKf:A2QSfvNdDQV9cQEOPJYiwbAAz4jn
TLSH
T16102D71923D67852FBD348B1F8D0AACA7471409A4A738F1A0B808FBDBD03B850D5EC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b1a1e46c0dd1c73eb89b5072aff081e51176dcd5becc9b92eebc4bdccd164cf2
MD5 bc7b94ff7f3f331cc742b48e49190231
SHA1 215a0d5be4ab296adb1ec6948d096df1c46dfde6
SHA512 bd3e6c93998320eb3df60003afbd2bed0aaab3246735866475a38bd5b8f8236ab5488547be4ee92a29c29f0428a6bd7ac1b32a973216dcbb8bc60f039a7a28fb
TLSH
T119713D0C222A3493F3631134DDD1E6CFB8B2959E447B6F1D1188DBFEAA1A715816F90E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594329.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594329.TMP
Size 3KB
SHA256 1669dc26413a6728d91f1b9ec4cb4d0227c7fdcb07d4453f022f8b6eebed876d
MD5 173d2bb12c70c4b970ad0b21fdf65e12
SHA1 0cf984d2bf1418a1b1e431ef1dcd3969ca6eeb2d
SHA512 e5e71595c3f9f1ce44f39ac7ac496aa6a11aa47c126ccd17f59cc8c959ea826eb876be52786f85f9afa06ff372268ab7849de8d940d1701b341746e497b0165e
TLSH
T1F071301C222A7593F3131134DDD1E6DBB8B2809E49776F1D0088D7FEAA1AB15816F40E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 08d0316ff4e198b5c90d0ae12174fe7949419d70cca6b46317cfd061296c1723
MD5 fda082497a9f0b981d2c57f22fee99ce
SHA1 da1838ca3534fb5af36c036de079d918159b0f0e
SHA512 481e7af3ee7d2e542d6dd88e884bec5fdf853df5985327da3e7a9cde6871d293621c58713ba26ffcda8bf3e3f9493b6717080e14f8de3721b2d4e4417719e657
TLSH
T1248198A3C2E4CA2EC92155F0B7186E1BCE5D0519536C3C67C9E4EE4FA3E2471E201A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 bd3b42c435699ebea3854db4f9bf75101ec036028dffc69f0bca7ce3d6aa0cce
MD5 b7c584e06c7e749f421baa648cbd6680
SHA1 dc457865f49107f59976ef941adb3d3877b310c7
SHA512 2fc6f4f9267c0b1a47ac87dac38ec942e29b1a37eab772f1ab9a15d832832cbe0993b2576afeb908e1dad77a0aaaeaa5fe5fcc5e1dacf8510dfb7ca46a0f78bf
SSDEEP 384:D7sohHylepmkPiuieUa1BsJe8eePaGMl4ALPiBo2gc57mTyNjl4NAaOrTaUGQ7Bs:WI+zlsX0lA
TLSH
T10942A0F3C3E48A1EC82156F0AB247E1BCE2D0425536C3C2A89E5AF4B93E1471E251B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 4fe66ce6aa7094a178f9bdee7363cfdc2701700e673dfdbdcd34b461c8f2de76
MD5 1cd08b9a7be8d12788a204cf2890ad36
SHA1 d621b1521c2d30dc2bbccc81eefcca4da0f46e11
SHA512 f20dbb5276040eef8156d74d9888aaa5763c054e62e2dbe1f71ca2ddf5e0283fe7fd6b47b0b147327d8bd8b43dcf9d75ea4cdc359f069943231fc52b4083bcb1
SSDEEP 384:D7sohHylepmkPiuieUa1BsJeJheePaGMl4Asio2gc57mTyN84NAaOrTaUGQ7BlCo:WI1zZLX0LH6
TLSH
T17142A0F3C3E48A5EC92156F0AB247E1BCE2D042553683C2A89E5EF4B93E1471F251B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 144ceaad4b5269c11a7a69522e30d1c57f8dc74d45f59dbd8bd61518a41fb77f
MD5 e9984a8633c5911a5b7f2952a10b1f5c
SHA1 9014f0944c32b328c91e4ae22aff1fb226b7c03c
SHA512 ceae6a74b13c7256a8193a962b53f9f59b5a94773c88fa2d5f89701b88af1751b3c00de04432de42852c7ae5e81c8ce92c04b0bb541442b834a1deabb1db3b53
TLSH
T174D02263231430B5A66C3E9249EAFCCFC33A102C18D3D9E821F0E8AD953546C6607241
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5b1068.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5b1068.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 06ddfbb4616c77e0cb5f9c912f56fdcabfe9444d1a6bc3a79b416bc097a3bf6d
MD5 24b3a6fecde82afa9019778a94ccb46b
SHA1 2c17686b266282917efd7cac31abbd226655caac
SHA512 3746fe72c934335a84cf534345f5611765a72a1d05516c81a195d22b9b9354d8b371ebcac981a76f4c2d8e4002d097835330442825d993344a002197abbccf2c
SSDEEP 192:sxZoR5yM/jK1Ml8Mky/fds2+eoEdppquEHW6+WNYYX/Y43/AIgyfJ:sxZoHMy/fds2+e/8Hbb/e4
TLSH
T1E852C712AA389977CDDBD309BA557F53D6F94472E2900E44E9FC8A1C00E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 b8ffa3c91f0d94a8fb03106c59da9e75f91745c487df5a5e8f12c6cb8841523e
MD5 405de66b63e447dfdc2e02f523b2a6e6
SHA1 faba79fc368e24e17b2b93bec795727c09c28481
SHA512 d4f02ee72004026c83aa6ed4c4bcab5389ec21f17a6b6ede60c072aad91291969737eb62b9846acc9b3b472d11d5f0aa61d1e78d8d0d5f20d5260bbe29dfe4c7
SSDEEP 384:sxZYiqtm1y/fdsp+MWOe+v8XeHbysL5/Vckci:sgttm1y/fE+MWR+3Hb9Chi
TLSH
T14D92E85365208977CDDBD619B961BF52D7F90462CA904E88EAFCCA0C00EA6FD3513C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 42c9c50e3700486d6209bc936c4cbda00cc07af6face3a5f81c759718edc4c8c
MD5 006ce43309dd81f48e5cf4b8e66f68d4
SHA1 753318c5c4c0e31b21f7e87293e10f6501a723d2
SHA512 e841529b06496f484950fd239c2177344ef264c689956e294085f81de3092783f83336c94374b3e7bcb34ee861c3fcd962673ee016ec2d3f2ed0e5decfaff803
SSDEEP 384:sxZYHqtm1y/fdsp+MWOe+v8XeHbEL5/VDkci:sgKtm1y/fE+MWR+3Hbsdhi
TLSH
T13692E85365208977CDD7D619B961BF52D7F94462CA904E88EAFCCA0C00EA6FD3613C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8620de47365480c98b6211bade0c0e2663d115274ddc499fee99d9f755bafbb7
MD5 233e4366d1462f78e494e2627d9290e7
SHA1 f0e44cd4569f36429d49c5cef8db67f199934d37
SHA512 0067e2f0295ecddf62908f62b8a127d83b44dac0d96c9cc9d692cc3ed25825b7a0a702f060de221ff545df887b01c4cf74492b2755205ab4008f7ce277f38da9
SSDEEP 192:sxZYR5yM/jK1Ml8Mky/fdsp+eoIdppquEHW6+WNYYX/Y43/AIg5mfJ:sxZYHMy/fdsp+eZ8Hbb/ea
TLSH
T15252C716AA3859BBCDDBD309BA557F53D6F94472D2900E44E9FC8A1C00E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 6927794434629192885a33b2c3899cbe7f4d37bd5ce9378a41092d77c7618c22
MD5 066edb8d0e9a713514846d28f0fb7ddf
SHA1 8dd299231ce445fda50e3a345615ab741df2265f
SHA512 6742762215a7593012d6e136308d99f9fe995ac091b6343288dd4c73b8147474a586c0b2f3b340d1aa75ff54587c6137f48c132be90f0930ba0f0be979fb94dd
SSDEEP 384:sxZ1iqtm1y/fdsp+MWOe+v8XeHb+CL5/V2kci:s9ttm1y/fE+MWR+3Hb7Qhi
TLSH
T1FFA2E85365208977CDDBD619B965BF52D3F91472CA904E88EAFCCA0C00EA6FD2513C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 35KB
SHA256 4d379a61e85c66f2d4cddd2a3a9b297cbaf1eb65af081d5d4700e2c1511cd4c0
MD5 3108e032ff241455d24bfc9e4e1e6f82
SHA1 1df0dfc2a2091dee9f2077c9745ce41517e3540a
SHA512 784667b93058723a47e35ef02e968a7b3eb692090c98e024745b2fd232a9a14d130429b2b8436800859f56074a0d3d25a3464f7a761614a73d8720dfb6a28989
SSDEEP 768:s98tm1y/fE+g4nnc7WeT+DWu+4Hb7BF/si:E8tm1p+BnmWdWzM7B9si
TLSH
T144F2F9565520C877CAD35E29B87C7E3296AC50A29A84CEDA5AECCE0C00DD5FD6F03C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bb7f80a32a48bc8bf26d3079b0dc27e39583cce8cfc3fec7a85606399a10dd7f
MD5 32ca18d753036d71363003f114aa3a02
SHA1 d74323dcffc5f1aa6a258bdfba9e96a0d8f96f52
SHA512 20c5326b76e874da57645ae959fffa7b0c26bbad3f7562eb86622f75939d7ec612305bf1ca13479bd1ca8955a9c294dbef7a2fc8fd19170ec5df6c5e1641bf85
SSDEEP 768:ug8iJANWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVRALl6opdAroEkAUnr:ug8iJANWvx76ru1jaSALocdLwUr
TLSH
T143E20B3B680CCB7E4F844E9CEC2A6F966DE801CB5B944D5447FA890C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 3KB
SHA256 66ca1119266f05d162cbc5c7c7c87c6e3c56e7f7e4d493bd800113ee4b23c51e
MD5 8cc1b01888f55f4aa30843bdf01d2d35
SHA1 161a3b0fc3e9aa41fdd26b056a7857f0935ea65a
SHA512 711aa4fd440e76c9bc002cccbc4e8257bcbec7774fac59c202993d63dba5477a3c6745aaf318e263a6330a7fb1fd5941905e2807ea57e056f9eb080f4d5550a2
TLSH
T17351F88E9D461A68DE7C05F359B1045473391DCD2BD44E07A8DC90BCF9839AA1CE4728
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 1KB
SHA256 19ac342c6d145dfb55498431c70eb0652d9a9d8da394b475edd6e2559ebb267d
MD5 3b37f4efe958b82028f234d19becccab
SHA1 f668cf1cefa91643b1ddb8ff246c8bdb3826fcd1
SHA512 cffe6078835393ee8775a9375ce4982876f8768f1ba88f4e0bf3208b6df92d2955ef5cf15b3e2aeefd498ae89da31909c0bc8d2d53f55970101ce9a882c4d082
TLSH
T1D83166484EE19DAFEDB04572027168B4737184DC1215B713583C32316E2775A264B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac361.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe5ac361.TMP
Size 1KB
SHA256 9aba6cbb520c96e8a51e619474ccb6488a804be3b3ad92a9e14c457c3378b71a
MD5 074ba2c81afb07f032d25ab2d7d846fe
SHA1 e3d7a10b4f875e0bd95415a794fe0d927dd2d1d6
SHA512 30b18ea5c892a9b828af84f789f4a86f4ed11b1e068e8972702a837b5c7d1384d159e1553ec4e3561d2d478abf25793ae4a815aa3865bcea50fdafc3f862ff4c
TLSH
T1A031328A4B918D0FE8D4507B0E63B8FC733588404312B793A47C62399D25B8E2A5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 5f3e619c7b800f1654f2aaefec639517c8a7dfceea07182ca85b5fcd4bbff6f7
MD5 3a7730150cd0c2fcf5c900e22d8652a8
SHA1 6801306d62049abebdc3ff8a829e4946b7367b46
SHA512 e200bb7e0c84a3cb3567aeb4bf5a72b9da0e7eeb6b6d3c668c90ab0bb9513333ced233194c33850b357265d6540f7b468341c3fa935a1f77dfbbe6bed6e9d667
TLSH
T1CAE0C0F72EF72840FEBF67E1057098A00241B459D554BC8F5416EB8324A13523406C22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 4f73ca70c405b4d9d7547b7d58a2899a3eb6f95e3a04f224de65561803c13c95
MD5 75c74402fd9ba646fda716f39cd26de4
SHA1 8907577858daaef34b1f6b4e9c9d70586eb9abc2
SHA512 7196aebeff7265dfaefb44bbc1bbfbe2afd0f1b08e6ea71f181799427220f44ec96c083bcf4eee9fa13b138a3e8ead3ac5d3348aae4abe76655d2821d22c8f3a
TLSH
T1FBA00217D274104DC00007B4B049228C622AC9140E17321584E4D164B8562504573159
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b1b93.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b1b93.TMP
Size 48B
SHA256 4e3aad46601c7959a1ef373cf0fc8d762c5504de5d29a6349da6851ca1c62b28
MD5 37a4d262eabeb99de91ef664e0ab55be
SHA1 2dfd120127fd0fb9254d875c8752b093da37fc22
SHA512 89620e3893a28de9745b56b2a132aa6dc841faaeb1b591a21448124550892d6f0c54ab312fe20f4059db2a98f792615368fb8a97343a717ee75f73447fa0059c
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9df9fae73a38b0d43c8cacf644d21abbea2dbcf769f96d7d6c6c6dbdc6a0253e
MD5 7cc034c17722ac16e4a3f78e86f494f4
SHA1 94fa6aebbf6a5ff0c3aa8d24ef2dd2abe98795fc
SHA512 b7042195dd4dca15bed31548435d1d45dbdd01470e267ab941c7b2031e6a0486ad9afc871e5f94646a7f7bd039010b2dadddf01369a9e76b7ca8eccf7251499a
SSDEEP 48:KSVFVAVRVlVDVbVrV2dVbVeV9IUVlV2KzVTrV/V2vVNVmOVmVPVFVnyJcIPKFGcx:KMEQKV6uKcAKFGOy8KHKWO
TLSH
T19191741670BB56023C3D2408AB71962AAE4230633014E4EF7FE940B24D26E7A4DFEDDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59dae5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59dae5.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
Size 3KB
SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
MD5 94406cdd51b55c0f006cfea05745effb
SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
TLSH
T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6c1118ce80f178b0d210bdb0f5432576ca5ac49cc6824a28a92025a0f0848596
MD5 28da2b1eaa9958e26e3678a5cc6b358b
SHA1 93ab98cac9e3829864b6e1994b6c97562e6d53df
SHA512 e31ef076b67570399535efaff0bc59afbfe42b34faa24a81762595be3c73200f4ef359628afc16778cba8054be37ce8545ebfe9e68a1490365cc1b33ab63476e
SSDEEP 192:gONl6kDfQmiUy9xZ903ajzorhfQiOFlVVU6:gONl6ghCZ9D8hnO/XU6
TLSH
T1B402D83968782CAB9FB3AE49B48637175FA9112BEAD52FC4D9E81B1C00D764C1346C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 c16921653479647e3c5c82709fc854990ceeb1c6ba721ed105b7bb311ec3af70
MD5 3a29c26ad5de28e74309a4c544896162
SHA1 000d6659307651769ff9951dccec4b1257927f94
SHA512 4d1df686d82aa4c21e780644f7d5e14c8788ffecc439687a9a8b5fbc08f82440adde8498f040e6708fe8619b87b12c8cdf152925d41693e1fdf45beb3f58406b
SSDEEP 192:uuthsN/mTQcjZmnBQmiU181U4k03ajzorh/XHN0oLIOw/5U8:nvsN/4F4fArkD8h/Xt0lOYU8
TLSH
T12342093568787CB79AF39E45B04737136FA9506BD6C81F94EAE84B1C04C729C230A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 2765ed03b0427db606f1dd3667367dca6b8a469c0c8b8f582a68fda8a487c751
MD5 cc73ec4414648887e5ab336a25c54ad6
SHA1 ebade089bfe146150b0f72b28db79ba43dafca70
SHA512 626362061acdd3c19698e981454f27060cbe5168afb69e405b4b5e8ed97d561fb91f6c837ad9c634750d817b0c48973478bd95ea9a824b855a14176ada4a8d59
SSDEEP 384:nbiF1tNnNnb9YpsNh8TUNTUlIl9F4fNs20DfwdD8h/Xt0BOYfjFc+7ydgxai:2F1jZbsswgtKsU8mOYbFcTgYi
TLSH
T168C23A36D8B4EA7BBEF39B85B2067643AFE551A385C85DD4DEC85E4C00C329D130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4f54a673ad652fc71565a7116f1e1bfb15185598ccafbc4350a880d1e20d1f31
MD5 3a038ad49fdd0f90f2ec789d5906c3e8
SHA1 a9e5a7dc04a77240512dc5f3d5de20c67d717f29
SHA512 aa4ebdac0cfde9f9df70666bed69398a0988eca113fb15e73dfa74503df8c128de108e0cb8f1c14278bc97e6e21f2e3707ef0ee53a43e1cba96efaaa9988c673
SSDEEP 384:nktNnNnb9osN/9F4fArkD8h/Xt0lOYfjFc+7ydgxai:kjZbeCfDCOYbFcTgYi
TLSH
T1A1927C3568787CB7AFE3AA59B04632136FB991A7C5C42ED4EED84B1D04C725C234A837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 7a48d66fe56042a5d88c21e54a68e46b38f537df07653e86657e30ae89f566d3
MD5 fbaeac26333689969cc6cb6ac6a56b3a
SHA1 1ce8f0f14f0c760b8d9f4ed200d297c95e55bfab
SHA512 ae983e3c08995b7878a48ff076bd4088e8cdd5ae832cb959c041d5282637917794e65ee7cf333de392b31fa31a47567512ffb8d925bb5b533536b66b4edacb88
SSDEEP 192:uuthsN/mTQcjZmnWQmiU18NU4k03ajzorh/XHN0oLIOw/5U8:nvsN/4F4y+rkD8h/Xt0lOYU8
TLSH
T115321A3568787CB79BF39E45B04737135FA9106BDAC81F94EAE84B1C04C729C230A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c4a4f91e64e90f52e7bdf593e38ae174df2b662e2606af117c63b519ba698302
MD5 b9d3da93b8159b79a62dd252ce40e8f4
SHA1 3c71108f3d70fd255d7542780a8a600b33884a64
SHA512 6bf251cd326fee0ca13b095768638f622a88de8f751b2eb30cbe16aeaf6bf65693e0a1799ca3fddd72881d9b3897df09e48359984dfdf897018f5a6544785964
SSDEEP 192:gONC6kFQmiUyPxp903ajzorh/XHN0DcROw/5U6:gONC6SUp9D8h/Xt0kOYU6
TLSH
T17612F835687838AB9FA3AE45B08737175FA5112BEAC91F95DEE80B1C04C725C130A837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7ca3665f9032c06ed75cb2f26e23f148cecfd4c1edf62db43fe298b7ec5b291a
MD5 9d7624102194e2e4cfb1a937525baede
SHA1 a71ce3d5b0b59c83238aa4f52bce08d1be90ee4c
SHA512 9c8f3f6a6ef18a975216620aea0a4ce15c2901f7ebc49b22e386a7500fd58aab48912440a50403a9fe47df7fec8fc2780f1fba8ec819d9687961843b76a0f0c5
TLSH
T10DE00243130051EAC13C073010972B3027E3C13873F313464E200D791C972009F30F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 705146a80b093c3320952b8d395cb5dd548b3de93f0ef6ed67f091f3f23399e0
MD5 2970f90ce9cad2f7f2abb544e95cfdb9
SHA1 548479b9ee2772d418210ab561904e6fac697703
SHA512 01b5b615d4892a9d0d6a96c0d7b3479c3008f12d7c99ddfe9d877969ff1ec7513a3ecb5df90202d6ecec1d1646e33cbd26a2de40b60f8f141df64fbb4c1b064f
TLSH
T180E00143930051EEC238073410972B206BE3813862F212064E30096D2CA7300AF30B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 93a245e3952a931859bd82639626e4fe3521a8fe66688376f639fc7093a540e4
MD5 75f03a3a548b89885684c5630e9d36b2
SHA1 bf7c44f5b6c4225d0d7064c16fb8b0d6bb240a61
SHA512 13ccbe46ed1972eeef6a17ff31af2772d8d4535b116e3cc7939de3d866f81f64547bb2914c5109d97518c6a5358c5d323c71d08404f927aaaafc660810a042e6
TLSH
T156E00952938096AFC239073811D72B217BB2812863E3930A8A31197D2CA6301AB30A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7426608ff466be96b811b36455597ceead5f28ce9eeec0492dd33b4055c33d42
MD5 db7a542f02c33fd27f2b5e16ef0093d4
SHA1 fc98ab19d2c06e7b34187ac312a2ec5c9ff50a87
SHA512 32e61a837c432dba16029975d5413cb6728e247dab17587c7407d4839165c44fc968bdc3b662dde21f66d8f7ba0ae15d8ed9f8c4ed97a5d380f2d366af9f9759
TLSH
T182E00952970092AEC239073410972B207BE2C12463A312068A3009692CA6300AB30AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5ad3cc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5ad3cc.TMP
Size 392B
SHA256 1d6ef58f4462ea207e06c25f84cd761f92de5b2260c71c575d74db67a09d5a32
MD5 2135d9f772a82f9d09ecbfd0b425eff7
SHA1 b3d8c594ed8ab8f4cb2931f0f71774a7b8f54274
SHA512 626b7fc4127b82fc1aa001f72da2f1706fc8336cf032a131531451cd7f9a46e23c31b69c9db859d587f001ea0496ac56f2a6797c2d0335a16541029816f315dc
TLSH
T10BE0044111004155C134013010573F101F514114334311044730057D1CF13005730540
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
MD5 bf165c172af1f75083dd4c7e8915ad0e
SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
TLSH
T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
MD5 a15cd0a1e68c6b9c3945d3192091dc4a
SHA1 5162188f19a245162594501e5febb31a7626aeb4
SHA512 a7ec103cf7c6fa801e1850205c4c06cadf96c21b1fd56db058a2980c472b1ff2f25c69a73f943de8dff815d69217995ad880e85ca7b8ced8cfa1c506315f7368
TLSH
T18DF0ACD29D7E35C2D5AA0F2ED44B25EC54D89606F49CB57A484CEAD4913940F248287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
MD5 0ad641099b286eebf58a290b5bde86c0
SHA1 922d3e17ccc238f1bf276051af3ad5cdffb20397
SHA512 8661612608382058967a1f2ef25c7fbee41a3c2c748838346c044a48058ba081e84750e4a0de424903813499876fa7f69beba345d8ebc396340d830f1a7c81e0
TLSH
T1220110D29D7E26C2C1AA0F6ED08B26EC40C8D106F19CB07A0C8CF9D4823880E188283F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
MD5 96814d4ed361ec8de1547566e582b0de
SHA1 f9588e0a74d9790991b254bfb0650af55810f778
SHA512 bebc0e98c4485bde4609e0a92f0a27ac1e621a63e154f220c2b8c3b11bfb2d4cc2443d6274f6046d42e28b28478f719f28917112090b3cb14fb6adab24770b93
TLSH
T12401C2D25D7D36C2D57E0FAED04B75EC54C4C11AF29C71BA0C58E994523890E244283F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
MD5 2a769156fb0cdd33783892c7340dd22e
SHA1 4b7d27850b335fc293c0ac5f52ed9cf1604cb52f
SHA512 3bb6cd746bada6a1370fd3186f3c8ded4319de162f80beb35ac87e73d46ede19407f4cb1d05ec658f6072f3e42a5681f64d8b69a136afadbc7534d3074670bac
TLSH
T1801114D25C6E26C2D57E0F6F904B75ED54C8C216F258707A0C58ED94413840E144287F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

7f9aaf12-ca55-4dc9-8a18-f62741afb8dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7f9aaf12-ca55-4dc9-8a18-f62741afb8dd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1a2ab84283cb052df44e6485997b2c252ed9a032bb539e6375c2e9bbda37ae25
MD5 fd5a195eec5a0ebb8d2b8006bb343914
SHA1 5b8e9ca16ffd81d48ba2a0d1e3d9525c4edf5cf6
SHA512 091f9f0b12980a1c08762b34c9ec25701c03e463b629365caafa1208bc3b013df6b0a8749e19ec0249f9dc230eb2398881cac2f4bad8567f60b29ca13dc57492
TLSH
T16C415B58BBED5158B3B73F0B9BF668AE847AB9372E06C45E10110E4F0623A40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

b614e3c4-a225-47c1-b184-7432706e2d96.tmp

Path C:\Users\Admin\AppData\Local\Temp\b614e3c4-a225-47c1-b184-7432706e2d96.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff2ba418-c2eb-446c-a7f4-dc4489b71169.tmp

Path C:\Users\Admin\AppData\Local\Temp\ff2ba418-c2eb-446c-a7f4-dc4489b71169.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1872_1108817685\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3507c78a-539e-459b-86f5-f4615654d5c9.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1872_1408495793\3507c78a-539e-459b-86f5-f4615654d5c9.tmp
Size 147KB
SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
MD5 a9f7675ff091bb15c88909424bab4a39
SHA1 90f753d8d7e4397de0f49631fcd9222a7f59148c
SHA512 ff1f89fb04ae9c9a4c6cf6b1475f5a77f1c4f90829acda95cb39889b6b15c3b4f0b3b822a668f8ec8520b002cc90dd397cc26d314ac8fd5f3e2c9826bd458df5
SSDEEP 3072:Ph3iICVe1DvTtr/3tOpPu8LdKBTJyU4AshzWnD7UVDvuZE4tkGL:PgTVWvTZPghwln0AD7UV8Eeky
TLSH
T12BE3E01D29E2846EC82B24F4BA4A718FC71ECF07910BE40F25D984A55C7474E17E2EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 8e6a617d56910e81d57da6e586cb6615e0c989337c89a02a42fb8a6ac2591dc6
MD5 1ad8d717bcf57688e78944b1d516df8c
SHA1 ed779365531fda863ea25865ebd276a0bbce8610
SHA512 99432ec0fbb9513daa75db39c1ee8f1d01a53d8e773dbf4138a8ff8d6e1b0146daf8d323f98a9b0cc1372538814b81f059bd7565292fcb306d199e57ba65f163
SSDEEP 96:1OEJM9ARuDc52Jh3RWPwDRWvDQ52JabSYzLHGJ4SywCAqaAL2JruDWPW2JnIuD1:PP0HstLL6CJ4J4J5LBIo
TLSH
T11632F154ABE62616F2F7D971AAB2B712EF36F84659145F0D408081090C23E05DD7EBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download