hxxp://discord[.]com

Analysis

user interaction
yes
max time kernel
576s
max time network
578s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/06/2026, 03:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://discord.com
Sample260621-d7wfkact31

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Contacts third-party web service commonly abused for C2 1 TTPs 22 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	discord.com
14	discord.com
2547	discord.com
2637	discord.com
2798	discord.com
1664	discord.com
15	discord.com
22	discord.com
59	discord.com
80	discord.com
1486	discord.com
1658	discord.com
2695	discord.com
2	discord.com
19	discord.com
1487	discord.com
2685	discord.com
2710	discord.com
2825	discord.com
1489	discord.com
1657	discord.com
2551	discord.com

Drops file in Windows directory 5 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setupact.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setuperr.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagerr.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagwrn.xml	UserOOBEBroker.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileCoAuth.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4768	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264867896191011"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{CB15852C-AEC7-436D-9521-8A956FC17A11}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{210B44D2-CB1B-4C04-9FC5-BEBDE45F9DA0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2552	msedge.exe
2552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe
3452	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3452 wrote to memory of 3536	3452	msedge.exe	89
PID 3452 wrote to memory of 4456	3452	msedge.exe	90
PID 3452 wrote to memory of 4768	3452	msedge.exe	91
PID 3452 wrote to memory of 4456	3452	msedge.exe	90
PID 3452 wrote to memory of 4456	3452	msedge.exe	90
PID 3452 wrote to memory of 4544	3452	msedge.exe	92
PID 3452 wrote to memory of 4544	3452	msedge.exe	92
PID 3452 wrote to memory of 2964	3452	msedge.exe	93
PID 3452 wrote to memory of 2964	3452	msedge.exe	93
PID 3452 wrote to memory of 2964	3452	msedge.exe	93
PID 3452 wrote to memory of 5616	3452	msedge.exe	94
PID 3452 wrote to memory of 5616	3452	msedge.exe	94
PID 3452 wrote to memory of 5616	3452	msedge.exe	94
PID 3452 wrote to memory of 3656	3452	msedge.exe	96
PID 3452 wrote to memory of 3656	3452	msedge.exe	96
PID 3452 wrote to memory of 3656	3452	msedge.exe	96
PID 3452 wrote to memory of 1148	3452	msedge.exe	97
PID 3452 wrote to memory of 1148	3452	msedge.exe	97
PID 3452 wrote to memory of 1148	3452	msedge.exe	97
PID 3452 wrote to memory of 3064	3452	msedge.exe	98
PID 3452 wrote to memory of 3064	3452	msedge.exe	98
PID 3452 wrote to memory of 3064	3452	msedge.exe	98
PID 3452 wrote to memory of 5764	3452	msedge.exe	101
PID 3452 wrote to memory of 868	3452	msedge.exe	104
PID 3452 wrote to memory of 868	3452	msedge.exe	104
PID 3452 wrote to memory of 1752	3452	msedge.exe	105
PID 3452 wrote to memory of 1752	3452	msedge.exe	105
PID 3452 wrote to memory of 5240	3452	msedge.exe	106
PID 3452 wrote to memory of 5240	3452	msedge.exe	106
PID 3452 wrote to memory of 3188	3452	msedge.exe	108
PID 3452 wrote to memory of 692	3452	msedge.exe	109
PID 3452 wrote to memory of 620	3452	msedge.exe	110
PID 3452 wrote to memory of 4864	3452	msedge.exe	111
PID 3452 wrote to memory of 4864	3452	msedge.exe	111
PID 3452 wrote to memory of 2552	3452	msedge.exe	113
PID 3452 wrote to memory of 4580	3452	msedge.exe	114
PID 3452 wrote to memory of 4580	3452	msedge.exe	114
PID 3452 wrote to memory of 620	3452	msedge.exe	115
PID 3452 wrote to memory of 620	3452	msedge.exe	115
PID 3452 wrote to memory of 3572	3452	msedge.exe	116
PID 3452 wrote to memory of 3572	3452	msedge.exe	116
PID 3452 wrote to memory of 5888	3452	msedge.exe	117
PID 3452 wrote to memory of 5888	3452	msedge.exe	117
PID 3452 wrote to memory of 5888	3452	msedge.exe	117
PID 3452 wrote to memory of 6140	3452	msedge.exe	118
PID 3452 wrote to memory of 6140	3452	msedge.exe	118
PID 3452 wrote to memory of 1524	3452	msedge.exe	119
PID 3452 wrote to memory of 1524	3452	msedge.exe	119
PID 3452 wrote to memory of 1524	3452	msedge.exe	119
PID 3452 wrote to memory of 1968	3452	msedge.exe	121
PID 3452 wrote to memory of 1968	3452	msedge.exe	121
PID 3452 wrote to memory of 1968	3452	msedge.exe	121
PID 3452 wrote to memory of 3320	3452	msedge.exe	122
PID 3452 wrote to memory of 3320	3452	msedge.exe	122
PID 3452 wrote to memory of 3320	3452	msedge.exe	122
PID 3452 wrote to memory of 1632	3452	msedge.exe	123
PID 3452 wrote to memory of 1632	3452	msedge.exe	123
PID 3452 wrote to memory of 1632	3452	msedge.exe	123
PID 3452 wrote to memory of 5340	3452	msedge.exe	124
PID 3452 wrote to memory of 5340	3452	msedge.exe	124
PID 3452 wrote to memory of 5340	3452	msedge.exe	124
PID 3452 wrote to memory of 5736	3452	msedge.exe	125
PID 3452 wrote to memory of 5736	3452	msedge.exe	125
PID 3452 wrote to memory of 5736	3452	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://discord.com
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7ffe8690c188,0x7ffe8690c194,0x7ffe8690c1a0
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1568,i,8302506089336163709,13560892640689034023,262144 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=2984 /prefetch:2
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,3460636119816677782,4459606932742944079,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3036 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,6584405576657276726,622484243961108070,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:13
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,14825308564401589557,5675263238716798292,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3668,i,548631606317415643,8273091908118459327,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,5769268474572050756,12321256962793604729,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,7386298573186354886,17123190770899336556,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:9
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3788,i,5699575205136042379,10928451914586341850,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,11381955005039109878,13527382912651484412,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,11381955005039109878,13527382912651484412,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,12575853365014002882,7387343699668944795,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:14
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,12934070702326508039,12289492225698671794,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:14
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,12746089383851499211,17141458074942547113,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3920 /prefetch:12
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,10728076874322330933,3283008138164751582,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:14
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,6485065898718640388,812551680628246899,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:14
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,4610918645855541604,3820487976145926016,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3936,i,9855500343870384599,13054119296894342017,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:14
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6716,i,2246947897750865387,16108410187730919601,262144 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,126411864027406483,15422442813765298669,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:14
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2944,i,13575704706057438949,17386646025512611991,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,17382143435272085625,11043892269160915434,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:14
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6052,i,3552227069407065755,612909139186738561,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,9140872521060144750,15709327730663596514,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:14
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7196,i,7491840724759132206,15786638588205581966,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7144,i,2333593069278157680,9532715372732916659,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7420 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6840,i,17250964546422775304,10600508554202923022,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7624 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7384,i,12871891159514891185,2602524979493743247,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7572 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7268,i,16586997739883943535,17388084842690497435,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7840,i,15874574786230035150,13496767510545984987,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7724,i,328512335417398281,18353736694992306611,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7844,i,7488110475108174115,1672450442600996287,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8020 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8296,i,9643125131079941672,17719963896609019253,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8328 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8304,i,17615243083288072354,2274048500126516814,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8336 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8576,i,6964584305413691996,906153033708761808,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8580 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8740,i,18110436594439846083,975665871908749035,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7720 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8776,i,6053069389354225248,13719900482796902641,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8900,i,95017018316949641,3018718174581925949,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8920 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9188,i,12268386876009022462,15406471130368620789,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9184 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9380,i,14257914792368988285,6230242616029226898,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9388,i,15121146017814161949,10247226136979239196,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9472 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9400,i,14780456138636035926,4697834949041550733,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9492 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9424,i,11833439566465627114,3247564027335074186,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9592 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9416,i,188577771303006587,7887223716311849665,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9596 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9336,i,16713566992218658767,7965307957095987653,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9436 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9368,i,12255267830303649975,18113077754534561103,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9356,i,8392756897593562422,9059783894839583057,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9440 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=9936,i,918533953003156676,17402162140307794254,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10772,i,7251305246071613545,10725567148919999392,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10800 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10144,i,1537386285886110936,4839427207679382443,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10968 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=11080,i,1843710860408660712,15031851432732016882,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11096 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=11356,i,4744738640370489285,1505343128508139167,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11312 /prefetch:1
  2⤵
  PID:6152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11512,i,787254309419922792,18234281618946721303,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11376 /prefetch:1
  2⤵
  PID:6176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=7752,i,3094860237970197424,699909667073769658,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11392 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11484,i,5757964628234635992,1226555202114764066,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10212 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9112,i,11485627922010689291,17831177422351559888,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9156 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9756,i,13699318741002463920,3038912858864571881,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11296 /prefetch:1
  2⤵
  PID:7060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9448,i,804612896596506483,2192943722595191979,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10868 /prefetch:1
  2⤵
  PID:7072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10812,i,4169419582439773795,9266985566614455582,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9912,i,8134783972708837312,1156833497424565753,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11740 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10800,i,13544987957563940200,309387450381262456,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9892 /prefetch:1
  2⤵
  PID:6212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10140,i,15060975368431218974,393257914706187578,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10308 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=7736,i,755555638975803065,17885481902248733606,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10484 /prefetch:1
  2⤵
  PID:7044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=7592,i,7436371644072399101,7514850285723256483,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9444 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=9940,i,4184675880861323746,8368038730394755159,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8732 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11744,i,1386349131000904915,5714017827907352969,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8680 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8144,i,1921036208076015199,7435947745295344748,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7900 /prefetch:14
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9224,i,9489970098297215591,6738542529701816265,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9208 /prefetch:14
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9752,i,15574128172960126822,6171060630087816373,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8064,i,7999593439102596377,3804552850778994649,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8236 /prefetch:14
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=11616,i,4423357562558273337,9874113768772815879,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8992 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8736,i,2975559668746660842,4961580113395718126,524288 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8924 /prefetch:14
  2⤵
  - Modifies registry class
  PID:6716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=7204,i,13990889319986389638,7487356336591980986,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9652 /prefetch:1
  2⤵
  PID:7872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=7660,i,1590394526160221206,9559263679256967908,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7664 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=8680,i,14625282093425873432,1491129324701007151,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8656 /prefetch:1
  2⤵
  PID:480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=6764,i,16554511317644183812,15023966476208596461,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8608 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=6836,i,11190830093174358492,9506028429883121058,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10676 /prefetch:1
  2⤵
  PID:7008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=9344,i,1431672963109754735,6306976601391118890,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11356 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=8816,i,3433989950166376451,13595097978304746862,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9760,i,9261309522926717698,2330588528727331022,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9784 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=11348,i,10885296784922189626,17143137269538718191,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11468 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=9184,i,3465732129129716587,2334807636796019224,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8248 /prefetch:1
  2⤵
  PID:7184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=11396,i,12002994693743059489,15780166284822764286,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10352 /prefetch:1
  2⤵
  PID:6420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9964,i,4876791312045746978,18248680593750042021,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10192 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=10968,i,15988393537546896099,12851653760350082463,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:6296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=7200,i,8962950630243436400,11836111067440137618,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9000 /prefetch:1
  2⤵
  PID:7572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=8084,i,14567295874940540072,7021373437553701735,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:1
  2⤵
  PID:7684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=7456,i,13030884466224887334,5925991666832666990,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10176 /prefetch:1
  2⤵
  PID:7656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=10376,i,13671582446544133895,10971692532205011439,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=7756,i,10188200817651268284,50792817633409870,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:7728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=11176,i,18291433282581006346,18199180002670107778,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:7780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=10776,i,17007969013654224433,7048498826228802977,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=6924,i,1836087684429270284,13322083699266832271,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=10032 /prefetch:1
  2⤵
  PID:7588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=6820,i,15178174398667882959,14202944866512226952,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:7716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=9028,i,11869662146688763482,17616878447937890769,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=7496,i,11243992229149611828,1735544867317831391,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=9196 /prefetch:1
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=7624,i,5788885958520130021,6195633605611500458,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11508 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=12216,i,4457505432803196952,5670203331093714035,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12224 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=12404,i,2196798236557820079,9489378995528998724,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12408 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=12548,i,16266778143201939622,17663733144266629132,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12536 /prefetch:1
  2⤵
  PID:7888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=12544,i,17910128635980462686,14763013835128617740,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12724 /prefetch:1
  2⤵
  PID:6616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=12560,i,14163458417995211840,5044521322240848503,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12864 /prefetch:1
  2⤵
  PID:8048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=13000,i,4772486381616859658,5295553628238504237,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12988 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=13128,i,3000667531905243224,11524848417846070119,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=13144 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=13008,i,14106149391233830061,3104050896080059351,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12972 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=13412,i,6767536534811599659,5981128663490234071,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=13428 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=12976,i,9471541762331943214,16369990521408423718,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12760 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=12532,i,14371659264828618725,11647466653608920359,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12800 /prefetch:1
  2⤵
  PID:7108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=12564,i,14704896137006705377,17489886125725025914,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12624 /prefetch:1
  2⤵
  PID:7896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=13644,i,6213376613483313478,17709481737940307665,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12664 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=13040,i,15866785367628324309,8184278004503120550,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=13036 /prefetch:1
  2⤵
  PID:7696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=13092,i,1449059504598643350,10072313845162291940,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=12964 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=12336,i,16814687297433677468,13291390999027077204,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=14060 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=12140,i,4231233778273665166,5750656991821796683,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=8792 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=12332,i,3621848405588648769,13265883209191170840,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:1
  2⤵
  PID:7956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=7272,i,16398501014504902296,10115305142705247249,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=14172 /prefetch:1
  2⤵
  PID:8024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=14220,i,15576810053349593668,3811663294818236412,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11896 /prefetch:1
  2⤵
  PID:6380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=14248,i,7594495483547221123,4773718220164973674,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=14240 /prefetch:1
  2⤵
  PID:7192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=14220,i,15284586888621608642,10842443462933593788,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=14364 /prefetch:1
  2⤵
  PID:6204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=11512,i,11412385469108267418,5507812846333152818,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=14500 /prefetch:1
  2⤵
  PID:7252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=14228,i,10280352472927338737,811115754864988297,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=13568 /prefetch:1
  2⤵
  PID:7376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=14660,i,2524129504436766521,16060526598323441996,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=13092 /prefetch:1
  2⤵
  PID:7424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=14804,i,13707052447751925078,10928622907294043954,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=14916 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=15072,i,6974376078593773319,6254977783521329546,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=15084 /prefetch:1
  2⤵
  PID:7996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=15220,i,2047699112040527791,1548090127362231733,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=15232 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=15292,i,14158032334695098153,4602214455343157772,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=15036 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=15516,i,17444174757902384023,7542916957878207219,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=15520 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=15528,i,7317110456885736142,5492875915539860875,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=15700 /prefetch:1
  2⤵
  PID:7728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=15852,i,696789084706553488,2693900854581493343,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=15836 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=15988,i,17408229527493177287,10939128120263870560,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=15984 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=16156,i,17706835412138491718,4153304913145076182,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=16184 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=16120,i,8272572747502106219,14022337224733514455,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=16012 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=16444,i,11492209198528177243,3896452754379689523,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=16412 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=16624,i,13294020605049968190,8618002849445576707,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=16636 /prefetch:1
  2⤵
  PID:8216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=15344,i,1698528888918629560,404681948207533364,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=11716 /prefetch:1
  2⤵
  PID:8240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=16680,i,8714475588106030380,8841871949236441828,2097152 --field-trial-handle=2988,i,2737640818426863394,541346475285817980,262144 --variations-seed-version --mojo-platform-channel-handle=16668 /prefetch:1
  2⤵
  PID:9076

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4476

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
- Drops file in Windows directory
PID:5984

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
- System Location Discovery: System Language Discovery
PID:2504

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:8108

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:8200

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:7440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 03fd1bddab0b1fff1f2450de47d0eee8f1259d515e9cd7d3883ca7820724799d
MD5 5255aea2f59d2a617a4c79af6531b180
SHA1 c809edaf2e085dbb9295e8595007967f92182c62
SHA512 caae81175230ba2d1ff5c3471b4a07c2cf007c53aa4a4172aac786d0077fc0ef09612a932f2ae388bb178d0190194e9d2412651e1917950ea13d85fe641392fa
TLSH
T11EE0D8799384E2E503069AC6C49CD29C4055B61EDD4B867D771CF09C64841005749698
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e6d07243344b1ffbd5c3ead5f909154eddd69e7dcc70552a5dda46d40329352e
MD5 89e4494e2c61f55fd59dfbe6b577eee2
SHA1 070ebf8c9c2a8b22f4b87380cba65cb336f5cc59
SHA512 7eba60040615414f90fa48cf56302a65fb8288e5a2bd994ce085d18e64fabf917a62a6873d5bc72497319a9b300158af935eb8bfa143ba865a8aff7d5ffe281c
TLSH
T1ECE020E445C4C31E7300658B86D84B0C8184370EE3C5AAAD3736C8C87001580E3CD5D0
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000e4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
Size 24KB
SHA256 2beefe7293101d64840c308506967e9e2a0b2a6c4500ccbb7871c1342f2894eb
MD5 dfcada20b4cda38d23f6fec8d0260763
SHA1 373ce141ff860592bfc61220e4b5c82480533d19
SHA512 d8b43808a8ad313a54f2418a2d74dcff9f02648519a7637d580e47fea6fa60e8a57c95e3f00643a33accd6479bf0fdba3a858818e38058775b9aa238761536b6
SSDEEP 384:3xbeyInNsrD5LZCzRFwiSmWR4a7tjVwlgtX/UC7duixIaILK7fjzUmcdq7+RCRHr:lRokgcvP7C7m3SBSIjsDkLYd9dL
TLSH
T1A3B2C6985582703CBA3B852167D8AB4C7234DC06DE3228EDF77B662E0FC67D642B3158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
Size 64KB
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487
SSDEEP 1536:Lm4AGqOak9IP5qOYV7SofryJiRB3xVcVXsIBGCrmQR:LITk4qOq2oDwuhpDCaQR
TLSH
T1C55302D5B8E93222BDA947C28B442085CC6F367CF53F3DD8DE31AD2AA5909DC41847C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
Size 70KB
SHA256 fb687d71a9090fd9b633c3653a29fd3ff5a0232219faf486fc7bef2442a2b0f8
MD5 457a06fdf8d4e3d90fe5d3f6666ad04c
SHA1 3f0907e5739b107188d38c2547a9bca8ba8c969f
SHA512 1333d720540ee69790ba13c32311775888e8018e5eb8c4af973133a68e10fb934465d98ff007bb79d40f31480bbb57dac100de1d427b6700b4379aeb69980197
SSDEEP 1536:Qdq4rH3xSG4yuk6NTmRH2Ma2mxKie56ckEcHhg8FimgmziZh6YoVLFPjlC/FQra:N4reyB6FmN8KqckEymWG/hFoLPjhra
TLSH
T1806312DC7216EB862B148A27F4E615C96B740947E2C9D9CA0D1D33EE1818E3F7FE2160
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 38KB
SHA256 ee11fe732ad5cdd818ca4f82802658b72b435ddafd277862c5ff5e8c7792fc5b
MD5 c64471b4dbf32d24e99720769aa56ec0
SHA1 5980f3fc4223d8267c10aa9aeb52ec471dc5638a
SHA512 b6ea0c14f07fe4d75bf2b923e2185137a67a0a5e7c16a82e568f3570511e5d5911c3194f235c7002b3d8a88b33e493be2af609a243d9559041542be62470ebae
SSDEEP 768:JDR+wPn/YVmMX2czoWhAhyAAZ+evDxcKzv4NZ7gNiI6ZFTm:XPUmMXfbyyAm7xcyQNZ7gf3
TLSH
T1FA03F134AE53235DF9175AB444B75AA1628BE50305E9803F2DA28BE93063FF526C4EDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00012c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012c
Size 21KB
SHA256 1441dca9942f1b78e6cb715a23ae143c56ca7f5bc96ffad3ad6ccd0fdcdda9bd
MD5 9b4508b1663affcd3c38afbd0fc19424
SHA1 6aa4aea8baf220d1cac7f07ccdb8ae82d503fff5
SHA512 19c18c0e96631f9ec1ece0d5de3e328b64bf1a9e72f698a49b39ce2a0ec1758e62cada2fbdef5e4a814429033d4e403f00676e8f58b4e158db91dbf39f5d3e63
SSDEEP 384:CPTIATQGroE3do5cQljUx2FQcB0O7OjQA96qCjtT+t9Bwyw4KRBvGT4SNHUPctP:CGdENo5cQljXNl7Ojr6qrvwycSN0EZ
TLSH
T19BA2E1AD44B49D022F337BC5C0CB4553628DE0E54F5709DC45AA75CABDE57407AB428F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00014f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014f
Size 22KB
SHA256 7476553a0c442bad7a88d2fddaa49acb67819516d4db4db372cff48112cd74e6
MD5 e5a1d90c4e66119b065592499d865c6d
SHA1 d26c04c242747c06b0dab83589e88c090a5e2e40
SHA512 09ababbf05ee82dde234c956e5d733eb0d1ce19e96f4464ba85eac1cd39fed227c2dee0e449f8c362084557fe06195bee8c08595bd957792b56fb1a225910e00
SSDEEP 384:IA2t8ns7JBRNvrczQFnCsbGSn3K6u6PqJTJ8CSpJ6l5GMoEYMKv6kUdgzhIp5WyP:I/7JC0FnCsCwuGqJTmCSI5K4amuhMVP
TLSH
T1C8B2E012B6AAB1ABBFB2435401AD1667F8389D090BB5CD652B404CD2F96332F85FF650
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000156

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000156
Size 73KB
SHA256 91f9f6e870f94dcf0add22ffa5ab68eb7bf5a100da53b04da61563a22326556b
MD5 e7a9b1acaf7c367f78271dc9cd7031c9
SHA1 42d59aaa539470f7ce21599e825f442e65a03c07
SHA512 4aa0ab195054f1feeb444405e9a75ad3dfd00b9aa8551c28809498638349f35ff663d00a58e3f9a4b89add050dd43e900087c3ae9d31c9f8ac97aa1640684555
SSDEEP 1536:VvfqT5LXi94v2ntpbcKWvFKJupsiUsCpK2dCyq95+jpFTlX+HuTaneE62/:9st04UXcKWvFKJqsvsUKX6X+HuBV2/
TLSH
T1A77302C976BBF74B5E61F5AEBA6846470BEBF19D2413271C86D4A49025E3CF207B3021
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000157

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000157
Size 35KB
SHA256 57ad3bc69c218a19cc3f44dde72302f0c9731f36fdc0d3f8ec3e781925b529ed
MD5 070d7d3386c1c8c50764eef60a294de6
SHA1 d2ecb8d07341b919ef86416d2d89c8c7e4659b75
SHA512 9921b6139eeb7ed515a3de9e62882a6c3d26b3b87c9330985f33ddaec02d8877ced0f61a0df5c0184c65506980eab74c53354f23bdb823e7dda5c846c71ff11c
SSDEEP 768:xWZEZmISDMaa3XrrkytF16QDZ8pZC/71aU6q1FryHd4C:xWOZmIOG33kUF16xpZIav0F1C
TLSH
T156F2F15D6E5FDFB2A2C0F802F0B2042D43C219B456E287ED6602773B1DB8C99B650FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000159

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000159
Size 134KB
SHA256 b046311e6912ce50882e6e49371bc2c2e1606e51d7ad3396acf5197a76203f2c
MD5 465156ae4f7893fad9210d2153ec2f73
SHA1 2f2bb61b44939847231233acfda4f21bd7f30083
SHA512 68a89167d3dc56eaf265247111eceba19dcf0dc1b43ee06eddc846d47ccaf8d3c0b3cc2bbe55dc2f8083610946b96aee8858fb2bab7711c7c5ec7c6bdd52f15b
SSDEEP 3072:qEY1/Ddig2tPHBwYDUXGyL2vuyu4JpGHA3Mrc4w:hY1Ldi/PHBwYDUXGuyu5g3A3w
TLSH
T16AD3124E90B57ECAA0C938D65FA15770991B77190A3743CA000DEA8FD98254BA13F9F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00015e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00015e
Size 59KB
SHA256 94cbfe216ff5a1acee212eacbaffddc4becd52544df9bb6f99e9487fb3244d1c
MD5 a16399ff963fcf04c2d92db4ef33f888
SHA1 625ef6037986ef4cdf3b0c5446cf17a68b4264b0
SHA512 0dc08cd3555affc0e82a1ae6e960ac857660871155ac94e30392510fafcf08be7734d995177a2690f18ef6d716f2d477aebdc5a00934ee22af0ae86dc6ba577f
SSDEEP 1536:J5aqYLLivKKznqI6Qzms7I9uhqP/VDdDcldYMh3ZuzxGA:JiLuvKKznqI6QzmEiuqHVDdYc8A
TLSH
T13A5302CD71376D96C0ADD447E3B9A41E34A252A9727C2B61B8AC0CFED8F5DC70A84364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000165

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000165
Size 342KB
SHA256 08b447a22df3a757bfc33629196d0138aa7c279f44acabc2241c3f747d3276b3
MD5 82bbd08389d5986f05dd9bcfc1596fd7
SHA1 fb58bff4e74cb843ebb316c3d3c316465833296f
SHA512 5f6c58c28cb496e043a3baccaa8f174820aadc8091616e30a4b432158584e04b3f720fe44bd6d7799a06ab095a3acf4d642fce4962d3940d521cefab1dddb90d
SSDEEP 6144:34jnGsaXEcOQUCnLaVQWrd3lFDMIvltukAwQtvAQravlyp2Mh9nMgQG1i53:34jn6EcOKnLaukXaz4sWy8w9Mgn+3
TLSH
T116742254FBE00B69CEB2E5B419E5D7767B93B20149AD83CB93414A7A46CD0E5300AEEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000166

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000166
Size 16KB
SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
MD5 6d6500d74bdb62d26f489953a29a4806
SHA1 78ad9cb6440f40f2f423010ba750300cada596ae
SHA512 1408a622d07e454e07218b65119011f0909992c8f25bc39c9030324ebf395aa9525e54024d9406597243b63deeab0d7f4f67f88c1603ced1d6238036cbbc2181
SSDEEP 384:MOoJ0OpqyxAT0/k8NaYiTSSkvu75hjBSk1yWosD7FYozHKjb:ZORpNibpTSSkQQOF7FYoob
TLSH
T16472D07E24761178DF9BDEE71B6B721374A50E2B073EB07292BD245A055C709320A768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000169

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000169
Size 18KB
SHA256 1fe53f98c65e156f3ba3280eca6e304d7d76491c97346ce56f90911b14df288c
MD5 f7bd86c44ff66107b15007d3a0eda7e3
SHA1 4c413a12a093555615b9fc2953c3a2b88f566da8
SHA512 f6e952761c1beef291325083808fd927c0a997e242da6fce1be22fc328d29c99ff5ab3b4a540543c7ba4a4cc2bf8db9c02c59278844b9f735f00baabedabeb6a
SSDEEP 384:JPc1UhRKJ0zwcocVByINNu09rQoFLQEFDCT2o8xyqN0e4Mw/zZ8+:xKqRjFocDNu09jFLQWDsJ89MLzZp
TLSH
T1F482D02395D1CB98CED3A52482D28275BE321C33571E7F757A678A1DB1E437E3623201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000171

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000171
Size 838KB
SHA256 0048d625c5513dae45f02a301fc30b27975c8e86f74b8353dfd2d77e29ac1d44
MD5 1039ea18cc6045d9d61370f9ef207a96
SHA1 a309e33b51a88906d351237e70f3d6aa086e3499
SHA512 57c3762a5be93979e8c4c46d1fbe59d961ba7a07f635df0ed542c47e7e5b958313634254ff4b88af95468381a6d6f3b7522d6443a74376d9bd23111c80c0c474
SSDEEP 24576:qhND0GQvU/FX1rKR2l63qOPCt/evWzWWmhQ:FoFlWm6aOPIevyW1hQ
TLSH
T1A905339E0BD0932FFFE890FB58D2D7C56268832E51853E97EA5078E0E5C3C6664835D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000176

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000176
Size 174KB
SHA256 735502ef810a179fa579fbea8609b8a3900528c6452528176380b493d4d2bf4e
MD5 27a472d94de0eb51c6dc8bb5270a7e5c
SHA1 b5a9a31dc4af76f3cc2687ffdac7ffa6087f3e6d
SHA512 a20474f8cb9cd7e208ea96531c23ec97738bc9f1ea324e644b04fe609fcf6d3206b70c48a62cd43f055c5f0bc576d74c1bda27eb722a964a284c76c2a1f831fb
SSDEEP 3072:6LGBNLzrmVyzdMd4VJK348sfNX9VzF9F9gUgdNBySKI2ymvQTeRIitmQP0Hw2:6kNLzCkHio7HpTgz2v+e2/
TLSH
T11B04136F1770BE0444D4D964640BC4AADC221F7895BE84FE530F6F05D8AB2EE41FA26A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00017b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00017b
Size 18KB
SHA256 fb76503eaaf4bab2453f4fbfcc449369de62ed04debf61f1ab9c199f4c159c72
MD5 e5239c6fd24039fa75b9c09cf78d9ae0
SHA1 088333224de5324a287d954e6168ef056d9193e2
SHA512 2668ea8114ffbc7bc13161281fb162596b1f82b25a2a27857ce50a66e373bb4f105b729f367b60b6aff51feeb92b5091d665bd78835441d065b4b0bb99e57489
SSDEEP 384:k8QXZxyWGm7sZDjZzHHcL//eyeTKRJYm6OlYzivrkmFiNr09:k8QpxFGGkDj8//7RdYzuAA8ro
TLSH
T1DA82D153111BB4AACB82A4AD921375B43996AD27F0F7A84BD6F09711F8BE54081F7C20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00017c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00017c
Size 16KB
SHA256 0a77d6c8a78612b959b55b8c7e5177d699f58841d6f3a634c94b969dd1426668
MD5 39ab7bda9215e773fdee93d12040fb04
SHA1 2ba6319cfe3fd6892358ba3d194f4dda90a82f8f
SHA512 0126242bba1f77aa5bc905a7619216689779d7a20fdeabcfdcdfcb087a2d74b3d6c1af5511e9dce57ce3c87945d8b4f95bc6334a14520881577272d6bc434279
SSDEEP 384:yonVddi4VJMf/kxYImVxITTWWtulNQzNKhCxjmc3bDoyVeci/:yWV3ZHASmVCTTWWOhWIKRe
TLSH
T16372D02A18DDA5AB0116B5C8BCCECFAF587D76D1CFC6C39D6C0559287204894EB630AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00017f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00017f
Size 61KB
SHA256 a05fb07ea7d8bd3f11421f715d8cd57da39d5e2d3571ec27d538aa0a7386a6b4
MD5 b47b0e6888714282fc897bbdfcb34036
SHA1 957f0b1bba8031b9468b7f2c3fbfb1d5b60b74b2
SHA512 8f5f3cc6b6b6136cbe33b54b8f1ac6699a00880014a066b2643400f4c71e410b7e0cbdf981e149b51bd8c92fa8b789817cb14ef73baa8cf9ffc267d6b98d73b3
SSDEEP 1536:6b7KSqfNb62RrKNqfeoAU7fG/pz2to1Zjho1XMHcWUkK:CuSqfNRrgqfpA2+Xjq1Xsxe
TLSH
T1DC5312BE96E2D4A493E83012EA9C21D01EBD5952C21CF8C3ECABD651D92470BE69314F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000182

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000182
Size 401KB
SHA256 216fc72d78d60be8f04194dab42be937db4744be465449907d54118be235c1ef
MD5 d69820cf8bf35053be308e93ad2a5fbd
SHA1 76a978ce23bd08ea6697ab26e2f8d3f8db749100
SHA512 800829e0098b4333fd1a8b6db2ee076e4151b5ee2d2956a8ffaed5dcaae483b20af7f5951ce5821d7ea5b337140d0a530e0ef1228f5a27e00fba317f2f5536d4
SSDEEP 12288:kJ0G70luVKYJPgAnTr79YQ4ZjcniF4iwoJbBXjIfMh:kJb7SNQj9YQ4xc04toJbBXEfMh
TLSH
T1AA9423F71E07CE78CDBB58EFA427550322B7BD91185865B1EF065A8D7043A8D6B838B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000183

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000183
Size 432KB
SHA256 0b95dee388ea9ff073156af620f5619f054f9c6a745d4df45adff579061bc031
MD5 47f09f061f53a530d0499aaf8bdc5e1d
SHA1 c25be347eb0faf6d420fde4d5a27020c1f78c73d
SHA512 477fcb3da04688550e65b4893b25cd97f30d05eddb15bbe91a7802bb46e1d62e98917d678f8ef7fdba2d61cf489bd8bbf3bc6ceaf05377d6a114de21417e8e14
SSDEEP 12288:Oy2B1CQCKWwaYGRx2/jQ15lKpxNq/Q21rBMHmecjRz:E1Cpwarv2/yvKpxWr1MHmjRz
TLSH
T1B69423148CCCF394E6D386034C6E2A22FF3ED17AEEE43515B942BE54A681E17909B4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000184

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000184
Size 42KB
SHA256 b78fb569265b01789e7edd88cfe02ecb2c3fee5e1999678255f9b78a3b2cc4e8
MD5 281bba49537cf936d1a0df10fb719f63
SHA1 4085ad185c5902afd273e3e92296a4de3dc19edd
SHA512 af988371db77831f76edf95a50b9ddf1e957f0230404c8307914f11211e01cc95c61e0768d55aa4347f24e856d226f7e07ac21c09880e49dbd6346d1760b8bff
SSDEEP 768:fQelRMAMlg6keZjHGyL9BFjYBuukYbpX4Qb0NJ4rLU7KoYVZ:fQeTWlg6kON8cubbpIb+ggf
TLSH
T18913F16222FD3543C412E42B5BF6B23BD3C516CB231285A3A77B9BCB25B5400A8DF953
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000185

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000185
Size 38KB
SHA256 13da02ce62b1a388a7c8d6f3bd286fe774ee2b91ac63d281523e80b2a8a063bc
MD5 ff5eccde83f118cea0224ebbb9dc3179
SHA1 0ad305614c46bdb6b7bb3445c2430e12aecee879
SHA512 03dc88f429dd72d9433605c7c0f5659ad8d72f222da0bb6bf03b46f4a509b17ec2181af5db180c2f6d11c02f39a871c651be82e28fb5859037e1bbf6a7a20f6b
SSDEEP 768:w35mZVsqT7RAo+6tbgLdolT9YSswcTWa+O/dm8ae41u37qt+:1xTO3kb0dolT998WhO/Hae4jt+
TLSH
T11B030292A14018CA6EAE219576CCC7A7F4745D89DA081DD619CD01F0FCB326BBB51A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000186

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000186
Size 44KB
SHA256 5d225b25d66b30563a00f395476ed701130d3f749620a63531cea09fc537164e
MD5 d295c40af6fca08f8e0eb5425351f431
SHA1 1d246a1e54b3a1f2428883d8c911af73eddffca6
SHA512 9c9f23cb775244eb10f83f964b36224ad2cd5152cfa5ab82928f68ed1cb49be4156f887cc40a857b72efd0833014e4366bf136689a717dd58828a1b195ed486e
SSDEEP 768:7T3lyZzszaXGZG8vNh620Ph+EdGcNo3ITx62hw4oZkha6UK5+Ubp7tSSC5Zn/pf8:7TVyZwzQZ8vNd0Ph9/Nuo6GPUK5+UbJz
TLSH
T10123F1F73985EEF5934B05387F0EBB43068351F69A219C22670498B9C5CFCF629512E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000187

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000187
Size 133KB
SHA256 426ae06cd942849ab48b84c287c760f3701b603ebcc5c9aaa4a89923ef5f058e
MD5 f9bf0f65660d23c6f359d22720fc55ae
SHA1 9fa19ab7ea56165e2138c443816c278d5752dd08
SHA512 436019a96e47848533684a34e3c360f516c29b2aa2473d0a05d50c0fd3ad19eac39df2de12b6ec1c6760493efb5abf58e6a54d32080226fa1765983435634d88
SSDEEP 3072:kX89D4n2tV29WN9z2uXw/hqzr7IbI1O1KfB9Bk8WnRSqv2WDc+FC5:kn2tS/IzXIbIo1KZWUqv2W8
TLSH
T1D7D312BDFB327D7CC23244C064CF7242619CB39A9B53CD30DADDBBA8E549E25294A152
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000188

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000188
Size 136KB
SHA256 234feb9a8a2c759d00a4959506a3b9cb94c772186a2d117aed973347c7ef1891
MD5 db985aaa3c64f10506d96d876e350d47
SHA1 aad4a93575e59643fed7617e2feb893dd763d801
SHA512 300d0d35ebb9e27d66489ffb3e5502a4dcd3af032fb0f672d4f004e3846fb795772b6938c99dafed6fad0c25da8412d6f6a7b0221eb2540e84527703db5b7073
SSDEEP 3072:Q69dyqPSD49z56qcFxDiYZHYj3pU5qJvdzqC3dZIwv82phTFsZ:yUSD49d6TDiYZ8pU4Jvlnd42vmZ
TLSH
T123D312F1F12052909F25CC4EA67E9B4288738B1A2513687FF5B29E01357F9872ED13AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000189

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000189
Size 175KB
SHA256 a981989aee5d4479ffadf550d9ecff24a4ac829483e3e55c07da3491f84b12ba
MD5 7cf1be7696bf689b97230262eade8ad8
SHA1 8eb128f9e3cf364c2fd380eefaa6397f245a1c82
SHA512 7d7c7dc08001079d93ef447122dee49abd2b7a84d1619a055ff3e7ec0009261ab6add018560bfd82ed22b29c1915bfd059f02cd83fed2e15e9af05a5d0654e06
SSDEEP 3072:IkairG/VFWmVX/55KB+fV6ZNTJuvdeDsYaZQ9aFftKn/zfRoJC1NTuGo5m5Ss9fY:5aD/VEIXs+fVSNTJ8deoYabFftK/VosY
TLSH
T11C0423D52CC5EC31E28420F35C6BFE33F5F99B76A811C1C6B8AA83A2615C4670797789
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000192

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000192
Size 29KB
SHA256 9a50b408cb22db0012b2a78d253295966bfec3f78ca5e3f0956383c6505f396f
MD5 fec79143a7065085b33059e9b94a44c1
SHA1 7d6629a16747c949c821c347453ccf99c09eccb9
SHA512 870a0586b91609a980a514c0db436c1f6f5dde6cf74f44533b33eed8837601fe267b0dedeb729f798205950e7751c66730b91a41e516dfa604d7a85410a51e1f
SSDEEP 768:NNYTVxTJDF9Voirh3A2p+QSEOB22oKV8pcVPZxsl2LpH4jW5+7QZ:fY1xPHFST/h84ZzpYC5+7y
TLSH
T179D2E1960016967025FD7FB26F82257C65BB273B0200BC33CA1BEF9D518109E3B659BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a3
Size 102KB
SHA256 c16741a792c972eb112b2acaa0ef1e1fc5133c4811f192facd10c27b2654bbba
MD5 fae17501fc6c45b756f14d8d848181f1
SHA1 4606050a0da1f5cb545837b519baf16320f00347
SHA512 d47d8be25f83537636feed6c82d18f43aa443f98da7bf2aa3db29687065e58052d34548d77df04888430822885dde0d4e95bc9e91e28becbc3e6079d3a9bcd4a
SSDEEP 3072:FlDadmQT5bbu8mHKHOD70YrfuoJSzGmNS:Fl2XJu8mH8v5dzhS
TLSH
T1B9A302D62D125270AF39601F4DEAD0023EB2F07F7B6B05AEE089BCCB15A8F01D66E551
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a4
Size 150KB
SHA256 9478da7d477989d4d0e56066a4d01d2c3c432d840253c16f631a38d038672aab
MD5 d44fe6a58e612a450054cd149333566c
SHA1 efc71f0933818601fb6fbb1368d19c9442841311
SHA512 fd07c20df623618e033a33be2b0c544114408462b35483e04bc49ae057ec9188293cb7c33cbbc1c5581e31eb821d31d2350ed4c6228efd6b9913bedc7a3a30c6
SSDEEP 3072:F+Ecwx566HHU/ry61RcLDqKzMjp+mLFsy1wt9KuUOLJVndblGi+:F5rHIrhv+DqPSy1wt81OLvRUZ
TLSH
T11AE312024CDB5D141F3D4E68D248B295EF338E866F44F842E46CE532AA4F7B5C96DB0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a5
Size 292KB
SHA256 0045fd509e2658fc9fe2fe5cd51a14deffd126cfeb22a2d1f497056b7cccdbc1
MD5 b39843ebc2ca1124659b53a750bc1650
SHA1 905b4b8fafe61a37e1c35512a772426c36e1bc42
SHA512 a4f967489e60ffa288e66a9b00fa4d5a368ad6ceb277f9beb6282844afb2f793ccb0232ac61a7f244a178f5e80ca29a9035ed99568fcce201929f7c6e23cfd17
SSDEEP 6144:lkxl8P1J9BROlTTqleu/kUtXmlSeJD6VNFxOkdn+WeZpAtpNyvAs+vb7M:48P1ETi0UgTJD6VN7Okd+WSAtpRsyb7M
TLSH
T1E7542352F39CAB3619A6C9DEE474DF268BF1C40D4C18F4091CA794DDD240AA275FB12B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a6
Size 19KB
SHA256 2314c792b2b70eb152c8ac9e4a7cab374d759c1ce14133300ab3a01cf001dfed
MD5 7e3aeb00d91e131c86b78e70924fd900
SHA1 d5ece02dacce6c6f983c70e4897e22e6858c5caf
SHA512 f773c39604111203a9d279c11a76e5257f2f19be9e147042c2ed5e3d9421f6bb54802e82622c2d697c9f8ae586edf123faf99437ffc601448af866f71a97d1e4
SSDEEP 384:Fr+LBz6jkDsW6rwtA4Qfwxi8KHblqkk0xOURvWHnos/nv1AwRq7t:Fr+3DsWw8K7ECxjYnPvXO
TLSH
T1CC92D0C287A345EC443A3C58D944674EC98284FBF919078E6D92F1962FE5696A3CCC3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a7
Size 21KB
SHA256 99959a8c1a4b3e0dca706bdb65e82f4078e3fc4b9d18fb4885c9472498f91169
MD5 9c769ecd16510d4c5c1603dd3a2d3e5f
SHA1 6d8a5782c4e1a0e3d03cfe78ada617a15bb87caa
SHA512 a9783cad85c9cadcb1fd1d2ba5a6ec0af34a083413a46f697fe73a35be0af0378e19b6a9aacb81a42937f0d6a284ceb68acbacffd0814b14839be5bb47a7948d
SSDEEP 384:0Rk1Jy/9HiubphQUH1Mr+Bi3ff0u+SOpjKTFNr1/6crLrWHQdZrHCkcw98:Z1Q/NispeUXi3fAS3JfuHQPCvw98
TLSH
T125A2E1515E95BF98BE52023327BF5CB382AE121190B2D4695D23BDEE7838C3D5D924D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a8
Size 505KB
SHA256 77c382e0cebfc4158d1ced20cccfcb7ca037a5a906970205b21e404c6ee743c1
MD5 ca565bde09611185935ba4064f1980e0
SHA1 e119679cca57ea95d66c3755415b38c65dd98adf
SHA512 4274e1073a618896a4f67ab950df787838670aeb78dfca805327cbfda31a98e6859c8baf622a275daedbd53eb74200317523124e3caf1216678d2d383895bf66
SSDEEP 12288:eO4PRtYZH+x+NCBC1nwghJqc+ZO8E8XW4NBmQ15qz:3uRtYItBQth0HZOqXRBU
TLSH
T104B423D9D41D284B00C501DB394EA33DBA1E889950359AE5AE7D84AC8CE72BD4393AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001a9
Size 47KB
SHA256 9f43e210c197e6ef4ab24303b07b10981fa1f4353928fadaa5c032eeed0d131f
MD5 a160cd4b5e065a45cfe6e6f195a04f74
SHA1 ec0f8da3dd2c8a7f98ff5cd4376506cc19378568
SHA512 b2e0fa75de1be56f14931e5fc9e66c6efbc759cf7ad512b9092d7cfdf195728254a1eacf7a7ad025ad428bf68704b322d632b3b4c1eacd2f6c00ea045a6ed7b5
SSDEEP 768:HCPCwInZKARPyOXbzaIe9tnH4eCFrg+h+qyuYHEwFlNb4m4jnjANchLm8kQdtQvd:HO8nZ3/LOPHl+hbyKwFzijnYchLGQd6d
TLSH
T1542302B587E1988155F85111F48D3D8943EFA309FE1249438582376E40FEEB68CD9E9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001be
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001bf
Size 23KB
SHA256 767fe98474495f2631abeecb2f29c9a6eb0b3e3f121d814f7d7853912160dd5b
MD5 8f55c7f96c620c51edf975da8a73cc1e
SHA1 eb4226daab3d3c10851524a8a828a3f129049c54
SHA512 d327b178636f336e304bb2be3a9341f035372fbbbc266ba13a260c8b9ea364565619b8e149ca5f622ee5afca88792f54b691ae323e13f868ebc3264c2c5aa539
SSDEEP 384:IlqWCGcnwRNe4ixB70a9vkb283EzG0Srn5WU7CAIhPbk4eux6OhC2b87NZNWhusk:IlZDAxp0aqKaqgnAU7CAMbUNZkhun5
TLSH
T1EEB2F132AAD66E5C20664E35A04D357685A84F3D2CC45FFF05BCDB08E4BE43B4051EA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68d6ee007a1fc1f0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\68d6ee007a1fc1f0_0
Size 10KB
SHA256 316b937a624be1c0104d7f44e621196df75243b6d7d45a7aab55a7da007c29f8
MD5 23e7ec7542213bdd9d6631a388acdc06
SHA1 6504831106068d70fc23887e3e6a50edb89acfb2
SHA512 c32b3f5856c404b0121416f2b9775da4a896ad963e7522096b1d9c21336dbb3490d831698091d7215a5bf26e8a0e82d844fe97234c4158576cd7a7a3a4d9939e
SSDEEP 192:nkxPw34Qke1LftJVEmvB9IdZRiGGtsBVLQS8X0VPqUA:ku3KYLflvB9YZRihoVLQSovU
TLSH
T149222E45AFD1EB19CB6723F4025189A7BB32494C2ED3D30325F0A7381C5A0E56E5EC2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 21KB
SHA256 ca43d74494ed6fcb07caf4cb88adbaad8d69ef95c66e1e46b6bdbdaaaf303dd9
MD5 7b77ee33f4ee8b5f3f479a1676256bab
SHA1 c183f495ee1c4627b247530ea8067fd8f86c16a6
SHA512 a2add7823c335160dea64da39a5fe01a57042755939d5570399dea562a160d5203ca40ddaf8493e6d899236b3f63498b57136f0e2ae421f749f1b07fe5bea1f3
SSDEEP 384:Gty/M8Cwm2L+sdbGCiACZ0UyDDIEV/DwbF3YKsYpawZco5ua7SfPXUWlTp6utKYa:GtUM8Cwm2L+sdbGCiACZ0UyDsEV/Dwbb
TLSH
T15FA2949C57A918E0FB8DABB738D08542B7B0839484C3CEFB75719F3466EE3E09452496
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 23KB
SHA256 d30e9e4a6d1eb6a2aecc40ed054166fbf0571bbeb3b8ad20fe385776cb0491e8
MD5 b23d35b431790db76a16ba01f612ddb2
SHA1 b33ad465432ec9c2e81c398d08d4863fe083f3df
SHA512 d236db20c7787d2bff2db7992f85f888e71bc51666287ec4b89b70150ee15b69a48c5161dea57d36a271bdc7605df526ac5052ccb252ba4461ba0189f36e0416
SSDEEP 384:vhvejb/0U9IEHcU3DrdWf6uv4FQhXGXjqNOF23Kd8wKz6iFpgXZutLbdv0m3aIwj:vhvejb/0UuEHcU3Drds6uv4FQhXGXjqe
TLSH
T156B2E75C4698D470EB9CEBB378E04E02B37043D984C79F9B51B49E706A9E3E4D46389E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 184e8d835b9b231afc3ce6c6c85b4312e080e7d1ba519434fd5f70f895e4186a
MD5 4c040a1fa4ab245c9e72369c08ac69fc
SHA1 e5736d1cf46131b63a8358480c3910e52dda6b1f
SHA512 990e3a5f8f6a6a03073cda1f0a01148231cc456de9844b13f854ce44732779f8336911f57c9bca202ae46722289534bd2294b247d38b5204e3954b8fed5652b3
SSDEEP 96:7AE/b9u/GIY/swGxpP/O+lH/A/at/qNInM/s7+qXK//t2c//3/1/14s/UUlBb/+2:N/b9u/GIY/sFxt/O+lH/A/at/qCnM/Q8
TLSH
T15D81C610A36F8DFDDFD5E1BD20E11247B770CEC1DAA76E9D4481A8380A4D749E80B85D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 23KB
SHA256 102af5ed653db69e1271229fe37321cb1a7ed0ba74503dad67a0bbb0fc73bdb7
MD5 30f12638d5663eb355a2122d590f3738
SHA1 58206ae5661f9f5305653be04d1ba83c8c0bc891
SHA512 53a312cbb380feddae88ae2bfb7def10594330f8d12ca6c0b183754661438c12788352f81196f995d9202fc9a9178f4cbac292a05334cafbf5ea8d44985fd1f2
SSDEEP 384:Ry/MveOb/0U9IEHcU3DrdWf6uv4FQhXGXjqNOF23/ed8wKz6iFpgXZutLbdv0m3f:RUMveOb/0UuEHcU3Drds6uv4FQhXGXjw
TLSH
T13BB2E75C4698D460EB9CEBB378E04E02B37043D984C79F9B51B49E706A9E3E4D46389E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe592f63.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592f63.TMP
Size 3KB
SHA256 50374ce8bd203f7b37021de971374730b22666ef07430cb397a384b5ae71e4d8
MD5 d86463dd36f0b870fb530ffdd3101f34
SHA1 db1abf14beb5c2461b188ff78c7ad3734e0e74f9
SHA512 01d8bda3e0b12545f0398dd3ea5a99ef4eca60e4c75cb8193275d166ee88907a48b6032ea530f5ee8df57a4493371a629d663f27062264b1365006de5bd977c7
TLSH
T12071C844A36F8DFDDBE5D1BD20E1138B37B0CEC5D66B2E9C4880A5381949749F04B45D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 0cf5304877ca685e20fca4709016c1a31808638d4739b850bb766749103b6ddb
MD5 04fe8d25014873ab4166f36ea10f3509
SHA1 6fd4dc50f0ec31afaacf3eaf9d03b59361f40982
SHA512 c0afa55052286c6ba0c282366725828def2aa8873175116638f24e4adc02ffc62ab879c1c6f108173e2718e3c419a38ae035a6151c2ad08340753575b2b18e2d
TLSH
T1EDB011000A0A8222CA0383F280C0008A3B322F200AAB200222E28C30C8EC3BAA202080
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 144B
SHA256 c4e9e4435c663d1735b686fc6d6d754d09eeab2cabb88fc143a42ee8924fbda9
MD5 5aa20e7a3b9ac6296d9cdac3d82f8365
SHA1 25b27ecd9e5cc063c7aa4e2413c5ddf9a971f4d9
SHA512 af15e5eaabab5cc5ad2058c71c7a2fd638ea13d43162505664716d4bc2c3f8a3659f3de6270d16a17d8d2a3f3c9d8cb849ae13399cc8bc8e771a9bb0365a80d7
TLSH
T133C09252BD058016DB8887B281C6088E37721FD005D3055252979D60FADD7A6050A184
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 120B
SHA256 3c895b4f22ebc7ee13ba6cfdb66a456dba9c30ea24012454d76c14ce6f786892
MD5 6a07b359a7a969622e0f5ea1a06d1458
SHA1 0b2fb3361932ca4e0872e08c79a8acf3850d3b09
SHA512 df6f99292f5add10142f037b08c97e04eeec743dd1cff70a23b3f5034cd73582cf76c65711452939fc3969437e5247e30ec73ce47a3e80c9f19a0d116a050d86
TLSH
T1C5B012051E0A9211DE1047F183C000DC37305F0003C3168311C71C31CAED3A25425101
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 46KB
SHA256 c1a8f049d38a62f666aed0c9f7fc72bf271452399fbf0a83f6c4df54a9c851a5
MD5 aaae473201502dca82339dd236613c3a
SHA1 ab4bba6ac0bb7b93b4a6ccf9db0ea9a59838461a
SHA512 951e20f0d905212ddb0e186019a5606415a1de2e1be8fd8275b75ea33779c4314d5bf05d80064e91d065afd291959f58869401fb7451d580877e0df011166336
SSDEEP 384:DUWBzZpGGgB0y6wYeoJ28n+Ne/e/3oSrhi8OyBeeiejeZDJ2Benwu85eYkecaeav:FcKMJcg2VtzL0wH9Nu+8VabkAsgN+r
TLSH
T1742369F783F44E6DD91152F0AA252F2F8F19095657787C0A89E4BF0AD3B14B1E242A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 d7b65c979ebccb2bdf18bdc8309cae8982377d4cb5aaf030dfc939d0e35922db
MD5 4f97b2ef6906e67d667c818db249da4f
SHA1 c29ab035682c863ef4168331cc46f3fcf81305e8
SHA512 890fae25fd432515cea86368ca6387fd6557f143fccef63282b8daeb6ba706227d54502640bddb610b2dccd479a429aca297e92e13ee0cd293b3a500b7512e95
SSDEEP 96:DhOuvuOuiumW/Wsz3uY/ueyudtueeuuuz8u1GuLue3j6PsuM:DUWBzhW/Wsr5/ryUtrefZ8GOr3j60x
TLSH
T177A17BB3C7E8862DD91152F4AB183E1FCE29096453183C2EC9E5AF5B97E25B1F18064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 76KB
SHA256 650a8132ef2c79c8eb0f9cd11a56c16d5785ebcae8cb0d695ccde9ed640e553f
MD5 70a3a9a30088af7157e0bb39cfa637f8
SHA1 99af36085cdcec3d33cbf3b90d5207dcea87dbad
SHA512 1391bddd3a5b3a4ea31634d835fe9e67ec7ef42ae4ba8e4d1ddfb35044c16103d98a49dd06c0cb2cd7b76d1d2a18ab07091b6d8e605801303631593834454a58
SSDEEP 768:AcKMJGMYZV92SzL0wH9Nu+8VabkAsgM+P3p5UimhDrx0ZskqrtF:kYN/iSFF
TLSH
T13F73ABF783F44E6DD92152F4AA252E2FCF1909555778380ACAE47F0A93F14B1E242A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 80KB
SHA256 4c2638efe1a507b1a2e320ed2e456c84fbea860ee19b0a994b088dcd0a0c38b3
MD5 532343608bfc2318b974b31f85c5592d
SHA1 7c8e29256cf8f11f201c199feb80d88f1a650615
SHA512 0e8332e5d8b9aa84b45adc7aa52cfe620ff818d82a10268e898e0a3d19f814577c99094325a5f138d49cb4e0592faf8aa12ee3395ce7c9e98ce2e9b5830f1103
SSDEEP 768:1cKMJGMYZAd2SzL0wH9Nu+8VabkAsgM+P3p5ZhGCGtCFQJZLk93:GYN/iyK
TLSH
T192839AF783F44E6DD92156F4AA252E1FCF1909555738380ACAE47F0A93F18B1E242A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 e6207a2cbcd05b9e32e2d8958417ea814bbcc2fd6de813b2847a5eb27715a0f8
MD5 b1a7ad347337c18bf3098861c68bd178
SHA1 c12f2b1dbda1a88b1afe8fbec696daab018bcbb0
SHA512 65b4c7e21eab3d70b79da41d5da6faf97b9a502aa3e2da79c9b571a6f9eed075eb48ea6dd89055e9d0162515bf3d9b4786065a05d5dd0a2ad38d44a521501cf5
TLSH
T135D0231322447077F56D3F955067FC4FC73600140D52DDD411D0947C253186F051F140
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 b46c777f42416918da7afceac6f797dc991b37cf6e5d7130b69f907cf43c68de
MD5 47fa82a5aa3687bd434d3f38b8f72784
SHA1 d6b6571ec160c9c4c8b77454dc05a00a27240cec
SHA512 6b87e057c952a12173b06da3071b33ac36add073f4f3c9f9162f629042f88fb0d230a671478b1bdf2a89d9f12cf8ae786156e06f17f395a47efcdeff321dfc14
TLSH
T193D02263324470B7F5AD7FAA806BFCCFCB37002409429DD911D0A8A9293687F092F140
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 dca5402abac03767c0e0e83e532d314237c78f3dfb37b90c07d26767b61fba98
MD5 d424e308f7c1efd29ad25d85ea7980f8
SHA1 91575b5cf0adddb91964043810bebcb5b97e9ba8
SHA512 6d6a6facda9050f2f137e3ef31ebefd605baf13b921826f54c5e3243638ff4eadff1d1f689a27ca168eb4231f8c3785c9b42b6838cbb88591707010da56e07c8
SSDEEP 192:sxRgRPyM/jK1Ml8wFY/fWsFZFNkUaZzoA8pls/g6+WNpti/YZ6tGqgIgIJ:sxRgRbY/fWsFZF7bm/5m/as
TLSH
T1F862E916AA289977CCDBD208FA517F53D6F81573B2941E44AAFCCA0C00E6ADD621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 29cf488972bf2309caacca85f81f3d7382125f75d3ca725bf605469a9c411cb7
MD5 abef3c89d599a9c18ac96eb31dfbbd0c
SHA1 2740c5a150a6377ccb9a13ec8ca596039eb5aaf6
SHA512 27168c484c53d845ebb2cc6490d21b79304436999343415e4d1e66677c2ba847266ccc2cf5089adaa829ab9b1989ba254cd0aa7013020f2737d7807c1eb6dfcd
SSDEEP 192:sxRbRPyM/jK1Ml8UQ9FY/fWs4ZLNkUaZzoA8pTs/g6+WNpti/YZ5tGqgIgDsJ:sxRbRqbY/fWs4ZL7bI/5m/hs
TLSH
T1E362E916A6289977DCDBD219FA417F53D6F81473B2950E44AAFCCB0C00E6ADD621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0dc502aefffbe9f492bf54cc89e466be25e3fa4ed30c1d748f9f72911c1a2409
MD5 61dc3b75b92b19b03015e1a12cf2babc
SHA1 9dafdc555b4369479185c2dcfcb523cd1c054fbf
SHA512 504b7bee9dae8092d630799055d5ba99b8609fdb394b07a2bb140b3b52c0075d157506f3a49120e8ef394c6f6273e3b42dd7413fa3939a2f16c47dea8078c635
SSDEEP 192:sxRbRPyM/jK1Ml8wFY/fWs4ZFNkUaZzoA8pls/g6+WNpti/YZ6tGqgIgDWJ:sxRbRbY/fWs4ZF7bm/5m/au
TLSH
T16162E816AA389977CCDBD219FA517F53D6F81473B2941E44AAFCCA0C00E6ADD621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 e11c158fb58e5e48516ea14adf5bf9cd869cfe4695c7fecb12ece4aa75837acc
MD5 39f1dd2eecb0765adc70382eb63b4c96
SHA1 420b55dc913eda62fc6dbe63aa8f6357e7a27047
SHA512 5c5cd99c6aed21215ff4ed74cd683919829a4b2efeceb693df74cffdf7eadcd61d43b0e2fde5d572b47e6023d1ceefce851c4b7a24cd36d787244e8bcb09c168
SSDEEP 384:sxRdRqHm1Y/fWs4ZL7tToQZ/51dEX/BLdB:sZ4Hm1Y/fqZLxTp/5axj
TLSH
T12392C75655248977CCDBD618BD31BF52D6F80473EA554E4CAAFCCA0C00EAAEE261381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 c7836867f95546897779de5723ee1d906b892474a0aea966eccdbb96e4b7fde4
MD5 923a4f4cc82755a266023ed88e79dce2
SHA1 fd3aaef8b9e5878563c43ab4ec30bc571c385a72
SHA512 11d2d829b3366faf7fca89a2c8650570a6d1eae4c2270b03e16b4d02a85a715b3bfa74ccc6c8d4c8a3603784e1c44deb6b1576f4da625dc5203f7e84f2388e86
SSDEEP 384:sxRdzqHm4Y/fWs4ZS66s8qMpRiYnazAW8pZS15posJWeT+/7GToQW/5ZbzVsdezG:sZOHm4Y/fqZS4Mnc7WeT+/aTG/5kjj
TLSH
T1BEF2F9469424C877DAC35D18B83D7E739AAC1063A685CEDD5AECCE0C00AE5FD6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 1b48dc0f0bcaf4b84a767398107cead87cf9b8205dcf32c37b1881c8351cbb72
MD5 23200bbca11bf2b1da46bf9866824bbf
SHA1 3f705803b2f1ed4486d59154574d640b88c21d31
SHA512 69bc1ad6d796b5671edff3c15ffc959549c961be142bcaab7e09f8ba08850c7140089da7a8e51e981d8182fba6f575e9f1c33f6c8020462966986202a39c6971
SSDEEP 384:sxR1RqHm1Y/fWs4ZL7OrDd/51dM/fBLdB:sB4Hm1Y/fqZLCF/5ORj
TLSH
T19A92D91655248977CCDBD618FD727F52D6F80473EA954D4CAAFCCA0C00EAAED221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 35KB
SHA256 62dce98bd299371acf520073e4321c02667c8a649303708f6cfc8e4c695fa180
MD5 63ca7afae72cb4086411f0e5012b6117
SHA1 89d6e6482e814a1dc8a92b6dfcd5e851279f24cf
SHA512 ebe40a6c6cd1c49c6411b00efe8162b849bdcc8c4e8953f36cc619b93370b8d6c23f0a78fdce2eecb94a32a616d67207ec74fb4ab85259c286348d6792448f6d
SSDEEP 384:sxRdQqHm1Y/fWs4ZS66s8qMpRiYnazAW8pZS15posJWeT+/7fToQW/5jbzVsdvzG:sZXHm1Y/fqZS4Mnc7WeT+/rTG/5Wwj
TLSH
T1AEF209469424C877DAC35D18B83DBE739AAC1063A685CEDD5AECCE0C00AD5FD6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 1b28385bc104295e262e570bf4ab28dcd153974fc854c9564384077bea2fcb72
MD5 be7e4b0bbb7e659943a886ee1965f3ef
SHA1 2e615f2befabbc3efc4850c61143b5a5575e8cd2
SHA512 4e8461264410d74ba191f5d550d4d8b986deb92107f48e7aadb3c4c0096ef83d7e15beb0c92bc5b040f1eef6a5da379b8950cf5dfffb40a66ef398ddca8ec7ee
SSDEEP 384:sxRwBzqHm4Y/fWs4ZS66s8qMpRiYnazAW8pZS15posJWeT+c7GToQK/5ZmhVsda6:s0OHm4Y/fqZS4Mnc7WeT+caTa/5xPj
TLSH
T128F2F9069424C877DAC39D18B87D7E739AAC10636A85CEDD5AECCE0C00AD5FD6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 36KB
SHA256 9cdf11494fe3c5c07c07f8e001379efe9a771fe3d786e2c5b1979041c762b52c
MD5 dcda77878b254a855903316fd6600563
SHA1 12a45419282bb26ed1c8490676a8b3f1353073b7
SHA512 db30b090aa8067d40d0e173abfec916368e31d8a9cdcb48bd574581b84e3c60ed5eaa43d25e5432449ffe34d7bf074f2e395a9ffd1faf8c0da2fb0b6a192e94d
SSDEEP 384:sxRhBzqHm4Y/fWs4ZS66s8qMpRiYnazAW8pZS15posJWeT+R7VToQK/5twzV8sdK:s3OHm4Y/fqZS4Mnc7WeT+RJTa/56oj
TLSH
T128F2F8469420C977DAC39D18B83DBE739AAC10626A85CEDD5AECCE0C00DD5FD6B07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 922cbc74bc59cf45b1fe2526bdcf7ada5952435020654e810e34eede7521f73c
MD5 af88051e67ff849982826d8f1e8f011b
SHA1 108c195edca5d41f9dae0ad16dfc865068305b0e
SHA512 620034db2b61d4906d9f409e90baa0e5cbc9c2ad686f9a08f90cae645d9c558a0ac77ce1822e697c259198ceacda56e397ee5db24f79e77566077b545aeec454
SSDEEP 768:eOEt7IWgKgf/68F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQRro7ov8nfW:eOEt7IWgKgf/6u1jaZ/Qq88fW
TLSH
T100C2FB2B240CC77E4F840E5DED2A7E976DD801CB9B988D5447EA890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\08f9e0f4-9c5e-4026-86ee-630e3c386066\index-dir\the-real-index
Size 72B
SHA256 10ebfc92a618fe9b827d829793a9146a17bfa9607986086fa9441604764fac7f
MD5 64291638aa116e54124717eabfa5d522
SHA1 13ac05def5e5ceb7afcfaf54d310a4e2d15ee418
SHA512 7d2ceff130df3dd9373524af0ba655c14efb839c49db91eb11ea834558dccf39c27e5e6d63492fb044618fdffb6aef859a89e2bd4162c6129141f1444c83e2cf
TLSH
T112A00270035A4141C2118FB0A547616123A87D250107870580A418568FA556947195E8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7fb72d4a-beb7-4b01-b0c2-ca1a35a4d306\index-dir\the-real-index
Size 72B
SHA256 08e608319dba48ea2ca68f88a988346e756ef30b1f42b85218f154de2d193d49
MD5 c5b703a7367394bca256eb3527a38606
SHA1 18592552f65707268c9ed0aec08151f2b1206105
SHA512 845c01a1335718cf1014f544754d7797e5586d4255a2fa29c014ac7f4bd18c153b99ac4e9a3790de18a6d035617f94b6d69956dd81e2acdb9387550bb4e2907e
TLSH
T125A0021523E81037CD091370384719406220DB300D81C705A3A4B1B4C95C1416605412
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cdc0f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7fb72d4a-beb7-4b01-b0c2-ca1a35a4d306\index-dir\the-real-index~RFe5cdc0f.TMP
Size 48B
SHA256 3367277eb5874e0d916a146a76dac67cc0a7787e85de62c9ac508523e3a824d9
MD5 f7995dd6f8a8d05b829c2fe2aa83fa83
SHA1 1ac2a8b5aceeaa141c02675ccb9099c75ec1a084
SHA512 cdc0563e1db251d1980e67315bf5d0ffae5aa31969edc7137636724c86351259c2ac93bf9748d7037c51e78cb74c5742351566043a2a4fd0dee7e7e3e1ed11ad
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\837e7d7c-13fb-4433-b877-6f203b6253e0\index-dir\the-real-index
Size 72B
SHA256 c4bfc2d060d826feed9567011faf032a90e4b7bc86100e8bd69cce9b1d26081c
MD5 ece4dcdcdc36d5b5cfeaf08d7fbd042e
SHA1 edeb0fdc571e6b00b3119b5c147d65d7aa683653
SHA512 273bc3bfe085121bd0b69359347600bd2dc33ace92e43a0dcb32703968590c8321d0e95107a5e2e0d62f802acc5cff2dc2394ecdd7a361f436ce1bb674bdf22d
TLSH
T18EA0021103DC0207C06315B155EB02A11204C811B101120E44D13244CCA0460658304D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\837e7d7c-13fb-4433-b877-6f203b6253e0\index-dir\the-real-index
Size 72B
SHA256 4ea3360c270e7c1fe9e96ca55778b4f25c90e08569668a23628b9747c9c7afc7
MD5 5279cc14700766d2ad38e7167b42696d
SHA1 51ba4b69612ce1815e8f91fd9b2380bde82b3f80
SHA512 310b89f85b5baac2e16f280e772c60e516dedc3e9c1830891648dfd4493d4d890531d363c290b18d7685d0fe930b78a772c2fa33087b240485103b1a3092911b
TLSH
T149A0021642951019D10222F5269611656212DF2C0301930956E0D094CF74685CD6141C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f9fd82d-b210-4109-b489-f797ed71bcad\index-dir\the-real-index
Size 576B
SHA256 7b0dd0da93818d7db31487025f40a57a0258f7ff9e8f458bb0ceb4e37dc968b3
MD5 f069c74f8edbb692d0e946f417e41708
SHA1 277bcad9f620f96dbab7c8c05da6ba7a286037b7
SHA512 953774909b00235e296ca6f0f16d49e5967524d36aa3fc64b93e949d0d2fe72431ee8402d3aa4a364c306803a2667669e3e52f8ab7b1a4f3dd2cdf702611d250
TLSH
T1EFF0ABBABCF03542DF11297E1935398E323385FC224CED62916CB13C8D62B18564428A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f9fd82d-b210-4109-b489-f797ed71bcad\index-dir\the-real-index
Size 3KB
SHA256 6bd61d53fa312fc059668a4cba092c3bc2e4363cfdb917f4486b0da9d5a30f74
MD5 0e90b75addc48bb03841441a4f77ab0c
SHA1 c5d4c6589b90b6ee07cad3dec94d88956e849e92
SHA512 1272f7c06cfed959a082d1ec79e55b7f9cdf84a7213bc43d01649103628f094cd69190bdcf36229b060df2c82a153bda8a4b72fd7ee170961852bc2f3f774f61
TLSH
T15F51C7AE9C973B57CDBC107264B104883B35B5DC6B488E23B9FC8138AC8B72418B975C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c4463.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f9fd82d-b210-4109-b489-f797ed71bcad\index-dir\the-real-index~RFe5c4463.TMP
Size 576B
SHA256 b25aab7c4544ce6bab1b8cd3eb456eea442eee2923f03a02b5392c05a07a4004
MD5 e5bd54244a9f7de0a0b1d2f6b3bf822a
SHA1 5a12f2e940050d901d05901a2ebb64be543569c9
SHA512 d87a1865bfe3883072f299f669e4a1cc3468312d8acc46ffa2b3b9316a8b1b444e5e824bc58bae8db4603c7f3bd98c03a6a696a9294678d955f690df0d4232d5
TLSH
T101F0F1F625E03DC2CD0211F91912561D3273C854251C9D56E090B07C8C12B1136C91C7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 77976cad33aa0680244447a7e5045ec63e7e2fd96aac65e56c3d8d84c22419b2
MD5 5c3577f0eb8f8b07dac03e945d949947
SHA1 5acfe76010ba76f8a8cca572d1c318a110483fbd
SHA512 cf979c4eacab73a1cacf7cde266538ca30fcab4bae5474b9c1d3862202fb8024dcde5b6b445f50ccc127a6192f01c5c4468fa1a87e45dd0cc92f5f995e16887a
TLSH
T1E8F027B3AFE71C08BCBB93DA5471D0600016BC54C715EC8E252AB5A2E4B1315255DCE2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 57cd6bfe539e7979914ee7cbd1cbf64e7950cd4618202f5fb1911284acebb44d
MD5 d7548b3ee7dbfb74d0c49ee7c61483cc
SHA1 4e9f26d5e1c811db8a119a2565e4d47359116dde
SHA512 49821621e88a02aee7d7a5b38910d026de2ca8c1b786d96f431f236fc847d4113928d0563dc5c7a33618f1cd18c2e90cfa1883fa2fd738cd201751b0ab15784c
TLSH
T12EF05CB3AFE71C08FC7BD3EA1471E0200006BC54C324EC9F252AB5A2D4B1314245ECE2
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\48e34e96-274d-4507-a932-0f14904cfba5\index-dir\temp-index
Size 72B
SHA256 a4820ff27e7143e09d4bc125db11ec4b305d11bcc6fc8a8554e714cd44311585
MD5 4bbe3758ef5cfed1878d89df1106687e
SHA1 55f9047ed71381c2686915388bbeacffca0b6bf3
SHA512 b00f32ccc709826e5c55f5c11a28efdbf2ed38e6d3d442efe58c257f3c344f7f40c6e8c01caf2273ebf053273190ad46433dfbe287ebbcb4571d8d7538bb4e7c
TLSH
T13DA00214C3808606C5161A711477459436244D114102435251A10049FC587A88912014
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\48e34e96-274d-4507-a932-0f14904cfba5\index-dir\the-real-index
Size 72B
SHA256 b93b742b84c4b740c76164b4e83f75b8c32fe0e4b52e8b50aad4365d27021e67
MD5 461b963a06e92a1003f4cac3313c485b
SHA1 b9606eeb4504305562477e27145a8a7381391732
SHA512 b0829415109c26c2c1c489b3ea6a9cced420cae90bfbec5d69ef4c89d821cdfa2692fdf52abedc114c10cb8e2473a18e1cbba7c1991d379f8096ff4299368f2c
TLSH
T114A0025891450A0AD6541A75347342507B308A315505126A51E41059FC792846502040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e635b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\48e34e96-274d-4507-a932-0f14904cfba5\index-dir\the-real-index~RFe5e635b.TMP
Size 48B
SHA256 4cd46288539b85c01942b71886580ca4e6f864f1ff890359fccdc70d2c204cc0
MD5 98d444f62ac0827509ba19a0f89b87a5
SHA1 a04d790c7bc6398e1e27df75e472b8429723902f
SHA512 a90a3224913212b440230d808c61155e06c90972c8af379f1517cca919c480fc3da1fe78f15f9e3184fd0ffce7c9205fb2ce35314f74b1f772df065080290da3
MD5 SHA1 SHA512

Submit Download

todelete_18774c68289e3e58_0_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\48e34e96-274d-4507-a932-0f14904cfba5\todelete_18774c68289e3e58_0_1
Size 690B
SHA256 a50846dd26acf1e0bda3b70cba9b4030688f79b16178e7ae806174272fbaec98
MD5 a470c637affd21f1e610ad4339fcd18d
SHA1 b101973d24dec91d515ec70ad2d0e93afd83fd00
SHA512 9d21613901ce2a5f35648bdbfe1c1a32d1e152d543a29d99f5bce3d067a5a783a88e6a77d47b78f22fa5c22bb2b33a81ab4088d58a7dc498b5be9d1f063b0b00
TLSH
T1B60176B2912301806B7D8AF2B3007BC163227172CA751A60F684C3699ACACFA3BF1508
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\a38e6996-9802-421a-840c-f22169b60de0\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\a38e6996-9802-421a-840c-f22169b60de0\index-dir\the-real-index
Size 72B
SHA256 86bf8a9a91cece34f624428d2331a516b2f9425bc663b4bce41e07fba7c4eccc
MD5 022301735ec753dd5bea274487ee5f02
SHA1 c6f516a66a9ab1f274fa2cf2494a7d1845776bc4
SHA512 3ba68cfb8f2627f1595c2d8ca839454a269746d4e9e1438f462673345b2afcca125eb8057f4d553999484092e2de04b480bbe73e54efc66943a2af3038f27a2e
TLSH
T136A00276DD54A402E2718FF42CA1414D23304EF909F30201499E064AC95E75049CA0C1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e8ccd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\a38e6996-9802-421a-840c-f22169b60de0\index-dir\the-real-index~RFe5e8ccd.TMP
Size 48B
SHA256 2c7902a9337b23ae8fbcba36176b60414d57c7d8f8cc4a6ad6f18119866dd560
MD5 ca80b8160705c220cad0921d42a299c2
SHA1 4862c63bd6f7011ec5103cbb07a0732a7452f740
SHA512 af2bf4ede8be5d16f4ba9d5964981609fcb8ff76bbe011268d360d0305df29fa71756197eb555a8e8ccac838d030d6659447fd343bf0ed9f4c47da65b978e8cf
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 a7033f5c610fc3f35f8b3d80b35a30c743b886b5bcb6f89c587acfdf09288314
MD5 a46cc20ca5b0ef08134a751c085841db
SHA1 5029c4fd61af97dcdf0652b7a1123e6ed52483e4
SHA512 ec5252b15f7161c7c852e9002a343ffb01b69c742311233a190e5fca9605b9323e351087d5a91abce506e0780082d1a4331fc1bf3059f2517681e476ab091310
TLSH
T121D0972FA4110881EBBACB8A1A12223C4FE978CC4285665EC012041A1C40A83A221F93
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 b402d902f290b238974905b05934d6fa16ef6ef9492e8232453c1f11020c28f1
MD5 40f9cc5a47f656aefdb392da98a00219
SHA1 adde94544be10a16d116d66bf1006ce2bf2aab3a
SHA512 89db5cdf51d3c9c8c4af6c9c4fb188da22dbbdcfb78f9d652d897b209e5bf85f889471d64399afd82572a8f7f826f7b48906984db68ff67ffbc65877a53a55bb
TLSH
T194D0972FB4220881DB7E86820A22217D0BE47CC80184645EC002342D2CB0A439620E43
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5e08e7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5e08e7.TMP
Size 138B
SHA256 94c535b99b2d29903b65814137a8204fe713db8ba1352fcae5c3e8872fdcc4fa
MD5 9acb07b8ff20438fca788ac0da59b2e2
SHA1 92148a2f1e0d5cb99e71a3d57788399a8e2faa06
SHA512 dbc6f79666a650bd51d6837296072dc10504bf699aa4729dc19588dff29d44ff4a9090939a03bab27b9e0d2dfba5b1314bc404164acd5d593e36ac230abf6933
TLSH
T102C02BAFB4010440CB1542920733323C4B8E3ECC4986A44E500334283070E137711FD2
MD5 SHA1 SHA512 TLSH

Submit Download

7e2a25204d0f2e2e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8f2a3a278767c49cf048137c85a690743efd8eca\40141769-fca5-408b-8156-85f4ef8aff3d\7e2a25204d0f2e2e_0
Size 15KB
SHA256 94c28e46bdd3229e06f14a02b0a341318f87abdbaa57e7287f314032cda4f0bb
MD5 3e99e8e588ad88ad64c2734381f3e6d9
SHA1 c6898ef73aa8a4fa4b684863bb1b4436ef0223c5
SHA512 60e1f8e89223bf2f8367683c326f223bc67f4e2796f091f7328c10dca2e85280c537221d5d7bfeb72722651e0ab297415ff0277377aefb5fb039e4ad4f824207
SSDEEP 384:Sg17ka8cXkqZcjskvWd48khwfByaRrHoAOPAXrrh0p:Sg17ka8/NYkvE48kKvR1rrWp
TLSH
T169721E120E942C35402D523EEFACE6166BC9D47EF2C5CBE62BE94A2836750753F2634D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e53f82cd8926381_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8f2a3a278767c49cf048137c85a690743efd8eca\40141769-fca5-408b-8156-85f4ef8aff3d\7e53f82cd8926381_0
Size 24KB
SHA256 a8fb1a14d213196eb3fa7c6b1098eede3b1eddab4d59d6891dd3bee84c1664de
MD5 cb3328d13e06a73afffaca1833ffaa60
SHA1 e0ec0ca90b8a4d7710084e8260718594198fff01
SHA512 bc80b9a0b45160a658f36f4c91e42e8a1e54eb5f8ad876e94447f220054928035a6abd20c4992388f309af683c502b68f6b1cbed76690daab0f1b96a80283c66
SSDEEP 768:fCpmF/EJ/WKK8q5QcTifp5nSCuL/hEANBqDG6u4WcXdCjCGCUUGFZ/WXJHv4/RZs:BTrdg
TLSH
T1FFB25A33164B9DB825450B572F3D7B8951AEE9683BA2FBE00189625673F03158C22FF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8f2a3a278767c49cf048137c85a690743efd8eca\40141769-fca5-408b-8156-85f4ef8aff3d\index-dir\the-real-index
Size 1KB
SHA256 1cbeec7124731f47738f26e99b6ecd314e9eeafe890c7648440de2967006525a
MD5 b05dbf12d816ef2a2b1aee9205166be7
SHA1 a6fab44efbca6f0832631fa200b9e791450cf650
SHA512 78f2f77d0e28f3eb33c9b99e46ee219b26da14dc0392b942cb871169d7a385182b93bd3184cd6d004e985571ccc731d2abcaf2511b2865d364761a738d60fc92
TLSH
T1AC31B54AD29AAA1BDC0C737DD4390834233D19ADEC9B241BB35BF904F85B901426327D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d0756.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8f2a3a278767c49cf048137c85a690743efd8eca\40141769-fca5-408b-8156-85f4ef8aff3d\index-dir\the-real-index~RFe5d0756.TMP
Size 48B
SHA256 651bc1ed28d2c0003650ee860b6e80c052fa75c7d074830a49d55a2b1e2fcb87
MD5 3e7e8bb610db4a6994c8e05e5c7c28fe
SHA1 4eb20c5a87566e016911303d33b2f75d9956c419
SHA512 a5802b63b589f8ba6d2ba63fbd41d886f83ed740000ca38d0d5dd62861dd7191a0644c5256538b7580273fe71c2feb806d819ff92f7988d573484f2ea8fd4d6f
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8f2a3a278767c49cf048137c85a690743efd8eca\index.txt
Size 201B
SHA256 b67aa77f80542c207ef9f3988ee6b14b7099bff10ecd3ea778662e675ac77a5c
MD5 7568ba5da0cd60754c3922eeb99029cd
SHA1 4778dfa2ca6373e375afad335934a497c3b73b11
SHA512 fac271d0d2e595d6080b78738901fbe787a27ed5350d082672f576372e16a841879ffee9f2fcb112b1c472cdc156cb50f7a29f3fbe322cd1f9ef8367a7c40ecf
TLSH
T18ED022EF6A392210A37400FDA4A6B00EC82F39093E70EF095A909C830992A603860E09
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5d0794.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8f2a3a278767c49cf048137c85a690743efd8eca\index.txt~RFe5d0794.TMP
Size 206B
SHA256 8e6374346b0e4b85bc2ed534e1293884e4da62e9a6a122be266a715b6ebf4ab2
MD5 75ed5da9ed5ef7fb67059b10cad1fcb4
SHA1 27b3941a93f3e36fac2aadac9e5147f047a68e51
SHA512 c032924a6b7b424a00d84effe0ea49a9dafc7c052dddf35e9b040683087dacc8a9c1b285176302661e17a4baf0af42cb613763d136d83627b9ecba4e94783dc7
TLSH
T13BD023DF12361210637400ED64A6700DC82F3D493D70EF094651BC9309B1A103420E09
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e931a23d9cc9417856527db4668e70ac660f73d285c92042c882e98a4fd8df03
MD5 452e55d52afb777255712c150698e5f7
SHA1 4f3e3a28faa8ad31c100da587e5d7be913cd3dde
SHA512 d4cc91b261b7cedc1bc7cd31b0fc6a70ee3e95fd45c13bd3e3b75aaed8a263602f0c353d8a7c7d35a9d79534e3fa71402817d6136d5217ae7b959cc702d35f68
TLSH
T18FB01213030420C4CC1D0770E6014565521E95216E1513A780B4B024CC3F1454113047
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cd180.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5cd180.TMP
Size 48B
SHA256 d127c8fb3af52e95ba56491dce0f6b8313f2f6152d7421ae8e135c8a911e5abd
MD5 b3b7ac7c5bb96eca4d4a1a965e4c09ca
SHA1 8b47cf6baadb49cfaaa817c793270b5bb1e6cab5
SHA512 1d58741ebb1a7798b35adf08026e10f044bb1c620140c4da27b66c497a54021a29ad4d614bea2e9adb3a2d79029958ce9fc0c91aa6f202a7e176bb2daef09593
MD5 SHA1 SHA512

Submit Download

af4523f6b5e5bdb9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\af4523f6b5e5bdb9_0
Size 63KB
SHA256 05f050a0db27609842944ef386c5ddde1480b589c4a3ee331aac2217464cf79d
MD5 84baf39135e0bfe52a79ecd1678bfe85
SHA1 a200a909b328b292fbabe18339e3455f9c447b55
SHA512 ceae098826dda7272d27daf2ae026d755cea5ffe23771208e54aa0dc62674a16948b22b7b184ee74f73594662881cefcb5bf7466b9087db6f14961c20367f297
SSDEEP 768:oeJDcwZ9olHJrD05l7eEFfgoAxWhrJTV9/5oZ+UyA2xGu/5374WAiEAXnR8c6BVy:oDJ0VPVR5yyJxGSV4V1C6c0VVEO
TLSH
T16B535CA633707477827BA1F1905F130B713AE167F40494E8B194EEE54A84BAA42B7F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 c3c1874e4f839e12b5a735cb744dc2c62702b85f28deffd6eaf086020871f309
MD5 abdbe58ab2aae151044a1a26a96b79c3
SHA1 e2f436dbc63da4b6df9a7484c93f0a580b6d7f73
SHA512 e0adfa241c2d7d481cc80439944baf4742a5f1d9da5359f420553fb8274833b1dbfa57cb73ce832db9ca74912f565933b37bea29aeb395453e19ce02cd9f13c3
TLSH
T115B0129433520D41E864113050C180682231AE0C2542170270D00D5F401B181E310042
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 111261421da6d3b824f0164f3828e22871fa790b9a825250c7b9cce191902dbf
MD5 c98d7b05ff4c7dd5403b672e51fc19e4
SHA1 62ac3b72c510d81866480d254d3f2bfd40e248b7
SHA512 7aa86fb558949712e225a5c40973cab66954e5ec8bd4e9a5b0b2e006943c241f89825fe45f30388488d447b5bb50b9525a69818a5c44254a0e8270d30ddb4dcc
TLSH
T1CFA0026037508997D83556741492826A2311BE191205024170F45D4ACC5B1814151001
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 df52cf9e2cd57d1af767d4598d5f188b55f4ead59b90b7a852ec8e07d7dd5b56
MD5 eddedac62131a24b4dc0ba0fd0084e82
SHA1 d2ccfba369fbd858acfdc50505b9183f18c8f868
SHA512 0c47d114697dce6629bdbb23e73459522b3caccd110fb3172a1ea63f2b464bc7321d015d9fa6e936f6690bd98a13a103db4ea2eea74c959da757d55c341a2de6
TLSH
T1CAB022803A0008E2FC200FF020C280383330FE0C2B83C30330E8083B88022000F20083
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\7254a73e-5df7-430d-9503-b37b3e811d78\index-dir\temp-index
Size 72B
SHA256 9576852eeb0e7baa7f502631c12fe668aaeb9933ca9d9bac3b28f2de00ee7d8e
MD5 7f17df73b37497ab8f9df925152a82b2
SHA1 11a5d7bf90818721ab2c7563f539858eb079e4be
SHA512 6bc6bdacf7ea07870f5cd3f9780e1320585c326a7aca0c21605101bd5c585a3c5c40c1d1a2e45242dd5169d892d4d1dfb7af6d260bd341aca1e0b57ebc4e0a43
TLSH
T18FA0025157C91440F0244179A1191BA13301C9B1042307034990018CCD542CD9955055
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\a22dd415-fa20-4cae-8c1c-08b5f7e5f171\index-dir\temp-index
Size 72B
SHA256 a0399dceab515e3d53568f4d66f4681e6406e4315d2fc1e7f83dba882e55abfd
MD5 21689deb938749775f97c82505062461
SHA1 d246c5f5b0b1fc23e33e932bc10c3022fdfca97b
SHA512 29f4942e57f16af3f078067e725e0f33805b5d4b52eaf95472517938e162c6a852d261475bfc83d4d56c0cc1dba003b5e6a5f1bde79b6b97ae6f994e30da569c
TLSH
T1EAA0021043C62141D118137471051FF12311DE911805471355B0818C8C9C2C45911425
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 178B
SHA256 63d4ce3b16773e7f06b4ecdff9d516c662df8e563f9135e0b325b6d8d111b3a0
MD5 3e2cd87c1559daccdac9a52ff743393b
SHA1 ce9fb1ef0bc288ce6a5ffd4ac91445a74d27da77
SHA512 a747b669233eaa4b3d7b70a4ab16ea32eaa2b3ff0d6fda9c5f5a0980dee8358896c82622163a7217e036f6a561d2f2d3ac798e567a699e55649795654421f68f
TLSH
T15EC0807B40C1D5913F3A14E7120672CCC9373FCC4CC4E59C5862301E2234E5B1E04D24
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 178B
SHA256 e2b7896071a4bf0c58ebdd09935fb46c85f627e3b4480252a6c5ec4ea6272b60
MD5 cabaaee7acfa214bad4907b1d36bebf9
SHA1 83a49bafbf6399b85d6d6145f0cadd87b3378e98
SHA512 9606047bdea6b01439306774cada86ef6cf569f36d39c3e0c4a2d5c42c6714856e7614f2f2113b3106ab8b6d77bc6987a7e2d26bb8d6bf7a3b644d004ec58bef
TLSH
T199C0807B30D1A7D16F7524E7611271C8C9393FCC4CC4D59C642130547230D5B1100D34
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 178B
SHA256 a9a8b2b7953bec1175919395066beb2b1d667d02bcb16f22f1040f5c0f479a3b
MD5 0a3c9044d0ffc67509f662dd5aeb36a4
SHA1 b903526cfc548df0030de7b0123008f83b52664a
SHA512 9bf7b9914d954cf700c2db52060ca5ca172edf667d603e8a17df53ad234d47cbf0e8768116a63daebf9095151008effd05327470319be827b755792f11b60bd7
TLSH
T19FC0127B314249A12F6554FA551671C8D9263FCC5E89D68C485230156134D5B1100861
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 91B
SHA256 c87ef4d706c6d7f4933bd6d3e64176e2fe7758f7daf057c73b47f1429e2ec72d
MD5 e25c9c76fc320735b8f7a4861abd591d
SHA1 0a7c36545e37b0873f0a777aef7afbf24109d9a9
SHA512 3b43c0a7b634162b668d58e99ecbb26642c8a60e7d40c9e72e83beef689d110098cbec127c55e53204110734344b795738c148500efa7fcc4533ca1ff6c1509f
TLSH
T16EB002BF514259D51F7534F7014731DDC56633CC9C85EE9D94721058321497F2001C65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5db549.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5db549.TMP
Size 178B
SHA256 4c42da6de16b43abc8b416c931ca8f46405bd19177d9d4223555c0a0e1badd65
MD5 f411649e358eadc0bbb72b7d447f1b5f
SHA1 ac1a34a2af95972cc923eff90cec0a04155483a1
SHA512 f414624c798f7aa113e5070ac93db6f02382f91e54ab9810fb5c946d97b518a21ef8bfc5a7d932e854e05a3da54bfff944334ac7dc8f5afef950986a886ded91
TLSH
T18AC0127B01828AD22E3868EA116332C9CE3A3FCC8CC0AB4C882231482234A2A1500C20
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6efa3b52b63f35722aba96080c8b71250e5179578a2b14c998c2d84fc4350d9e
MD5 a6a6d61581ade8608d8606281e23dad2
SHA1 29ae90d5a1a50150d4efeceb6ff58b500083f6bb
SHA512 9273488291c9bd74a2cb1856249a4e7fe9db3a1905ebd27524068211dd9b44d30e2154b15761e5ccba9c25553d27fb1d9944e8c7a14e5fc2b7b8af9964d128e7
SSDEEP 768:Yj+9I3aacPfcOqfmfjV5R4HTytYYqgHvPwlS/+0ivk:H9I3OfefmfHWTwJx/uvk
TLSH
T1F3F2CF72ECB89DA75DE196C47606378B6EF44323D2C16B5489DC9E0D09CB9EE134B80E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 85b5ef8bf54fdf009abe2486b87415c17d7d51683309d05e07d1fa79137352f2
MD5 2cb72a4ae52efe20d5c3656daa8de212
SHA1 ad78933f02352b9a5975141996f8dffa23a74e83
SHA512 c90120bef905737a508ce8498ffd3cad2035d299c13bdfcc7a34cb668a40e3644da9ce8be51463fdc04e0705f2c76cd59242ad916e9ef86ed10e5dcc83724efe
SSDEEP 768:njaeqD4MlshiLdMmG3tEcPfcOqfmfFV5R4HTytYYqgHvPwlSlZKT6:nqcjhIdMB3ZfefmfFWTwJxDT
TLSH
T19D03CF76ECB85CA78CF29680B60376936FB44267C3C56B58CDC89A0D059B9DE130B81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 86464b3c3ab49afe26be1b739f0365994fab17a85bdd1f510862b10be7bd6e63
MD5 693c0a1f66130dff72ec6102a9aaf096
SHA1 2614cbcb8baf8805cac6d8faf767d9c6a4ae96c6
SHA512 736d925b45df76e99db3e56f7c4dbd8b7b54ac774ebd7257602590a39030c952bc96a66a59b8028e040f12063fc68010e48a48ff0c5e4f2d46acf1ab0f3f4d5a
SSDEEP 768:Sj+9I3tacPfcOqfmfjV5R4HTytYYqgHvPwlS/+0ivk:h9I3nfefmfHWTwJx/uvk
TLSH
T119F2BE72ECB89DA75DE186C47606278B6EF44323D2C16B5489DC9E0D09CB9EE134B80E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 6896f75aeef0d8d2a1aa19ed9348dfb7d5e2e48fc502bc25c02ce986a628004b
MD5 f65ae7c01e848cf0ec88107a9ca2b632
SHA1 e252049cf801d6e72b14ec8319faad79dcf5710e
SHA512 f6d4a52c2911861e26e0f1a9401a12f025d1de1f4e611fb28673158ba2f47d2b1e4fafccccb509d57fc08796357785214dcd55321c7f1caa733b90e0130b66d1
SSDEEP 768:/j+9L3aDcPfcOqfmfYV5R4HTytYYqgHvPwlS/+0ivk:y9L37fefmfWWTwJx/uvk
TLSH
T1AD137DF198E75976CD9D8383633E2E462EBCC223B2815610B7D85A0DCC875BFD34680A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 ad19fa0f7a0b0443d9cf7365a5d324678f80fcc934710c7129ded289ffc721d8
MD5 167fd3ca168c3f490c16e3edf2de9bf3
SHA1 1b3da4bacdeecaa0958015bf995a06cfa0f090bc
SHA512 14b5a64c4313579848ea396ba2591c9f57053152906a89b4d6168ddf6841535aa7a80826db9bc7fb2b8351e5c6bb73210cf0be8485f83ef670d1aafb68c64cba
SSDEEP 768:/j+9Z3dw9UPfcOqfmfhV5R4HTytYYqgHvPwlS/+0ivk:y9Z3OufefmfpWTwJx/uvk
TLSH
T18A137CF198E75976DD9D8387673E2E462EBCC223B2815610B7D85A0DCC875BFD30680A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 69c7e1ee3bae4608a99d0bf59a63d9573f6e450d9f27dac8923b13140fbf9eb2
MD5 caae3b1686966e8c82ec2cbfa4c3fb96
SHA1 0bbac208369d8ef643b1fe7c10f40785431876d1
SHA512 19a74228bda0d6d021dc4345b69767a907b96ac0e24aef8267c26751a40c34f973ca0ffdb73dad859cb728bf4d11c81b6ebbb0f85d77eae1892d7591b5bda239
SSDEEP 768:/j+9b3dpwUPfcOqfmfhV5R4HTytYYqgHvPwlS/+0ivk:y9b3j/fefmfpWTwJx/uvk
TLSH
T1EE137CF198E75976DD9D8383673E2E462EBCC223B2811610B7D85A0DCC875BFD34680A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 f6c2be5b8e694fa3a0fc63cb4ec8dc505ab8a56665b738c264dee2d7e8808396
MD5 65007771c86468c459c2eb311f3cc92d
SHA1 6709a9dc24074e4175e9dcb3a416dfcf10d2c289
SHA512 8942f8e6d26ed56c43cada863566da85cdb95a4f071adccff76c8357ba618bc889566fc22c361c274b5304fd3b4d7fc464b3620a7f990365678e0eebfdaf0e31
SSDEEP 768:/j+9u3df0UPfcOqfmfhV5R4HTytYYqgHvPwlS/+0ivk:y9u3RDfefmfpWTwJx/uvk
TLSH
T16F137DF198E75976DD9D8383673E2E462EBCC223B2811614B7D85A0DCC875BFD34680A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 57ba213aafee2abdcbcd9bfdba637f76454ae43b2d82dd7ce94cd04b84c3ab38
MD5 281a8c383aae4f70a55b1031af3e8463
SHA1 595ae5ec00d85f4a75f2a5c31ecb5e306bead86e
SHA512 fd3e1e31fd51165d68bd930e54cc47e1e27c94f382e6805726882bde19b374810f44695cb1a29ab73a9522b9c186bf6a8334339affec398429cef67508eb14d7
SSDEEP 768:EjaeqD4MlshiLdMma3NQPfcOqfzV5R4HTytYYqgHvPgByjWtxjTo:EqcjhIdMh3Ofef3WTwJQyj2y
TLSH
T10A03CF7AECB85CB79CB29684770367976EB442A3C3C62B64C9DC5A0D019B6DF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 1040b05b5b4e8ce02fdae25dcd8d750b0c40bfe9b0a4acf33b569aaa40db25b2
MD5 7f7d30f8c54535c1f00fc6901acf28ae
SHA1 f768ef28cc0716bf0b04f45c72ac82dee8e7b17f
SHA512 b0127d7e7b425579f608fed00951fa303117bbb433f3fc13ebf571de32eb94f4af061af769d5eaeeb069883fb03c0b6f8280224facc735308c8c6c53e60f9f16
SSDEEP 768:/j+963di9UPfcOqfmfhV5R4HTytYYqgHvPwlS/+0ivk:y963MufefmfpWTwJx/uvk
TLSH
T186137DF198E75976CD9D8383673E2E462EBCC223B2815610B7D85A0DCC875BFD30680A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 59eeaa47cf82eadc96d7b5fcc5d041bd2677eb0fc39c2ede0b1bdc0658ba7dc2
MD5 7329270322b03d4baf45510e3e5e110d
SHA1 62f4936879e765bcdf7f4bc3f4cb25abfa99bfcc
SHA512 c99f0baef5e56b2662fcd25045eff24c459ac3edff91dac82f2c49d60e4bba856f8991bc1167e6b66054b5f9655321b1cfa54f4e736ef2a73114eaba5f12de63
TLSH
T112E00102930041FDC43C0330858B2A312AE2816006F10609092111582C233482F70FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 424e435d72e829312fd12b9eb1ea891c99eb70c5a8d33e6e4f6f39b3d3d1924b
MD5 51f77b92172342e6b153077850237232
SHA1 34e7ca188bdf728e1c385434e0ff32e5e265818f
SHA512 23324b859a1670ac8fe713fb4e28161ec397d2e31f996329c305853288a2c2e91a2bcdb474cef150736f81bc1215d82c225cd63bfe0c499f282b6fb9d463a024
TLSH
T16BE00102830011FAD46C0334848B2B246AE282211BE2021E0E3002B8AC233492E30ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2d311a49b8e17489101da5be122f6d2a2cd2806920c961a3f12485c399f8a409
MD5 3b390c41a17b55f070254346706d8a0f
SHA1 7c6cf61c819e2db6da0190d4c7b4e7cf460c70e9
SHA512 61213af1c4fb3ec4ce13b5083b4e95fd7db54216f2370d39ee11f5bb10a96ac4b450c3353d3adbbd26bc1fe6757aec2b89abf654e1aaaebd46cf0768a977a93b
TLSH
T129E09203830011FAC43C0334808F1B246EB3C1210BE3030E4E3000B8AC323446E30ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8c6173c2db2d0f0620eb8d2ab8902b353bf85bee79e745dad7a4e85300c55437
MD5 004515b440a6cd248b34b73bd6eaa415
SHA1 78f3509609d4bac629154e9a423223d65fc8345b
SHA512 79da9da6a427ec3ff86aa02194d97b1cb1ae291191d0ae457ff085d9df2c589237a98ea7bdc8d50f6bbd5d4c21f796e350e1959ab6df9304b3ff1f93174d8806
TLSH
T1CAE00913530062FAD86C0330858B2B696AE7C26106F2064A5C2151A86C133882E71EA0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c51f1238b4e0db135de7140d8552ce5d9dd5cf289241358223bfe52d83557a47
MD5 890eb69637da192bc7b6c3f3d7094fd7
SHA1 3e09a02708185d7e2c71373165a9b0c8161cd0b0
SHA512 d602aeaedcfa77db72ac441b3322738e20556ca1b3f3e9370787ee95247213b1fa1ff1bd0caf4bc5248bbe3836f514e1718f2e601caa38b9a80c0d21812eae88
TLSH
T112E00213530051FAD56C033045DF17656EA7C12106E3475E5D2151B86C527546E71E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fed7faad816e74c18090095cdcceb99cc94c820cb201005dfb6f4898d72772ce
MD5 d25f25d515c7ce346b14a057aac4767e
SHA1 a16491ea2c412c53f36f6fe3087444815fb04455
SHA512 3409ecb65e0fd4b165940ce4dd682fe4d2c16ac8ac75e6121e47c529bf3ad10ef6e6133112b9ea87674d7980b3a62b5b2f19f3a187f70a262c80fa635d039cac
TLSH
T18FE00203530041F9C03C0330854B16212AE3C13006F102090D2011541C132481F70FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1084e9775adea3cec9efc032af61909161ea21dab9763bd59f70c84a79e57dc6
MD5 c95407e6e7d06c54bb95419deb06cc55
SHA1 267a321876e868cbc23b199fe8a9f367dcc26b2b
SHA512 3b582c9dddb775e4c6a30dd020c9e6eabaff74a914b8013de8b06cc0194923f260b5e0181222d37b1ef1c2c9ae43a7a00e4157c2445c88ff1e0bcc80fe093db0
TLSH
T15CE00103930041FDC47C0330858F26756AE3C17106F2070A4C2151A82C133882F70FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0d3683a3200f26da76c4d9bc259748201072a9f86484a458ddf053937baa09e8
MD5 73b5d8314bbc86d1a2818ea61342baa7
SHA1 bab7c0d99c275aa203c30eac4016a27e18ebe79f
SHA512 374ff4483f7daecf84655afd8e95b6544217c374964edc4106a6fbb9bb72e8abd27be858966f4c9267fa2f0370bfd9e7bc2cdedff580d6e8779fade929c3fae9
TLSH
T156E00212530015BAD56C0334448B17256AA6C22116A2031E5E2042647D133491E31ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 dbf20678db8fc741afdcebfff7f8bafd0fc0a22cb8f9a299951f2f526ab8f2e2
MD5 823aa052a85a2b51fdaaac33d7006740
SHA1 3e41546bf5377492c817669e8567037c743701c1
SHA512 d3af02e0c6a6a3d692c6f6a1338709c1fe91e6d6a105c1238ceb71f1852096c73b33086c15e51275a7497de1a9a64ac0e1178943e7adc764bc964014b1531dd3
TLSH
T185E04803830011FAC42C0334808B2B246EE3C1210BF2021E4E3001B8AC233446E30F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5c9216.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5c9216.TMP
Size 392B
SHA256 317338f4172b1257d10a6db7de74c2b9cde2c93fa8010a03ec8d413e5db37391
MD5 98ceda0fce136a86d70e1c56792cbb4d
SHA1 6932ca95fd20e21576e604651446994f81d8cab7
SHA512 64ce5d61529893d5dbbbf673cd2dce912ba38c3963b3f1cfebf4e10f501c148e7f1343496d90d42db0fd3cc2feb6a4490d45568e197e470d2156cbc0093f621c
TLSH
T1E9E004015100417DC03C0330C54F15313DD1C11007F10104053011541C1334C1770FC0
MD5 SHA1 SHA512 TLSH

Submit Download

907984f2-037d-4d4a-bccf-aed023def275.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\907984f2-037d-4d4a-bccf-aed023def275.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 ad2691e31a4092ee49c4819c0fe87ddccb698ece8535732bffbc7d0496093a93
MD5 609b9018da361fcbb2721b76b18f9eac
SHA1 326ec87b0a231377d6b43d4dba41009e6f0cbd94
SHA512 c730690dd0622f7983dd24bf5d9a2cd12033ec4fea78b66779253129f921b7b8da5e744ac4a69f0584cb6bc3999687fd5d8406ec261e3ff9a0e53b109d087498
SSDEEP 96:9pylJsumFsslJRsOwhqszUKsslJVu//sslJruuJIsslJnIub:b6KP9cJzH9fO95m9BIe
TLSH
T1BD2234145FEA0A06F3F3E97169736310AF77B90996188E0D05C641790C73A44A97DFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5764-350-0x0000020BFCC30000-0x0000020BFCFEB000-memory.dmp

Download

memory/5764-359-0x0000020BFCC30000-0x0000020BFCFEB000-memory.dmp

Download