hxxps://minecraft[.]en[.]softonic[.]com/download

Analysis

user interaction
yes
max time kernel
98s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/05/2026, 18:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://minecraft.en.softonic.com/download
Sample260524-wnd2aaf141

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
656	raw.githubusercontent.com
657	raw.githubusercontent.com
662	raw.githubusercontent.com

Suspicious use of NtSetInformationThreadHideFromDebugger 54 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4396_424807671\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1976	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134241194426486594"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{C897DBB2-5866-4C10-8A9D-7F749F3F0121}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{914DE8C5-2428-49DF-9F88-74AAD7811959}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 45 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe
4396	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4396 wrote to memory of 4536	4396	msedge.exe	87
PID 4396 wrote to memory of 3916	4396	msedge.exe	89
PID 4396 wrote to memory of 1976	4396	msedge.exe	90
PID 4396 wrote to memory of 2668	4396	msedge.exe	91
PID 4396 wrote to memory of 3916	4396	msedge.exe	89
PID 4396 wrote to memory of 3916	4396	msedge.exe	89
PID 4396 wrote to memory of 2668	4396	msedge.exe	91
PID 4396 wrote to memory of 2980	4396	msedge.exe	92
PID 4396 wrote to memory of 2980	4396	msedge.exe	92
PID 4396 wrote to memory of 2980	4396	msedge.exe	92
PID 4396 wrote to memory of 3276	4396	msedge.exe	93
PID 4396 wrote to memory of 3276	4396	msedge.exe	93
PID 4396 wrote to memory of 3276	4396	msedge.exe	93
PID 4396 wrote to memory of 224	4396	msedge.exe	94
PID 4396 wrote to memory of 224	4396	msedge.exe	94
PID 4396 wrote to memory of 224	4396	msedge.exe	94
PID 4396 wrote to memory of 1692	4396	msedge.exe	95
PID 4396 wrote to memory of 1692	4396	msedge.exe	95
PID 4396 wrote to memory of 1692	4396	msedge.exe	95
PID 4396 wrote to memory of 4244	4396	msedge.exe	99
PID 4396 wrote to memory of 4244	4396	msedge.exe	99
PID 4396 wrote to memory of 4556	4396	msedge.exe	100
PID 4396 wrote to memory of 4556	4396	msedge.exe	100
PID 4396 wrote to memory of 4556	4396	msedge.exe	100
PID 4396 wrote to memory of 3076	4396	msedge.exe	102
PID 4396 wrote to memory of 3076	4396	msedge.exe	102
PID 4396 wrote to memory of 436	4396	msedge.exe	103
PID 4396 wrote to memory of 436	4396	msedge.exe	103
PID 4396 wrote to memory of 436	4396	msedge.exe	103
PID 4396 wrote to memory of 3228	4396	msedge.exe	105
PID 4396 wrote to memory of 3228	4396	msedge.exe	105
PID 4396 wrote to memory of 3228	4396	msedge.exe	105
PID 4396 wrote to memory of 3060	4396	msedge.exe	106
PID 4396 wrote to memory of 4092	4396	msedge.exe	107
PID 4396 wrote to memory of 3060	4396	msedge.exe	106
PID 4396 wrote to memory of 4092	4396	msedge.exe	107
PID 4396 wrote to memory of 4488	4396	msedge.exe	109
PID 4396 wrote to memory of 684	4396	msedge.exe	110
PID 4396 wrote to memory of 684	4396	msedge.exe	110
PID 4396 wrote to memory of 4244	4396	msedge.exe	111
PID 4396 wrote to memory of 4244	4396	msedge.exe	111
PID 4396 wrote to memory of 564	4396	msedge.exe	113
PID 4396 wrote to memory of 564	4396	msedge.exe	113
PID 4396 wrote to memory of 564	4396	msedge.exe	113
PID 4396 wrote to memory of 3300	4396	msedge.exe	112
PID 4396 wrote to memory of 3300	4396	msedge.exe	112
PID 4396 wrote to memory of 3300	4396	msedge.exe	112
PID 4396 wrote to memory of 1416	4396	msedge.exe	114
PID 4396 wrote to memory of 60	4396	msedge.exe	119
PID 4396 wrote to memory of 1416	4396	msedge.exe	114
PID 4396 wrote to memory of 60	4396	msedge.exe	119
PID 4396 wrote to memory of 724	4396	msedge.exe	116
PID 4396 wrote to memory of 724	4396	msedge.exe	116
PID 4396 wrote to memory of 60	4396	msedge.exe	119
PID 4396 wrote to memory of 60	4396	msedge.exe	119
PID 4396 wrote to memory of 60	4396	msedge.exe	119
PID 4396 wrote to memory of 3428	4396	msedge.exe	120
PID 4396 wrote to memory of 3428	4396	msedge.exe	120
PID 4396 wrote to memory of 3428	4396	msedge.exe	120
PID 4396 wrote to memory of 5644	4396	msedge.exe	124
PID 4396 wrote to memory of 5644	4396	msedge.exe	124
PID 4396 wrote to memory of 5644	4396	msedge.exe	124
PID 4396 wrote to memory of 5660	4396	msedge.exe	126
PID 4396 wrote to memory of 5660	4396	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://minecraft.en.softonic.com/download
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff91135c188,0x7ff91135c194,0x7ff91135c1a0
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,16623816609676183245,5993768297712200638,262144 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,17569352150817724340,13109844371619016750,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,5527729035632255747,1269441192838040318,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7903521166587708957,898957083274394420,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,2763031348838217854,6522578394640749244,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,17823280900283294401,11753446433858982317,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,14025975260774378448,11190697734457449665,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,6286216501941573337,14872739596335870912,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5260,i,1144577645451108112,15612594007862405797,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,16622838816292558058,11085438766577073948,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3452,i,9315843272902609306,12056877428648385267,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3552,i,7217754243142287089,5864438593418427270,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,2043838856152863802,8249807872439517319,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,12445123327356534855,11057880729802521054,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,13452167867753779135,13159064889008650401,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,13452167867753779135,13159064889008650401,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,6074991837223406189,7946984924953115212,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,16632622952958972885,5634825134037879185,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6724,i,13641334250085849704,12159598403806618683,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6808,i,459851085317104343,11595490194244958784,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7064,i,1078066141777126136,12362035452597334319,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7128,i,14575778475259292811,10959176730262396403,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7112,i,15213887511590103910,6050391054447745172,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:8
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6388,i,16332367664819577212,492142062795214228,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7084,i,5268864520267676706,5081511265210227211,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7468 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5712,i,89149535319603308,2081074210278644235,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3452,i,4795196709346942013,15602280728601632829,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7180,i,17089247242357106189,12536787800061394879,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7136,i,5846320383090602051,6193219720847701896,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5288,i,12693428355662761400,277710359059490631,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7832,i,17563280377370103653,15559959822546573552,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6412,i,7414038476253079506,16305980382693639615,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=4376,i,9926766035210888301,14955878199866991613,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6700,i,16761688511846012635,9987101872283197999,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-US --service-sandbox-type=cdm --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7572,i,6651710626614575965,12510757384979722572,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:8
  2⤵
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,16870617843150214300,7752752660501977606,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,7434930247930986718,9951060611280237663,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=3580,i,14163115905302130532,9575491090982087130,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8052,i,12454887259138756659,16663234303162949961,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8180,i,6849149635867218280,16382802745615134778,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=6740,i,16809179834638083799,7267045094760044038,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8188,i,11715834532423728006,1177546601224876254,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8012 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=4008,i,18275934943860066811,17981759332255437361,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7348,i,14297523579861898380,5971020099381880514,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:1
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7632,i,4184571521166874638,14738071825297316606,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=7804 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8272,i,2394280932492305755,4421664249634710460,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8248 /prefetch:1
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8408,i,5305704455280376563,7910115652970941722,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8424 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8472,i,16895613795911641523,4593194160511719739,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8720,i,5831971556016817405,9631605985008790831,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8724 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8908,i,768211178196106311,8111804382761615634,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8740 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8792,i,380116621718027848,17746374175606578419,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9060 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9312,i,18145271868034024557,1588484273906665011,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9288 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9384,i,1767874430673163825,17811325059498378793,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9404 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9112,i,9065162931593080292,6150148559627134988,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9580 /prefetch:8
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9204,i,1644251242663543774,8495399754923881808,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9592 /prefetch:8
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9540,i,13836357797259974172,14214076221065554652,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9636 /prefetch:8
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8724,i,1213769459822682927,16816494276721231117,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8796 /prefetch:1
  2⤵
  PID:6492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=8848,i,15593816382069956216,7621892703146333857,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=8880 /prefetch:1
  2⤵
  PID:6500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=8876,i,4535826102805385918,8547227836672569390,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9368 /prefetch:1
  2⤵
  PID:6788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9948,i,5984718454701149362,9382212649491801995,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9772 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=5844,i,17452125591618545375,14850510761785159380,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:1
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=5952,i,4109506535724342395,3748593008857293554,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:6268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=5924,i,8373559205175724110,9447273059302876372,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=10056 /prefetch:1
  2⤵
  PID:6520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=10072,i,16614150341813654755,15059812143124101918,2097152 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=10000 /prefetch:1
  2⤵
  PID:6884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9892,i,5480581513452121048,706911021874810354,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=9836 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,14593993839867190736,4420020545570667749,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:6716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,11909601753467646063,5193113524243344860,524288 --field-trial-handle=2280,i,5204039970823469166,4362968909727025482,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:5196

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4396_1084784947\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4396_424807671\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 3b4e8a7493e47d173ac97c8bc0294a499febe7d1a689bf45257065c984c376ef
MD5 87fabd1f7b57e5a4f0e06d609dd9aa90
SHA1 948952c861e60c008bcfdb7eb34e4423fd30153e
SHA512 d8e5a27187e4309fe0d17ca3481d5c4acb823eaa4287eccca79411d23fb952de9557ca0e6872556c495e66447520c3b5bd769447983df82eb30de94234d14ac0
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T12BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 49KB
SHA256 85166027228f2d25f4d0f98b5d5168d04f2b651fa607d8ba3096d07272394d5b
MD5 c31766b1dfd982bf8d2fc444cb4f3102
SHA1 d0dd9877d35634d1989089fe09a233cb12f27f81
SHA512 83fca6559c38a2a4972a434a529316cf22cd0d4f09b8d5308bc5c0d25974473a53c31f67dc9495d8a1b4070bb9e8bc52df47a9511aaba99f0c9b3c612144018f
SSDEEP 768:3+KBXD13ORHxGr4taZw0bA+rcyMaSUt7UPCjm/F1+7538LSFN8l:3RD8RGrmebA+rsaSxB6pUSj8l
TLSH
T17033013B3CA15021BBD22484B9D278F4BBD238501277C81D54D756FAFB3452836ABEB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
Size 43KB
SHA256 475e8ec7263947c1a6836ef136bc34eab8fda34c2f7a06353ccf819fd5a31e90
MD5 f9b10f9e33cbbc4724f0f5a15dad33db
SHA1 781164f2e37f2e6328c6a9eaa106173dc82a8288
SHA512 c3c9775ce0c45e308fb3035a8b3571cdd95e7c82d3c3c13339f25787d8c4bfa345becbad6c369a41bca4bb7e6e6d02dd712bc387fda5b3e39fb8897e2a73a000
SSDEEP 768:iCz7XP/YgYD7Gq53MGRWLi9iN6xceIdc08jkzbsrZ8gCc7:iyHYgsGq53cLvN2cedjkc8Zi
TLSH
T1D3130116C730F3C285FB8541D44F42FFC4EC3A8A5E704826BC79DE6C3481AA99AD99D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
Size 34KB
SHA256 4e5f0ea714eb089bde08db1709c8215708ac00c749781ae50ac416aa07ef2b9a
MD5 66f065013265d2b3fe9ec2dc3eacddf8
SHA1 e54f053a7534103f9ac886e6d41b9837eae89d17
SHA512 aecdf1a00d2e6dbb1a08634fc09f6e3c75d0ef19b668e9059dc2c317e2f0964f7e9c06484b03deff4da35301649335010059c6d5eb29fe2e259a81145cebe1de
SSDEEP 768:cZnkBNdckmvmlztIj07b/EvWLN9h2dYng2AEqD5WX7iWJu8fbg/:8nkBNdcvvmlRXb/EvG2OeE5Oh/
TLSH
T1D5F2F1E8CE643E7139D70AC2D19B4F0A725FEB5D32DB954E06409FD2A419DC8DB89238
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 16KB
SHA256 0364d368abf457d4e70dbc7a7a360f3486eaea2837b194915b23d4398bee91ac
MD5 68c477c4c76baab3a8d1ef6a55aa986f
SHA1 4af50379e13514558dd53d123db8ea101ec5e24c
SHA512 92b34fe3b7f82f10cf6de8027ac08f4a5b8764fb4e0b31c93da6e3d5bd08e0bc83b79fd70b8207a1066b689583e0b6976fa3c885b0c067ea343e6f2031d55d25
SSDEEP 384:Nd1nZ+hLc8g3/2AY8VL6UBP38Y1dDq6w9ZD:bJZpv3h1Z3x+9ZD
TLSH
T10572D092B7F2D6B84D28BDFE122B04099CA91D8729F113F25942362BA5B1C6484FD071
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 24KB
SHA256 def8db3d0393b41c222c29e372c8ce57f9696a7afd5e93ccbcb225e4277e6b96
MD5 1a8d2e6c071e6ebd41e2f8851dd4d912
SHA1 c12e0c8de14b218dac205bedec4500436238a31a
SHA512 4a304a05b7fc18c93ddfc3aa2a4473b7145163c756bcba010ec8549dce90993722841f41c465a1c0d717774a6e394322a949d78706c423a0a9ac87fdff175fe7
SSDEEP 768:C92mZJHiWE0Gw3PBSUA9Kxrtmejy2zsA0SOHQbXHAEO:CNLfp3PvA9KxxmUy2zASOwTHAEO
TLSH
T146B2F119CEE3B922ADB99F25EFA836D108F082547D7D6FDE8E19440C8F1243076BB056
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 43KB
SHA256 c8eec15df5aedd084e760b91b2a1150bc47d919d258ac22709bd654cc6e0acaa
MD5 5ca3c48eaa8554a4129a6586eb35184a
SHA1 d10e9b95f3f5e6f2b6e93a9722b09b19fdb1a374
SHA512 7673c44aa83dc63c99d7d946d11d333549439fae895bf45e7636d80a4652da2a01f817c630754c309745bff548868124ae01a09ad02156b2f073dce6423b86fd
SSDEEP 768:YKxtvZe7EjO9WKzkuiKmFqi1hg0DRNNcURPVjy8wiWE/rbH/AqMEI:YapjOUKzUK89hg0DNcwVjDv5/vfAqM5
TLSH
T1EA13F1C57F1E5BB29623EDB25722211468D94EC1C3A82DFE8A71DC89CC3E45E5D50232
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
Size 173KB
SHA256 845fb2a0d77f0099b4347954887216c32bbce6c3a594e229b4f16f3afd4508b6
MD5 1893299e40e637928de1d76a5fedc795
SHA1 d2e0dcbb9879dc349ce22dd505042c6c274b8f6e
SHA512 fe2ca41e22342a77de38dd34167e151da3828da5582c8d2ffe4d3f71c7fb52d616504668c1733c0a673ef8977d5501ee69cb098404158a3556c3fd5d4327b6ed
SSDEEP 3072:TdmqFKRF1YLgXsCh3AzboTROEe+Rvs0AThsefvg1iu3yNzV4z3Ll3Kh1Xv:pmyK31YLg3hQz8TR5tRyhrYQnNBYl3KL
TLSH
T1BC041353524AE7AC91FA2511D392F8C61421DE5CEC4E23A82B3C37D394A4B79FEC5E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 139KB
SHA256 e3ff0511dbddefc3f42434693e9c7b429d769dde422dea28cf860a9e5855bd1e
MD5 8f6384334e10b7af848f56f97746a8b7
SHA1 8c5b97e66919ed508d7f049ed08952e2bc001a51
SHA512 5b7cce93a98b409d266c424eeee72fbccd8e9ff6db8441d9b4739b8cdbd53a3dd10d233f6d1f7eaee3a7f494a28109272255141f1d4c5dd1a3ad657657242607
SSDEEP 3072:oLNj7Y8jL8F6nh3ONMXs0dI6rZf4Vwr9FfE6sZtILdJE:oe8jeNvIfrJ4VcTts4LdJE
TLSH
T16AE312E53F01FB9D9219D576FB3F4AA16B31FA10648359BDA24FF5810CD1E0260EA06E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 114KB
SHA256 d3298ba800c80577c206b33ce9d90b07eb79a68bc98b1c7be473e19be69e54fd
MD5 23c70ed27ba1388f3374b6d7f2e2bf9d
SHA1 ac3e74029bdd04bd6ac3bd3a086976ce1cf73552
SHA512 933df11a077ee890b7ccbed9293023ef0b4984e878fe9ef76fea646f77d08bea1294edb4d44fc0c6f3cd62344cf0085f17b2dcdd2fce6274e4794a273cd0e0d9
SSDEEP 3072:mbbF1beWR+2ogFxYJ2mS4xBs4vSx7jzTbCIOM1:sFVeWlogjYJ2x4nsE67jjEK
TLSH
T135B3122C25BF4F1D2E11D374856E7E8C8B00A34974BBA7C7297FDC2206196122A5F66F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 117KB
SHA256 c6740403483ca20b985ede310d948f8d80dd6bacd253c77a892b171dff6c0afa
MD5 3bf5ef433efb15e6df1b432bafd778d5
SHA1 883431791ee1dbc2d1ed9486a18f3a2765f3ad8c
SHA512 b3f902e563873fdf788c2d61d8a2b90e01a3a075092a765f9b6d43969203e4a5efccedac3719d0b9476bd5ca1003e86218fbfab4875c261ae35966b3aa839a2c
SSDEEP 3072:hsAeHvOVYyX7AwP0QlT/oACxtmlc7PaJ/aYUusb0bEy:6A+AhsoT/ofxtmcyxaYY0bF
TLSH
T158C312263AA534A2E78FA329D64F62DD33133C4743E790EEB34155791046264CFAEE88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 188KB
SHA256 f391595f62ee60bd9149aadb5fab3ca6ac8aafbea9d914bf7ec93675208f60e1
MD5 9f1d34848a1f9f46259aa421e46dfac2
SHA1 173ee2883bdb06b57ef26ae9091ebe1fffd1e06d
SHA512 2f8e43fe43dbf82bb8a250cab2aadfc91934a056d659ddc043d6886220bfa762d61afe1f95c0ed8e9562daef7dd966745bba89dff3f5c00f2d4a0570458ec820
SSDEEP 3072:ORHlF7Q1x8a0703FaoUP7CdRQXkGPaJsqmPjaQHWMUA8WXuBBC6ZxCKicRk50aza:OvIya070gTIhoamOQH6NWXMZd/aziU3s
TLSH
T16B14234F472668A3C7161398BBFE288B49822456C2F7509B8659B444D7EC2FCC57E0EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 90KB
SHA256 ee96d9c788ae970898eca5db9a54186946c667275a5f01ad7b1d39e5cd48825a
MD5 151efc832d215bfe75dbeb1816f29346
SHA1 6e2c5cf7706c1c0da78f8946a3f3ada6d962c787
SHA512 f3f0dbcc8e180d26c5227127a9d6add22d0a8fca704c906fad0e0461badd7a78d4067c1a9f25a1503928db32fe60aa1334ecf5200728ead29f48c1e95aba43fd
SSDEEP 1536:8ZX+Qsj7DiQYgR2bB0FbCydIhXIF5br0TqgrYoOYk65lv6Oohe:GX+pj7DiQieIIX/W1rOYZv6OJ
TLSH
T16F930291B356F0D2759F51F68DE87E2094C60A337A82044CBA16D60537AA8C1E798FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 31KB
SHA256 45ff05993fc92692e563f466c441294fc450b1d6c0b8c5ee6b6c0fe84a0200a5
MD5 2d05600b700371df17c77be3da2cd681
SHA1 572e50efeb341258f0e0306efa22b9103abb436d
SHA512 f6aad7fe4fca213c03ce887cfdf010cbc85f30894a60917ac5778ae6350ab41a891acf0ad06ed356a998a1148c2cfba27a7bce803f45f1fc128529d5e672524a
SSDEEP 768:kpiT4dIn2nJ5ZB7CA2xrJNPLlxKxSwp6sS0T2z9pNkF:kpiT4dIIXJCTRuSwvqzaF
TLSH
T1BDE2E100E66DBC292936EB30ED2638DB97E223A54213E91B09C37417C6D850B5FFF611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 23KB
SHA256 8c300073bf263cc24f386c4eaf20a2b2e767a7bcace6e13ffb387a8cd9950324
MD5 8885e4455d7737b15874f0f1fc8f7a71
SHA1 b7893de329c001c1f34c1438118d77bfcf97f62e
SHA512 5efe986a4806a1a6c7f8b363a311acd4357e8af86ee3bf3e6652c5511d027af372a3f4ad68da18ca1adba5be527556d340c4b342b2fcfa3b7f505ad660f2d6cb
SSDEEP 384:5b8TfdQbgqby6XzzhvN7P9xq5tAi4c3ZBTqnS62vIWTCoJPXCI8qiXj:p5bgCfhlj9Yt33fOS62v7TCyt9ej
TLSH
T1F5B2E18AA780550B11DEE399B7CB592ED05F91839327994FCFC79BE2E9402F0B0167B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 137KB
SHA256 3f11f777ee2115c680eea4202886427fa92122310727bb372b4cef27c7ed3d84
MD5 298a1eded10c08f42af278e0679e63f3
SHA1 d24279f5fac8747fb1a4f555563526e354906038
SHA512 83773e7a3aa758bce6a6cda88b7b8c96d2959e957c0ef6286d1786830dddf7e9fd145f6de96a2972fce70d7d1c20e516b54fa5efd27ab05ab2cef05f112f31d4
SSDEEP 3072:XzGzeoCXn3EghsHm1giz+EEwts4jvQXzvN/dlo7jebRyAQ/bTk:jRoOn0JHmqiCjvyvkR/Lo7je1Q/s
TLSH
T1C5D31278B40F41A46FE1DE6492EF3474D1F008FBC5F86D9C207636AA8B21FD22D51965
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 137KB
SHA256 e3bdd0049340294434392b1009b3c3c42913878295468c98a16959620a2c1692
MD5 413a6de0900cc150e0a3f3040b8e4d6f
SHA1 187e2e398329d7986808599e52fcbdd91af51fb9
SHA512 dfcfcf64d863801218f436a9c949f08e1cb88436061cb1b11e70c9510d115878ebeca8274da315cb69f9654fed458ead614a01108c182d948ef6765834c24b97
SSDEEP 3072:z44KoCFVsXmRBk0EEFCs0NWOpSZhw4GhxEUP3UxH68uud5s:z44Ko2VYmRZjgs0LS3wjhxEUf0js
TLSH
T13ED3135E4432C7D59AA8EBCB9BE8D150B1D1C01D55903A2CDBBABD48C18D34EE8E1F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 34KB
SHA256 58c9d9485af25e781634aa62d1946433c5e36da13b4069390a78530874aa2b4e
MD5 df7a8fa875f8de549530f761dea63d87
SHA1 8d366605623ec27d10762990cdd320fd3751c6ef
SHA512 742483cf333d0baaec42c7f177d912d180441cdf38b2e42a7e451272713766fe8624c365991959efb99e4c09549f7ad915a6dcb877539d4df4016c2120e0a9e0
SSDEEP 768:boicxwqsP1UJHQK4rVgy+NbfJJyuvrHsuJhmI+MSh:uxwZKwKwoFJQFh
TLSH
T153F2F1E8C2FFF75CF652A0EA627325304979EC0800CDA57464A1C6EAD7995C15C39D8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 24KB
SHA256 1998bda98734515471b0c09a1f5aae271a758a598fc668893c9973a8f60d94e7
MD5 f2bd649f792b6cb5afc3c979457cbd0f
SHA1 2bbef0defc9cd5c4b18acd863c184ef08af4fd0c
SHA512 b16a52167ce07c51c466d6462317afe00033d04dd38f532025f3148c7b2fd466a94911ae298e9ea35ab9c50a21fcc6da0c3d4fd93b709168abcbda413541dfc2
SSDEEP 768:lyf/eYn2MKXejFWiDezUYEhvnClVNpy9yRj:lYp28/ezNEdKpuy
TLSH
T1E4B2E1A107A524E1D0B32741D8B4B90FBAAB71BF02BF34FDB38B1175A56726B0850735
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 21KB
SHA256 b2763289d939485183b991096aad765904a9a2f5e14f94fecbb4fc1b75f94e5b
MD5 5775caaafd1e945c5a0c180b08c77bd9
SHA1 dd659d7762862c5019d92cceb45c6ae0dc76d647
SHA512 891c59d518fada958fb2c0200bde3f122826cd55699695288d85ed63ad6f2cfcf29879a4d8a178366ca37dccd8d25dd2824f55733c2e8a667277e4389b8f3ca1
SSDEEP 384:nmB+9a+QeFvqaQNWvIl5VD2HkGR6HoxaxYgPB3iZMzFOFTF0TCX93ln4:nb0+QCLIB2H1soxaxYgp3ioFATF0TY14
TLSH
T13BA2D0474A84BCA8D182BE11FA971517522EAD94C4BB1F8A2B80B51EA531CFDE3FC171
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 24KB
SHA256 3b79891842c6466d3b67bd17848e1136efcf728524fc59c32ca61d014bf4ac74
MD5 b38b127ba164057007231c5467abcbe3
SHA1 7f33fb268e79642859dd27834065809abdcd787c
SHA512 08cf885aad6ae200014be3915bf05f49830c3f92bf84ca6df836b3b337c69d5af6dbb2c6d2321f999e012c8d6f24fc47d2d55674ad354e521e1758f5e61c67f3
SSDEEP 768:dIlZHQ5BZdbxPBjmkOJx4+Vyl+2TY6txkcJ8KN:K3Q5NbxYkOJxdepocJ8KN
TLSH
T100B2D011761007D00BFE294F9EBCD809DE973DF872619A97280AE9E58BB65784E608F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 167KB
SHA256 756ffe80cdb4b5d88fee7a76d9df6c74659ac1e0968ec7d277a1507cf9fcd236
MD5 e9cf581e707b2d0fe74c7fb17ae3fdd6
SHA1 b7fccccf7f834e633652e7c66f9d68ea7b1b182d
SHA512 6353c8461c74ca5b5e4cf77ce4ec0fc31dfd3dce0c8fbe2a0029f1c6d0b2628763bb51303a61e25003d9e57ab86ed1bac19a3c1edb47139d3b69466a7e26d261
SSDEEP 3072:NAausK6FsV9cde8xAzC/7Bo3Bvibnv7SLzvtBbJ34jCylrkZpld:ebvwsEe8SOTqBqnSLrzJ34O3bld
TLSH
T140F313EC8153EEFC7BA82484007E9F353B336EE4B57D8A2CE1A0A29A5527755DD40C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 50KB
SHA256 ae80604091c3cf7ebe4e4e4282f45b963f500b3a0c5edc8c3f8566f6c15e3808
MD5 ed2ffeb124fd37559797aaa0dc00e843
SHA1 ee6b1fb1fb9a2a948915c719d25945d9c40eb8a0
SHA512 c24fbc13421c7580154e9047cde7214ee8542056bc0497206846359a5e90024832b420e6308bd13956ec46a43fdba92f449c3bfeeca4e2f0c270f7e959a4d8b4
SSDEEP 768:fq5Xg5O2C+yROSxk5UJM6OJQ4EnDRMHRtbwJyPnt6i01eAccSah1EfijCygk5WyK:KAOYz7wlcpjygEHucsRbfhyUFXR7g3gR
TLSH
T1533329993192B13593EB25B8D27F2202B33A5D513C4EC054B0AD8CDA3C6EA46D277F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 73KB
SHA256 fb69de564c55a631541f30a26e52223a2b422597eefa5a9e4edf9bceb8231067
MD5 8822fe579701e42c5e040b1744724840
SHA1 0c416166b448914abe086a784c24a83078a1b499
SHA512 016813d4e5539b4e3d6cb4ec59c91afe114a9e530115727c49a21f98b9624bae968083443a1c554716fd6a19da056d9c1d57206484c1f8db58e28ecea3804927
SSDEEP 1536:yfMXjpph2FzFBd9el1ehoPgjakxvP8Cmm4gTkQ7yo3DR24fxvyyEX2v9iFJ:+MXjpphqzF7ElfgBvPlmKTNyoPfxvykc
TLSH
T10C73025D799F1FDB1D648642F0ECB084892E687229317AB8D5C89000BF3F625EB1F579
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
Size 364KB
SHA256 8659c125bc8718eb28f8269dfb43a22a2b080ffa264928c0370e09a444ec142d
MD5 c6684b15c592145210534468e21335d9
SHA1 3ada6b014dc2227be173aabdebca3da225e51cb9
SHA512 2dd829c13df5113112632ccb6288105485ac73f48f08820cf32aef74edfb59287a243fd16c7f88fc208c94ac524117bf3dcc4b9cdd9bc85d6fbc38888e79a1b9
SSDEEP 6144:/xy3n4OXVRq7eQwYem1rSDGHmWjXe4wIg9zkxDHwwoGu4Dz25/tCB4V/FIGzZHmL:/xun4KV+eQwYp6GHmWju4hCCUwosi/7Q
TLSH
T1348423BE81B84C867A3E1AD57943E723C205BE26E1316BC73E4E010A23765E3457BDC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 9a613b1d7caa5e3f24dc1e779a54d0d006bf26ca575114eca76d0ef832379e04
MD5 bc0ae66ba84bf266b9438740fc13f88a
SHA1 fa726f2a5c6a6f85c832857bb412f230def41653
SHA512 560fb1c280e87e51d5383b73f830298d0c7c2dca39324e805e7e4540d3625fea82f050b3dcc92d26cf04a4a0635a9183c219dcac3fe3a3fca7e6be2513f17c99
SSDEEP 96:KZaazXpzPiGhohn1tKxFmcFVaG09tAU8FjGOqhWlfFxd4kIhVNeNSGkCmjzf62:KZa4hLoh14NDaGU0ipnN51Dd
TLSH
T17312E90583A29DA1EFB11073E4D919063F70C5A4AF631E1AE3909CBE761F7A80625DE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59694f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59694f.TMP
Size 3KB
SHA256 965067a07b975775dfe776494f1b60c234e602b04998d690556c0de80d7f99e9
MD5 159ac09f5beaa9751806083953514f23
SHA1 abec65b1d9c9f7cf20935e63b11db5bc1b375727
SHA512 9dae1f0d69720cade8692758e79915074b70306e9d2a40bed66ece8d9b54a9d507ef6aea4e8e3d4f5d279bf3637048dfd36a73307220be0cf58e417b008f70d6
TLSH
T15E612A0A87534CE1F3701173F4AE42463B71C199FBB78E10A4E484BDB72CB6D816652B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 47KB
SHA256 bfc1e18ce217cdfe5663782cdf170dc47f156c964602be0234ff4bd9fb49c331
MD5 1e228a2656b1fcafd4854568a57bf9e0
SHA1 e25d6b929cfef7a04c48a45fd7b55306eb1f7bd6
SHA512 f994a57535d8ff02e51eb044ae9f541ad79eb8143191fff1137730d6d24dcc53b8ca3fad6a2f241c2c09f2bb86990b6653d6afffe62a523d2d721d7bd85705f2
SSDEEP 768:OopPJTF9QIFsHHlxauImFZnUE40CCqRkp:3TFq/T9H
TLSH
T1052379F7C3F8562DCE2261F46A263E1FCD6D091497283DAE89D86F1A53E1470E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 60fa54f088c5a7374a142b50f26f53b98d17f33840c3244894053199bf8029db
MD5 7ede9c896ec18d81a1d75be979994ee6
SHA1 3d39db5f3971c3c50c8bde517f3af67c0fa0d26e
SHA512 3919de9b2639c81793400af110ddace566e9e199f6deb416d6e875f0cfde6a7cebadba1cfc2ff714d3906971fb6bacb5e5361f6311c96c28e1c9acc4b0fd48a2
SSDEEP 384:sxZp+rMa/fbs5e+qVUwZFHbI/BXLBeVcyVJkc:sx+wa/fKe+WUwHbaBXLuzP
TLSH
T14172D853A67809B74DDAD22AF154B72BD3F40426D6944E85AAFCCA1C01E7EED3202C5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 e88bb3e1511ee4f91e24b4889446a7ab989ffd810a7ea5ac92ca7b89bd66b016
MD5 949706546239b829748980e4dd1ebd28
SHA1 ece339a2cd6511881a11cd14a0bc96fee2370567
SHA512 f8b147c05b2d38567b61341122c2ac677a336f50568f978c11d854aa57a7d8d7cfda4cbca16f26c6dc181e583c39c687ffa19f5c12daea45366ee0eba56d873b
SSDEEP 768:NRs6plI7pLuLXx1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYkwILlWwJNiroF:NRs6pl0EXx1WvxzWju1jaZkwILIsN5Z7
TLSH
T14EF20C3B6C0CCB7E4F804E9CEC2A7E9A7DE8018B9698C99447FA445C03C66EE51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\92bc7b1de33d85e1ed0d25680dfa49f54a6f0378\index.txt
Size 48B
SHA256 e70b4e6b26680fdc22a700944a5fe9666721a4b2bce3198e55d890f5bb560725
MD5 ca065e13193a6029fb45a609d48be8ce
SHA1 bdadee760d64870722d0124564be10da316443a2
SHA512 1a5020ec47f23745c9563be5d0c34c76e5ea5f25df6c30146f34e7ab3556075fd6179c498c898451dc9976bbf3ac27770e7915b3dbef84d43d12d4ca871e2b80
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\92bc7b1de33d85e1ed0d25680dfa49f54a6f0378\index.txt
Size 144B
SHA256 71223e2e03c2bdbba3fdf552bc15811670c28071d15ed3d7c658c15b07e0b6c1
MD5 4010cd219fc88bd0f92b25beeb604780
SHA1 b71446610d28e1bb456532ed9d70041b17989b5c
SHA512 79276817e43925a6ad23339320b18009db610a35e74873dcc2f473b3a13b8aa8540f1a7b6b0254c898750a24d20a3739f837513c68e3bd1de9940094c22fe79f
TLSH
T135C02B3B701160241706B19F1C2BF27993D72C4CDC3200C4F013F0986039153C009924
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\92bc7b1de33d85e1ed0d25680dfa49f54a6f0378\index.txt
Size 137B
SHA256 87bd981e7b73f6f645126a622572e136fd1f2735e1a17667edd80b3eab541698
MD5 1ea2cf17aab6cfd0a0166a855203f0a2
SHA1 0c65330e8e504b1f112cb9e3c3ba49bd0d1897d3
SHA512 62962266f2af24d1f119f4744580e05e40eb575428ede76805684ccf9ae69a0934de3d02205a852d3409732b502f450adcc74f753bc952c73a003c4f8a9ea234
TLSH
T134C02B3774019024570EF29F1C1BF239D3D7644CDC7200C45012F0985008553C00A924
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58ab2f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\92bc7b1de33d85e1ed0d25680dfa49f54a6f0378\index.txt~RFe58ab2f.TMP
Size 144B
SHA256 66e09df8607f4356228fddbfbac51c6f82dda8211275ab6245671bef24176fe5
MD5 f19c661034c2e1f7a6c36c9683ac409b
SHA1 da7135b2868a4601012c288f19984be3dbe92577
SHA512 55b6b76aeac2ca226b0a29b3aea4fb4020752a8b3703b240d184f3fd95aae21abf0efc56b69203a2a54f0c18f29bcb0bfaf6fe49459c76cb09d045b5cdcc853a
TLSH
T10FC02BCB24111038DB4295B70C3AF37C83C76C6DBC1050D4401370003039187C45BA20
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 57336e5bdb8041e8b3fd9b01582dca7e9234e604207ef8c34ec7f034832da0b8
MD5 b918e969e58a081276daca65dea0761a
SHA1 274e714104ed1b625fd270479e051062f67ed75a
SHA512 38a23d9b3d24810f82985fb6630f651f95e84d880a11abd3774b5f487a4265a70b4ad7b78d2390dfc64d98aa9294db99785bb5e27af359773e587a29cc108bd0
TLSH
T109A0021D06E44462CD514270F05121D83A90CC20460167AD94E400548E577605212819
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fbc0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58fbc0.TMP
Size 48B
SHA256 a78cc58a421e904ec2a050022f19e17a5fb7668df0a12bab77823384017b5756
MD5 18162310281201d9fed5c93f43e3b960
SHA1 706f065f564241880357393ea9805c90b5fe429b
SHA512 044b717b963d028faf39478b659da57fb441fac51a603922d5abe205bd7212bc22a7950ddf7c183e401e4bfcd73677e5a7bf53876c798d11958044b8166a22fd
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 ce416a8a705944d3bfdd8367a5f8d406cfa1865b0344a3ad5950b8c37bf417cf
MD5 d83e72363b16a43f8dce1ee01e528506
SHA1 3acfd6d213d7ec17a71adf32adbf022ffb335965
SHA512 08f216f91a32156275fa7bdebe23db30daaf2de2b804716c66633fe8b82613804d3b62bcef33239dddfa77fd6a5f9d55b25f12348e9049870411e468a564a189
SSDEEP 96:KUAAKtePGhOKy46CK8K/aMHeKIoWKqsKHqTv0tBnRI:ii1Z3CN/O
TLSH
T152E16A5272B702123C7E690CA29987275F8277633418E42B7BA840F24E76E341DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593bb7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593bb7.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 86ec0df0f897d8f24a7f29f267447da7571c8bbba086a53594b554f1239a3783
MD5 0aa5c8fa85b2a8904dfcbaccc58717dc
SHA1 cc914cb0c07ba5be0c18d58280570aeb95930072
SHA512 df6cdb2ba205089602a670dd914c67339cffda8152891f0e0362e93e17c3d0873752214834a3e0d55141023da9126156ac651b2dc01d9a867d5cde7e516963bc
SSDEEP 384:nZtNnNnb9+sNtzao5SR33vmhWKu9va9pd1c2AcVo9dYkPjX4u06:ZjZbEVdIbk6sYkPDB06
TLSH
T112927D352D382DA78BF39A06F10737139FB841AB99952E84D9E84F1D01CB69C2307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8efd5fab19f087666362f2d55c9cdb234581e5c22098c1e2eb90b8cb1d01a9e7
MD5 296b1fddb0986e5a96cafa79634eb8ca
SHA1 4b560e0c3fe117e41e22fc8bfd729c4e7878bcb3
SHA512 5ff4eebd5ce674e14a04ee60e2f5bf19f958648ee79c647afb6ff3a89664391c8ea7cee3ad851bb4b1ec2ce9da3d6529823e2e2e129ad41504df81bfcfcffc77
SSDEEP 192:qON66O7+3hQmiUyvuvlGttb0/+Fd1DgG2EiU6:qON661OKlGt9pd1H23U6
TLSH
T12402E8396C782CA78EF2AD46F68727175FA5117BE9A62F40DAE85F0C00D765C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8878108234daee70424eb5b21d33f4a0c4e0c4958bacf0d7c8dbe7bfeef5d25d
MD5 f661501113a7dcf4f44bb92c1d5dcca1
SHA1 e902847e52401c45f300cbc043bab8eac24b4add
SHA512 4395da157ff08c9a197271bb4a4c66100fe7982c936244a6674e195e22245c4617a2e82e09491575288bf989ec25693a2e1da81a45b9f6a28acc33528a759a4a
SSDEEP 384:nFtNnNnb9+sNtzvo5SR33vmhsKu9w2a9pd1c2AcVo9dYkPjX4u06:FjZbEO/u3bk6sYkPDB06
TLSH
T1B0927D352D382DA78BF39A46F10737139FB841AB99952E80D9E84F1E01CB69C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 c4ee11879edb5faf656b465c160dc7d4d216ccf00c4da3ec0e455b1902749904
MD5 0c6cce7a81d19b15a56eff974f85d261
SHA1 6cc1c9a1cc4c4f19b144c3ea38491a779ce88911
SHA512 71f65ec827e0ea1fe33b070f2f22901a29f6b4fb82378cd31ec57a9684ac3a7ce09a00bb4f41e0c662a0b72cd421c7438caca82aa269552036ce3dd4cdefea99
SSDEEP 384:n1iF1tNnNnb9BzsNtN8TUNTUlIlvo5SR33vmhXKu9w29Df4K9pd1z2AcVo9dYkPP:8F1jZbnewgXuulKbL6sYkPDB06
TLSH
T131D2A2F198E79977D9AE4783A33E7E429EBCD197B4841980BBD84D0CCC861BFD206811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bad5bf6898aa27c8715f131e5e49cf5af337060f2a3465b1aa4ba4ad7ca002a6
MD5 81adcda8671a6286db8e737931e91ec5
SHA1 d68ffda8bfb3c3c44c4f5b47a52ca5c56d6691e9
SHA512 a7d405184b1a04d5a6590c8508951935e56c9e53dcb1ad514ca27325343e4f362489325357d50764d413629f883e9c6791b33689123d5fc2b7bd88d6330d789a
SSDEEP 192:qONxy6O7+3APQmiUyvpvl9tttb0/+Fd15GzcN2c/lcU6:qONxy6KRO1l9tt9pd1t2AcU6
TLSH
T1DE12F93578782CA79BB2AD46F58737179FA4117BE9962F40D9E84E1C04CB66C2346823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7c4fbcd749edf35474a842b66ca228bb13a61be78073d939471404c0d92c2262
MD5 cd4d977287514c1972244ad2883b9ccb
SHA1 e47de33dd2f753ef53b6b4ca3766c40e38efa04b
SHA512 2fca6d22179b8c94cf65955bcb90723ab2018e4c3f2d91bd8e0d21d77559213b12cfced69a875728505aa30445b6e5e1b45c58e9b69647d60b63cb24f24ed6e1
TLSH
T10BE002449200410DD4B40731805B5B742FD0D001112203068220555C2C237447B003C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6498d6e9813d4656652cd39dc791ab76ee2cd468f677fbb979357e6a82442442
MD5 d144be16acca00195b739367e12e8bf7
SHA1 b4b3216863097056b67d163d1eb1993121184e76
SHA512 8547fa2bccd6bb82668a51ba3d40797de24ecfed34884728334d33a7f72448ff08c3eaa03ea10aad6efb041413e01466e5d07eab43b6acf7b0616ccfb22e5eaa
TLSH
T1B8E00246D300419DD4B80731805B5B742FD2D021117203078A30555C3C337447F107C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58c196.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58c196.TMP
Size 392B
SHA256 d89fa3767aef73e7a25c86071e31d6795c0725b5bf8902541807f62968206530
MD5 12d6090fd250c4335916c91ad3b0e74c
SHA1 491cc234960ffb232463134a6952baca20ff1af2
SHA512 e1625b8f0b81b886e52c732bee6e8edb6e4c3312c2cfb3a3e4c42a0a8fb6d9736fae9e453f82c2c4aa87fc2355aed2be7286ee0870623570e4197cf37b259b06
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

2ededecd-1f4a-4ad3-be28-3af5d634cc28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2ededecd-1f4a-4ad3-be28-3af5d634cc28.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 123a84ed495451cea92be15032b9cd180599beecd74ea65bc76567137afee537
MD5 9a32bc788d8cbaa1ca8767cb985426f3
SHA1 c0690e958a0d5e0f2b9ab42cb004bedd927a2ece
SHA512 244bc8aacfc9d14ce51424df3d4a89465cb253ac90d9af45bed8ca97d09814f5a7775444a95d48bcd1e46073c3af3f0cdf87a1b0fc3c9555f5c82893b8bec1cb
TLSH
T15541269CA6E91148B3B36F569BF6A9AD487EBD372F4BD55D00010E4E0A22A00D8B1733
MD5 SHA1 SHA512 TLSH

Submit Download

07dea2b2-3aeb-4eec-a5a9-2e3dcd85c33d.tmp

Path C:\Users\Admin\AppData\Local\Temp\07dea2b2-3aeb-4eec-a5a9-2e3dcd85c33d.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff7d8d68-4634-4bb5-8772-e84d7a23e194.tmp

Path C:\Users\Admin\AppData\Local\Temp\ff7d8d68-4634-4bb5-8772-e84d7a23e194.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4396_117267105\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

629c6374-2e7f-4852-9133-24dd051e99ab.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4396_623380000\629c6374-2e7f-4852-9133-24dd051e99ab.tmp
Size 147KB
SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
MD5 a9f7675ff091bb15c88909424bab4a39
SHA1 90f753d8d7e4397de0f49631fcd9222a7f59148c
SHA512 ff1f89fb04ae9c9a4c6cf6b1475f5a77f1c4f90829acda95cb39889b6b15c3b4f0b3b822a668f8ec8520b002cc90dd397cc26d314ac8fd5f3e2c9826bd458df5
SSDEEP 3072:Ph3iICVe1DvTtr/3tOpPu8LdKBTJyU4AshzWnD7UVDvuZE4tkGL:PgTVWvTZPghwln0AD7UV8Eeky
TLSH
T12BE3E01D29E2846EC82B24F4BA4A718FC71ECF07910BE40F25D984A55C7474E17E2EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads