hxxps://yandex[.]com

Analysis

user interaction
yes
max time kernel
898s
max time network
891s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 04:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://yandex.com
Sample260705-e6mygahv7z

Score

10^/10

discovery

Malware Config

Signatures

Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs

description	pid	Process	procid_target
PID 4312 created 3292	4312	Setu.exe	56

Contacts third-party web service commonly abused for C2 1 TTPs 12 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
314	yandex.com
483	yandex.com
501	yandex.com
502	yandex.com
7	yandex.com
8	yandex.com
11	yandex.com
50	yandex.com
83	yandex.com
315	yandex.com
482	yandex.com
78	yandex.com

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	212	https://universe-sandbox-2.vipansoft.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a163ac4f8c4dc51c	5

Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

pid	Process
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setu.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2288	msedge.exe
7252	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276996229729110"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\MRUListEx = ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\SniffedFolderType = "Generic"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\NodeSlot = "7"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0\0	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 010000000200000000000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\LogicalViewMode = "3"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupView = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{37A63A31-CB0E-4826-9034-399EC60EFC98}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 020000000100000000000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0\0\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\IconSize = "96"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByDirection = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3444	msedge.exe
3444	msedge.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe
4312	Setu.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
11584	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
668	Process not Found

Suspicious behavior: MapViewOfSection 2 IoCs

pid	Process
4312	Setu.exe
4312	Setu.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 31 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5944	chrome.exe
Token: SeCreatePagefilePrivilege	5944	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe
5944	chrome.exe

Suspicious use of SendNotifyMessage 44 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe
3848	msedge.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
11584	msedge.exe
11584	msedge.exe
11584	msedge.exe
11584	msedge.exe
11584	msedge.exe
11584	msedge.exe
11584	msedge.exe
13136	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3848 wrote to memory of 2216	3848	msedge.exe	86
PID 3848 wrote to memory of 2288	3848	msedge.exe	88
PID 3848 wrote to memory of 4432	3848	msedge.exe	89
PID 3848 wrote to memory of 5116	3848	msedge.exe	90
PID 3848 wrote to memory of 4432	3848	msedge.exe	89
PID 3848 wrote to memory of 4432	3848	msedge.exe	89
PID 3848 wrote to memory of 5116	3848	msedge.exe	90
PID 3848 wrote to memory of 2884	3848	msedge.exe	91
PID 3848 wrote to memory of 2884	3848	msedge.exe	91
PID 3848 wrote to memory of 2884	3848	msedge.exe	91
PID 3848 wrote to memory of 4896	3848	msedge.exe	92
PID 3848 wrote to memory of 4896	3848	msedge.exe	92
PID 3848 wrote to memory of 4896	3848	msedge.exe	92
PID 3848 wrote to memory of 2512	3848	msedge.exe	93
PID 3848 wrote to memory of 2512	3848	msedge.exe	93
PID 3848 wrote to memory of 2512	3848	msedge.exe	93
PID 3848 wrote to memory of 3148	3848	msedge.exe	94
PID 3848 wrote to memory of 3148	3848	msedge.exe	94
PID 3848 wrote to memory of 3148	3848	msedge.exe	94
PID 3848 wrote to memory of 4632	3848	msedge.exe	101
PID 3848 wrote to memory of 4192	3848	msedge.exe	102
PID 3848 wrote to memory of 4632	3848	msedge.exe	101
PID 3848 wrote to memory of 4192	3848	msedge.exe	102
PID 3848 wrote to memory of 4472	3848	msedge.exe	105
PID 3848 wrote to memory of 4332	3848	msedge.exe	113
PID 3848 wrote to memory of 4332	3848	msedge.exe	113
PID 3848 wrote to memory of 1708	3848	msedge.exe	116
PID 3848 wrote to memory of 3464	3848	msedge.exe	117
PID 3848 wrote to memory of 4168	3848	msedge.exe	118
PID 3848 wrote to memory of 4112	3848	msedge.exe	120
PID 3848 wrote to memory of 1476	3848	msedge.exe	121
PID 3848 wrote to memory of 1476	3848	msedge.exe	121
PID 3848 wrote to memory of 3976	3848	msedge.exe	122
PID 3848 wrote to memory of 3976	3848	msedge.exe	122
PID 3848 wrote to memory of 3444	3848	msedge.exe	123
PID 3848 wrote to memory of 1952	3848	msedge.exe	124
PID 3848 wrote to memory of 1952	3848	msedge.exe	124
PID 3848 wrote to memory of 3032	3848	msedge.exe	125
PID 3848 wrote to memory of 3032	3848	msedge.exe	125
PID 3848 wrote to memory of 4464	3848	msedge.exe	126
PID 3848 wrote to memory of 3544	3848	msedge.exe	127
PID 3848 wrote to memory of 4464	3848	msedge.exe	126
PID 3848 wrote to memory of 3544	3848	msedge.exe	127
PID 3848 wrote to memory of 4340	3848	msedge.exe	128
PID 3848 wrote to memory of 4340	3848	msedge.exe	128
PID 3848 wrote to memory of 3524	3848	msedge.exe	129
PID 3848 wrote to memory of 3524	3848	msedge.exe	129
PID 3848 wrote to memory of 3524	3848	msedge.exe	129
PID 3848 wrote to memory of 3792	3848	msedge.exe	130
PID 3848 wrote to memory of 3792	3848	msedge.exe	130
PID 3848 wrote to memory of 3792	3848	msedge.exe	130
PID 3848 wrote to memory of 1216	3848	msedge.exe	131
PID 3848 wrote to memory of 1216	3848	msedge.exe	131
PID 3848 wrote to memory of 1216	3848	msedge.exe	131
PID 3848 wrote to memory of 3500	3848	msedge.exe	132
PID 3848 wrote to memory of 3500	3848	msedge.exe	132
PID 3848 wrote to memory of 3500	3848	msedge.exe	132
PID 3848 wrote to memory of 1644	3848	msedge.exe	133
PID 3848 wrote to memory of 1644	3848	msedge.exe	133
PID 3848 wrote to memory of 1644	3848	msedge.exe	133
PID 3848 wrote to memory of 4436	3848	msedge.exe	134
PID 3848 wrote to memory of 4436	3848	msedge.exe	134
PID 3848 wrote to memory of 4436	3848	msedge.exe	134
PID 3848 wrote to memory of 1972	3848	msedge.exe	135

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://yandex.com
  2⤵
  - Checks SCSI registry key(s)
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff4668c188,0x7fff4668c194,0x7fff4668c1a0
    3⤵
    PID:2216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,6551172090541677627,15421184815602484528,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,13798507941522918322,13472813010381552357,262144 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:2
    3⤵
    PID:4432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,264006764461417801,4105063505659936554,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
    3⤵
    PID:5116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,4768919385959633811,2174028206895946064,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
    3⤵
    PID:2884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,18206043164826760298,5269261111873815661,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
    3⤵
    PID:4896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,13230775699541959955,8061253941108312873,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
    3⤵
    PID:2512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,4090268488013481564,1493787550276339414,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
    3⤵
    PID:3148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,10063229085848718683,9650345606459836037,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
    3⤵
    PID:4632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,8216488428338705255,8520021475677509862,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
    3⤵
    PID:4192
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,2872886092484032364,10446512540323881043,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
    3⤵
    PID:1012
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,2872886092484032364,10446512540323881043,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
    3⤵
    PID:4472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,852270624367225872,8569925551468073236,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
    3⤵
    PID:4332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,10229949806932848443,5348185941080893320,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
    3⤵
    PID:1708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4452,i,17522962318132171457,569656962772441480,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
    3⤵
    PID:3464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,3004897409756425286,9782951232956866749,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
    3⤵
    PID:4168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,13731559881805249716,9819186835768097745,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:8
    3⤵
    PID:4112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,5738053893893107722,7669223144012266971,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
    3⤵
    PID:1476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,10257316032387544779,4840662184655547684,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
    3⤵
    PID:3976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6848,i,6692244529611226092,10188160118152976901,262144 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1044,i,13471775821132169454,1101451954250779157,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:8
    3⤵
    PID:1952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,15352123964853097908,9447763152789555279,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
    3⤵
    PID:3032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,9447057075450011793,7612984346320734624,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:8
    3⤵
    PID:4464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6944,i,9457759991219639241,11181794661025586134,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:8
    3⤵
    PID:3544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7116,i,3155508755197092536,17194610241477862483,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:8
    3⤵
    PID:4340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6972,i,6494435194083635198,8691317121876245159,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:1
    3⤵
    PID:3524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5580,i,17426214285875667956,8802542222004084576,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:1
    3⤵
    PID:3792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6600,i,7386868713631656664,15466467685624315805,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
    3⤵
    PID:1216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=4252,i,223418261764390866,4265726351734805364,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:1
    3⤵
    PID:3500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7232,i,5471193333722276126,2974772887542433327,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:1
    3⤵
    PID:1644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7592,i,9253939749052919233,10839183396004702015,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:1
    3⤵
    PID:4436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7752,i,9236333723315002272,13535460067869466098,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7772 /prefetch:1
    3⤵
    PID:1972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7736,i,6609797214510050101,10631500201167535036,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:1
    3⤵
    PID:2748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7124,i,18379728483753548034,14153466840106978265,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7936 /prefetch:1
    3⤵
    PID:4764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8088,i,13203229694673896373,13677336770194483635,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:8
    3⤵
    PID:3668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8080,i,14543478986121963216,8214690119630757699,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7948 /prefetch:8
    3⤵
    PID:1620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7532,i,12733720919528909252,2092492411158159790,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:1
    3⤵
    PID:3992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7452,i,2109602706732206111,12898613143415901519,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:8
    3⤵
    PID:3432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8236,i,12083352774925975302,3497911153097468545,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8240 /prefetch:1
    3⤵
    PID:2268
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8368,i,12135465974393820615,6907910389845353266,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
    3⤵
    PID:4752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8316,i,8706944474325028110,11355116452347108534,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8412 /prefetch:1
    3⤵
    PID:2836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,10503557441699705851,12389225472843773467,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:8
    3⤵
    PID:780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8708,i,15716206424679065914,5616120894683883736,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8700 /prefetch:1
    3⤵
    PID:10484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=5464,i,3710482758661944186,10073930542190270603,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8440 /prefetch:1
    3⤵
    PID:11060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8672,i,8609472791931196864,883568961432882554,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:1
    3⤵
    PID:11116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8212,i,2296559410832564283,6345550208707558588,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:1
    3⤵
    PID:11176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8372,i,9383100322969834517,11057741850314588952,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8868 /prefetch:1
    3⤵
    PID:11400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8932,i,8163546364580640702,8764353182633836799,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8972 /prefetch:8
    3⤵
    - Modifies registry class
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    PID:11584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,13907119325688641468,9912006131607597948,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8656 /prefetch:8
    3⤵
    - Modifies registry class
    - Suspicious use of SetWindowsHookEx
    PID:13136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,7468076476449028421,8066149323542953300,524288 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:8
    3⤵
    PID:13796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=3752,i,8967989544255019556,3794320162887090651,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:1
    3⤵
    PID:15476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9200,i,8333908086948784149,11857148674663524446,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:1
    3⤵
    PID:15576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=3748,i,14860589921199868011,3200874642401046430,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:1
    3⤵
    PID:15584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8876,i,11715328704796699512,2958563464629086367,2097152 --field-trial-handle=2508,i,9241380376294342699,14122809811569871503,262144 --variations-seed-version --mojo-platform-channel-handle=8412 /prefetch:1
    3⤵
    PID:16012
- C:\Users\Admin\Downloads\SETUP_FILE_(PASS_KEY=2113)\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\Setu.exe
  "C:\Users\Admin\Downloads\SETUP_FILE_(PASS_KEY=2113)\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\Setu.exe"
  2⤵
  - Suspicious use of NtCreateUserProcessOtherParentProcess
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: MapViewOfSection
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-first-run --disable-fre --no-default-browser-check --disable-background-networking --disable-sync --disable-gpu --mute-audio --new-window
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:5944
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff42e1c728,0x7fff42e1c734,0x7fff42e1c740
    3⤵
    PID:5964
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --metrics-shmem-handle=1952,i,4450314335973184601,13141230547677447590,262144 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1972 /prefetch:2
    3⤵
    PID:7236
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mute-audio --force-high-res-timeticks=disabled --metrics-shmem-handle=2208,i,7365194943926149839,15999542939231432988,524288 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2216 /prefetch:3
    3⤵
    - System Time Discovery
    PID:7252
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mute-audio --force-high-res-timeticks=disabled --metrics-shmem-handle=2328,i,14348472480759794488,6213958050490525109,524288 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2352 /prefetch:8
    3⤵
    PID:7408
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,435101619414118866,18275912529743604572,2097152 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
    3⤵
    PID:7536
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3496,i,10240616019680894888,12197620739004612067,2097152 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3512 /prefetch:1
    3⤵
    PID:7544
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4488,i,6552441633534454186,15473335576555864644,2097152 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4500 /prefetch:2
    3⤵
    PID:7696
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,4737455225965439372,340823517066381912,2097152 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
    3⤵
    PID:7756
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mute-audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3880,i,2168930365521355907,17289738154648803617,524288 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4508 /prefetch:8
    3⤵
    PID:7944
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mute-audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4944,i,1632403248703306822,5011015265855744259,524288 --field-trial-handle=1976,i,4768267094311556837,16217978900565148587,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4908 /prefetch:8
    3⤵
    PID:7988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\SETUP_FILE_(PASS_KEY=2113)\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\x64\HTML\EN\CHGSSID.htm
  2⤵
  PID:15428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument C:\Users\Admin\Downloads\SETUP_FILE_(PASS_KEY=2113)\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\x64\HTML\EN\CHGSSID.htm
    3⤵
    PID:15452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Downloads\SETUP_FILE_(PASS_KEY=2113)\𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏\SETUP\x64\HTML\EN\WiFi.htm
  2⤵
  PID:15992

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2156

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2272

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:7288

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 c89d9ba93093fa6ba69b6e6fecf9929e4caad479ca4e58df0a2df0eda2e4e153
MD5 ae363308311275b962cbf887fd7e3d4e
SHA1 c0bfe6a364fd892d6a695b051f6e48440663bfc6
SHA512 781ee5693012262634389ad672a1fde4e7feba5fda94c9c5c1f08b6ad888f12b7d512ccb741d43363e5f65fd90ad7ad8bb5f0fdf0a760e97eca819f7ce22dc63
SSDEEP 3072:A7Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:dm7Rkm1tYpBeh2BAog
TLSH
T1D0C3123B5D75EC3B5CB5A74EB08E0B1E2EF249A6C920DE9288D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

630b0ef8-2543-472d-baeb-f5904f7824ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\630b0ef8-2543-472d-baeb-f5904f7824ab.tmp
Size 27KB
SHA256 061818e7527cbcd606ae37e0419d9d9ba64ab749bb5f2b4720a74521a619bf21
MD5 7a5f5ae8d9056e4036924e6da7caf6d6
SHA1 83418fe75ade8d6efbcf786a8059b277c1d242f3
SHA512 16bdf7ce0232017724b7552f3d58a13f6932c4c899adfb4944db4e80a1a05472671d0ce6b345d604771817db308129139abd8df5478f595e2dab045f32fe6e03
SSDEEP 384:gaiFgtNn/s3n9SOBsN38TUNTUlIRhTvSbY5KWGdpqSiOObjI9G6w7V:gRFgj+9D+wgqCKtdi29MV
TLSH
T125D23AF258D7893AD96E8747B77E2D068EBCC16BB6805A44B3D85A0CCD971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 836df4ff1f5279c44690c48125dd95a1432b46490b52efe9a9dc163537c7a32a
MD5 c2db664f5a77029b91eb17c19abb70c9
SHA1 053b8a224cb23eff14f1c71ba52ba04a77145f7a
SHA512 7e4a209eb06d35d3fb6f34201b27150234075891863c61a5c83558e82c6d57b2af0741e32e95fa834d6ea1befbae90e6105bb7d3323afb1e53a83a0206088ce5
TLSH
T1D8E0D8E80AC4C26DA21075C74174834D52D03F1BA3C8EA051724845C7102478BBC1DA5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 1cd1845f15f73ec7695edb13c9f2bd13155539af8f4e78a182c18c9f19d01576
MD5 799c61341ea94936f5b7c8cd2f6381f7
SHA1 b217437fba1e016752ac701d0d3b25355228154a
SHA512 9b85f5f31430349e095d40cb3992bf07e88584cca8e55ef353c8ea3c1029ad0a8f418fcce829bcc021dd16208f43b29164ce380e1ee9daee244be005ac9e8438
TLSH
T11FE0D8781BC0C1691320A6C7808BE71681907A97974CC6DA6354609D65801184FADEF0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 49KB
SHA256 71749109108dcaf2c654d92602d94eb6bba92fa59f5d533007254863d5c4ed60
MD5 bbea458797d2670bd44766cc26362170
SHA1 3666e5f5f7eeded93db8546f9d318597d90191e2
SHA512 9568903720f79d098cf586b0c20abdd37c88ceaae3abed1c8df5b5ee84ea49eb2be6ab76302fb7df89af92ff668016e7844e2e12ce54f15c12b6c11fc0fc96eb
SSDEEP 768:uoNxvUERXLQb1QXeCKKsCRuNdt0jjevveB0hfSE9cDcibtD4:uIDRbQb1QXeRDCSb0j+80hf9I0
TLSH
T1483301C5252CECC172374C4667E8383C13A9B30556CEAE2054F4E08EB69B2AC4DB9BF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 123KB
SHA256 b209c92f2a2ebcba246cc1234ed033ae36c1c82ae3c63d70cd82fe953c4db04f
MD5 dd8104b3f26aceda6e1b3a6ba192d25c
SHA1 2d773afa21dc8075c93e95af1be75b3b731d41db
SHA512 df233147550d349e92f6b62feec2bd7c0b2c6b24b10c5c6461ffe2d344499ff13b892edb217e87795f105239acf9f0b6044c95215873ff5624b071995c6d3d04
SSDEEP 3072:7zK/mH9zR1T5OGvfB3tkVswoSihwrmUNAwwcKZ7QklkO:7971BvJtkVpoc4hZ7QklkO
TLSH
T1E3C3120BAF8DD31E560AE2554FC108F631AD41A671BEB3AA89B066A771CF4D1C0196CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013c
Size 374KB
SHA256 9e58eef4c759e0f11538b7483cf06db0eee77e2f759477f430c0a0336baa7e5c
MD5 26636c6b0f19d3f091c8f9eaf16988a6
SHA1 301472ed6eb13e36e86ce7a9c30ca1158b1ff632
SHA512 b9377375bc95d52ec1615f5d87694ac9a7b9d19099630410ef159823fc8a31e2d6ebb8fa6242dfad2e8a0df673616604d0812d0574be8e0bb281935a1f3996d3
SSDEEP 6144:2MWU4MrvT1tBu/ARRfkKGM32RzlqKs/LXaMhXrO7ugO1KeiTxttKWK:BWYrvT1tBu/4GKNgRqKs/LqMhbO7j7er
TLSH
T13A8423DDA074E58D2A056560AB2DAF05B1FB435ACDD8A390CAF1BCB0FDC80F6E55842D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013e
Size 50KB
SHA256 5a2f25b65b0ebb0343716f34d0b7733e21a072a02b7d98967c51121c1ca8487e
MD5 03ebafd96cd49ac2e0982f562609f7e8
SHA1 a1f7253300acf3850e8a30e4337763ceaeee29e7
SHA512 611ef621a885bc5a88f674bf0572fceac742c47236920bdf129663e0413403c198613bc2a07797d23e354c24742963fb5b12b07d3594ab75cd5c5fa3bb1647a6
SSDEEP 1536:HNH0bSgygyOiEYPhuO4WTbS0FAliDEBuZM4WKITtR:HNHT/tO5YfdJGYDEYM4riR
TLSH
T1B733017732D60E744131BA195E721E29344CEEA2DF8E79992A84617EFFCD7C263C9404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000140

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000140
Size 26KB
SHA256 d5024abc5e57b0de8b5e6c484aa6fad4faf758e22af22faa4404fa795f0f41fe
MD5 af4240e93be668c6ceedb3e5630d10d4
SHA1 5840d2f8133e297f36da29ee131e77b3139c0e44
SHA512 fbfbc9cb17c9facf70f4066f675f76f53af001687d1402b9cfa6a6667710a010268bf81be9e13850530e09ddba9ba129a6077c3dbf1a83b7bdfcabc06a4e8994
SSDEEP 768:7gvrWMpf1luvr5kzg/F0kq6HlMmbingTSfV:ZiNG5kc1tPTSfV
TLSH
T1ECC2E19FB9039A4583F75A41FA568C9A3E9D104B8B2C9ED029B0F2E474D7A4D09834F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 e854202be2bb89a7cdbd5f69e13bb9dde502ca11aa31c590366134889cc7ad83
MD5 c4481a17b3caf97f811188cd339d0cbf
SHA1 800c5bff9670b9ee71ceeaff4a839c30b08d64ed
SHA512 fc7daf6bde7f99bf82df8f5119964a0ddc30ead4c0c786d18d51a721c6b59ec8a4c0402b53e07f999526d3bf6cdf691f32d4fa6423cf51729a201797640ba573
SSDEEP 48:E7RWLftdZ9exuQ7A9WaFhgsxEYRl9zgTFlW3T2xyXPKQgpl/X3TOWORtafn:0RW7tz9exufTh60Lz2WDuyXatXqFGfn
TLSH
T173911C39C24741A5DB7E00B864CD112C34FB9AE8FE9B9E815CD56A7578327C8F78A11C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 92dbe2040e02eae78f71eec74971b5564dda036d6b33ced8bac07edaeb8516de
MD5 5acb243c75ae807de22241e6fb87c6a0
SHA1 f3ceaadf2ece5092ccc83211db22de83ff051d1f
SHA512 85626f046f3fbd140c8c2b37ba235f7c066586992d6982bf4d1078bd05a7f5aa1f8249977eab18bf7205d462f384f2f2d5fb304580f5e7ec1582ff47924e90c7
SSDEEP 96:wG5tkuN1mMiNjzxEzEhDADZiwag2zQsekufcXAfv:jhwMOzxEzERAtK8seH0s
TLSH
T1A8D1AB35C382C390DB6900B876C91C3834FA7BE4FD97DE5A49806AF574227CD9E66368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 eb75d106e2456ca0c3e016f189c65f7bf57143bafa917175dc510cb7d7eba943
MD5 89b8249f7c2126f584a42758bd786a25
SHA1 402689fc1798d923741b01c285016e3f3711f767
SHA512 312871bf49071a6d0c949c4b854a2835f6ee9d35e8cb21f1c8cc7758b3d909dd1ec388cebd8a01b019e6765da489a4799f5cdd5bfe65353b1e9e16c3eb0c72fa
SSDEEP 96:KQG5tkuN1mMiNjzxEzEhDADZiwag2zQsekrfcXGf+:KDhwMOzxEzERAtK8seq0H
TLSH
T1C3D1BC35C382C390DB6900B876C91C3934FABBD4FD97DE5A49805AF574223CD9E66368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 942c81b36b6e34db8097d18e3e5b79b1919ce4610dd5f726c34864d39d8ee054
MD5 ed61ce0b3bef158214bb5c2cd5e5eab2
SHA1 00b2a674b4ddf1d088c3b0f204bf50d7b8f45ae3
SHA512 14ae3dc6e1d1f63f10fad13dbd63420dce4d71bdb2ef949e69dc30f4eeb9e7c93e5b39854258bec1c0ad07e61988d9eec6bb1162d4d690c02496e5a51ca85406
SSDEEP 96:eG5tkuN1mMiNjzxEzEhDADZiwag2zQsekbfcXGf7:VhwMOzxEzERAtK8see06
TLSH
T106D1BC35C282C390DB6900B876C91C3934FABBD4FD97DE5A49806AF574223CD9E66368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a7fc4d0eca37cfd47203f286c9aad84212547a3ac6d5cc991e73363c0e81e0fe
MD5 e627ceb431f192cc54ee8e376ca1884e
SHA1 05f4a00115fab644dc18e86d91c9d293eb0d20e6
SHA512 961d59ddac2f8e7c905a5a7f28d28d3ff3763496504686cfb1d39cfdbf281a0e11460c7b95e6b50eb712c0601d7fcc9894a10759c81e9f1558a2bc937ad9f162
TLSH
T1EF81C739C20301A5DB2D01B8B1CD112C34FB9AE9FEAB1E958CD56B7674323D5E39825C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 9056dd3cc96621285dbf825127bf5eb51d0eb02bd61c34ce15890195c50890f5
MD5 bd07a90d097c451225e0a15a27cdb620
SHA1 e589af6cb46f66d3221fc67e41f691a58b25c674
SHA512 26050062b5d8118a7b003be85699f94f6896b3053b83bb51e7a220d5ea35afe22a3ba763d98d4c5e1c6a8f8293e9cc22a85424c01223e5d67a60a5886cf11401
SSDEEP 96:jdRWdtz9exufTh60jzBWDxtyXatXmFGf+:GZb60UDxt0atXo
TLSH
T173911D39C24741A5DB7E00B864CD112C34FB8EE8FE9BAE9148D16A7574327C8E78A11C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 dd34162627e581357c6996d7a9c55dba854ada1ac0e884f5230ea16dc487f3a9
MD5 120e7c806139aa9599f088bd36538853
SHA1 d6556919ebfac85d69c21bff1e5f3431a1299d3f
SHA512 5e96bd465d246d6bc5298391950cad0576add87fc00126b63a5fc5dbe63f06083d88d9c1435388d0480283ac3f7e2b78bc889fb15c5a40f3e084d183517b56ba
SSDEEP 96:8G5tsuNRmMiNjzxEzEhDADZiwag2KQsekbfcXGfv:X5MMOzxEzERAtKdsee0C
TLSH
T160D1BB35C382C390DB6900B876C91D3834FABBD4FE57DE5A49806AF574223CD9E66368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 f31d5cfbc5349612ddcabf24e8ad0466b091a295a0aa4c45703dd0830eda8ba9
MD5 64bead25a5d717ce18024d9ecb7f537d
SHA1 ec735c2455109937c27dcf36b2b6937a674cfd98
SHA512 fae9946cbbfef2301042bce3cd83af7331e1ed2a6ac5ca58aa7f9651b6623a9f7c24c408a253b29629cc2462c64e6676528bcb665bd053ce64c3f31e9d010d75
SSDEEP 192:wY9CjhaCT5W6HpGyo3RMx30w1/JEZFT3325Pf8B:Z6vIy5x30w1GH3SPf8B
TLSH
T1DD421D30C383D2E4CF5E01FC3AD50D6834F9AAE1F9AFDE4A544555B830923C8A95D2E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 90330f1755f063f9a865ebaa51c73fb0ea1f0deae251efd8ae7e058e5b7880c5
MD5 6b0c69ea475398dd586cd9da504f08e0
SHA1 a5bba333aa568a2eacd89b90eeafff52d462211d
SHA512 12ce92e7da4e0a5d9af1126dfd7aab7f8b60f7d586057aeafcd658329b9711166f072836e367582f4b54f128206362db06305ecda99cf7691fcf9ada79c1787f
SSDEEP 192:xY9CjhaCT5W6HpGyo3RMvp30w1/JEZFT3325Pf8Y:q6vIy5h30w1GH3SPf8Y
TLSH
T11B421E34C383D2E5CF5E01FC3AD50D6834F9AAE1F9AFCE4A544555B830923C8A95E2E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 deda18c84a3184fe62dc9b701ef9f80dd9ccf76c8f45bdd388113ad642e36098
MD5 73cc7aa2f4194013e7d04e6bdfbcf5d1
SHA1 e6bfb8f4e9d018f65d5e76290356d14a1143ab3f
SHA512 cfb1e13edf6a9f0d9b0df49589f95d9e44be1562904a4672123001da93fee81def6e2c2ab90ba17dd9d6ff6c5d7219be6f8ef506b1eeed50671fe5c5538ef966
SSDEEP 96:FG5tjwLjkGZ1NozcC0Yfyi0ajix5zTW7HDTapuc36wckg20OTsekc1RTVjt5f3l:EsjFouYfyYix5z67jTRakCseF1bjvl
TLSH
T19D021035C281C284CF5E01F836D90D3834F9BBE5F9A7DE4A548959B834133CD9E6A6E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 d2e8aa4c366845f6df1229256ed8854bb65984f03212ebb9af09bab47b0d38aa
MD5 cf1a1dec601e4687c396347249a47958
SHA1 e73a6adfbe4e509f375d29dfa7f473ddd11408cc
SHA512 847cdf679f734750f187e4fc72a8a1b3c16ff0d079b0d1f0f1ba5ebc5be71fb2b09bca154c30a3020d5030f47407fdb231d1ca364bb4760f4bcf199c531e6aa0
SSDEEP 48:GWRWLxtdZrexuQ7AvWaFhgsxEYRtezg+FlW3T2/mtyXaKQgpl/X3vOWORtafv:ZRWdtzrexufth60EzBWDxtyXZtXmFGfv
TLSH
T1B9913D35C24741A4DB6E00B8B4CD112C74FB8AE8FE97AE9249C16B7574327C8EB8A10C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58b0bd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b0bd.TMP
Size 3KB
SHA256 c78a345c33befb61ef945a294582b7af47c183474bc2b3a3e4332d6236b94a2d
MD5 ec6bf4d975107d5bd732eb547729b064
SHA1 8c3d7da2f58fd9f4d1d5a8c526be860b6aa017d3
SHA512 0e56c20bf233b7df03257794329a40e7fc42f4a2eec67cf518130220d5eacc95d9fd1334c9bbfa5b9c3cee7aa0d2f85f779affc572f74a01aa6d9b59bd1f318b
TLSH
T1C981D738C20301A5DB2D00B8B1CD112C34FB99E9FEAB1E858CD56B7674323D0E39825C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 c694cf4220f18ea64c9e93b535eaae90feaa96c37b7ed1dac3fb670aa4c9db2f
MD5 bb2c60d0c941e8809aa02d37f62a13f9
SHA1 cc3997866f54787e47a6047a7d4b9a655a86e968
SHA512 624d6152fe392399734a683c57506a31186632c6efed355006f61e9361ce2a07b3864654ba61974a0d309b494af0b62a5ea96bbcb30de7c58fb467d58ba40063
SSDEEP 3:MsEllllkEthXllkl2zEflu/ll:/M/xT02zl
TLSH
T1504404747FC00405C5C01130C0D1D7D11370D7104511D7433CD104335CC75440C00400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 7da7edada51f4ec19ccf43e0232075c05c6d939aeb34adf5b37e706521661805
MD5 8022e39cf4c9c0695958dfd2ebf18e61
SHA1 9957e83f2842daf31db85ee5ef0aabf54c4511e6
SHA512 1a9c31c1c5fceac1544154fcf051cb3f79131c5201daa29c8ddd1a5cc6f9ecb93d5d74a1a2e4ff71d5d63654d9057e3e3d0d9f42a8da5d1e72ff72ecbb81e4c9
SSDEEP 384:DWqAAZ7x3ycTM/zGIMOC4zowKEfnh1403tmVfQb1WIMiWILGVHEyaAOlfnSjsxoe:UWyY6n5+xC4LS06
TLSH
T19EA27AF7C3E5862DC81156F4AA147E1BCE1D0A2443683C2A89D5FF4BA3E24B2E25574F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c93a27360529904772711379b0d33658a3ea9d9ea368ed2a9cdcd38be0f48190
MD5 d33ed22efd04470d371f7c36126d6c4d
SHA1 5ac320f1767331ce31c1a498d65beeff78862cba
SHA512 dcdc42ccc98f25477eb50d2b475ba00dc432d8c7428ac6c1bdff819ed8cf7f53f99654db544ec523de5bab9cb455ea5e78581a175925ad8ede9f2bbfa3fdba63
TLSH
T1B23126F383F1966D8B1696F0EA14AE1BCF5C0521832C386589D4BF1793F3462E116A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 546492e83a061f3af48ecad0811858ab8d07dca287793f53e7f0fc6fbeb6d7ea
MD5 319f19f84239b5d31b7d7bbdb3846406
SHA1 1d293b01b68cf3e5bc0132fe7240e32d28231763
SHA512 70506e7758c8d1119dbea5d371e79b266151954c5ac21769e91f4b5ce0ff089ea726ab493f9936ce254a8a61c6d8c3fea237d817bacc119885d4b20fc054cf2a
SSDEEP 384:DWGAxi7x3ycTM/zGIMOC4zowKEfb1WIMiWILGJk4BcaAOlfn9Zjsxoi8kBZVo33y:4Wf9Tnt+xC4LSn0d
TLSH
T1AC82BFF3C3E5866DC91256F4AA146E1BCE1D0915432C3C2A88D5BF4BA3E34B2E25674F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 69c8bfc61dedd46690820383d610b6bde257db39473780e6613800b79e18eb19
MD5 78fff07623c2a441aa2587355d0768a0
SHA1 f112aa4b8b06895e85d1aa36007d4c454f4ba60b
SHA512 1d51b637cc0c93ae430e7b77067c5f6caa79eeda9cb264ad08f43ee74e308e11f716e96ab233c3c1def8a8facf2761df838a76eb08e28e08fa90fdb783583115
SSDEEP 384:DWGAxi7x3ycTM/zGIMO61WIMiWILGJk4BcaAOlfn9Zjsxoi8kBZVo33t9kEbwy7h:TWf9Tnr
TLSH
T125429CF3C3E9866DD91255F0AA146E1BCE5D0914832C3C6A89D4BF4BA3E34B1E251B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a97947ad1543c28fe386551fe654a8ae18091d36b2cd339df1f84d9675ae8c96
MD5 e898503a617c66765651ab2cc5c8f1ad
SHA1 703e9f44f56199be05d09f88613897a02ce14e5b
SHA512 cca2cc463f58bbdcc31513cdee7d587cb0ce890f952a69e932a390648025e66412435d1cb0795b84c6cb27b5537e4e903493470d304906a6211b578f4665a3d2
TLSH
T1D34156F343F1966D9B1695F0EA18AE1BCF580121932C386AC9D4BF1793E3462E106B1B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 4fc5cea924ca3ac4e0d650715dff502495ed0bd852d40bfa9a91365e35b23a7c
MD5 84c6d0f3f8ea18527e920692a0461e10
SHA1 04d4cf89d6a2a4c2723d30de0531ecdb45506c55
SHA512 51f63d947366a8742265c6da93fa38a50b43e48272f8f2bb2dfc098ce9cd2c54e414e9432e8e4cc113b3fa78f5fa6f405f0ddee24a16d4bcef744887fd9be15c
SSDEEP 96:DsO0nLcxi79zBWIMiWI9LwBj6Jk4B8GKBAOSqfnu1:DnGAxi791WIMiWI9Lkj6Jk4B8GaAOSqS
TLSH
T1D4B1ACF383E4866D9A1255F0AA18AE1BDF5C0524831C3C7A89D4FF0793E3472E206A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 45cdba79c69e8de1e87928d2be3b4ed2823b957f9c0a8f0708d6564617781113
MD5 142259e60efac63c685b6e0350b34638
SHA1 86141a2b38c1d6db75e36e981fa15f51b3025130
SHA512 bea4852de04a8668a252c028fafb0d81032edf67897ef428d6a6ad632cb6dd7204f55ba0d95fe4240fd36d5c788fc62ccfa8a219c82643d4293f75027c2d9878
TLSH
T191D02313155470B5D57C3D9D545AFC4FC72710341901DDD4A0D4595805358ED471F245
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5fda4c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5fda4c.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 30f9af1c762cd657e34c00c3bad2e0c88221fcb5e83d1dea6b1cec5f266493ea
MD5 abc8278fbb56d6ea7b9b1260aceed286
SHA1 db522f9c3d8969600aa341fe4e36081970344667
SHA512 5baa44815b1806627d6e32b8f1fae25fc574418146b8b1d1ba6aa7e97b7272f6b85e77ee9a9bc890eee5b22a64e402dc3aa742e08f4c9474e673149111058058
SSDEEP 192:sxZzRuyM/jK1Ml8Mkt/fksSxvHYIdpJHW6+WNGYzceM+8IgrJ:sxZzgMt/fksSFJJHbGnz9
TLSH
T12442E8126A349977CCDBD209FA55BF53D6F90472E2940E44A9FCCA0C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 fda60ff73b4298e801b0456f0bdc0f12e3335429db6ad8f2cd517904bf7689d4
MD5 0ce5127ee7b7dba92ca54c022e129c42
SHA1 9e81a028082b56469b90b3a6075a9bf6e32a353f
SHA512 65fc31d3e2dbde4a28ad0f9250dbcf669763ecb45e39ae9dabde92b9061d96f94e4d1ded4da3cf23011f0f69eecfc93fd73051e0063fb33551293d27153612d1
SSDEEP 384:sxZsnA2nq4t/fks/866s8qMpRiYnazAW8pZS15posJWeT+0Pq36sHbgn2H9GhoIb:s+A2q4t/fn84Mnc7WeT+kqzHbNGGIb
TLSH
T1EAF209429520C8779AD39D18B83D7E33EAAC14529785CEC95AECCE0C01DE6FD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 35KB
SHA256 dd8ae99b995cfc260939bf8c8a31ed6db071d22c4ac5105da4e0df98acce0c1c
MD5 b9fdbfb383ab73f4b25ff0791d64480d
SHA1 f6daec9d0cc9481cae5966b4ea1b9e30bf9b6ece
SHA512 1548ab6135557157c6483dad593c30f727b268898b5f171e21616a0ffd180b78b09b2fe05b6b2d30a69434e82d9a07c0acaadf100473fb03ab784e0e07f011b3
SSDEEP 384:sxZsnAFaq4t/fks/866s8qMpRiYnazAW8pZS15posJWeT+0PBG8BTHbLn2SH9fhJ:s+AFl4t/fn84Mnc7WeT+kBGYHbHfGIb
TLSH
T193F219425520C8779AD38D18B83D7E33EAAC14529785CED95AECCE0C01DE6FD6B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 38KB
SHA256 13d8febf459cf1b8fc75738edfed58d1a6a2160835b6fc6dd9797c9301f0fafb
MD5 071a17093c106b529649b86eab5c8f84
SHA1 e47d0a9e5be8c05226f5790815c55ee94a4c2851
SHA512 33283fc6e8cf0e14c8324764881c26740d92ac0c88ed5d4fa376cc95b95460b9a57d65477b99e00ff048421634330724fd786db4a3e62ff3f98f13fe7c2396a6
SSDEEP 768:s+A0lpm4t/fn84Mnc7WeT+kbG0Hbm47IXqI8:Plpm4ltMmWybGAmeQqd
TLSH
T1BA0309425520C8B78AD38D18B83DBE33EAAC14529A85CEDD5AECCA0C01DE5FD7B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 40KB
SHA256 51521e746ef9044d145fcce96cd6704303fcc84ac08c9da7eef6466229f0c3a1
MD5 7051ac728b98050440097e207abd2c08
SHA1 a11233ed964f1ed504fb43fa05f4bbbbc7e95164
SHA512 0293e80cfe5dbf50c2b3c7f9d4001757ebfa203c14ef180e02baca2ee22519d6b80d6dcccf6ece9f210ce1e637ec1d1e27261b9a0388076e299053d6b0db95d0
SSDEEP 768:sZBA9lpm4t/fn84Mnc7WeT+kUGVHbFe7IXqI8:9lpm4ltMmWyUGJF8Qqd
TLSH
T1710309435520C8B78AD38D28B83DBE37D6AC14529AC5CED95AECCE0C01DE6BD7B07856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e9ede43a474f4782bf0ddc81670535226f8ea6a6178c29771a55c286793f8012
MD5 702d8a7101821be275b1afacd62ab061
SHA1 aafff43af574de712c25b8ac939836e15c8176f2
SHA512 46f34df4042b9259ec9e58be6be57b4a35258ac418c8fa4130e8bb495d77f8941543637a1f9483edd9122a349e4343afaa7851d20fcc0679dcbae36303ac2d30
SSDEEP 192:sxZvRuyM/jK1Ml8Mkt/fks/xo4YIdpLcp4HW6+WNqLc/YzYKM+8Ig5IJ:sxZvQMt/fks/22XHbT/7zi
TLSH
T1E052D8526A3459B79CDBD218FA51BB53E6F50472E2940E44AAFCCB0C01E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 28a14a556dc5e88ae4657736cd95728e26cc0f184cc64f32d4227d88985fe598
MD5 b176941ee3f5dbe1ae1c04af6fe88650
SHA1 ed11fc7dad63cc79aa48e5d5cdad49e4494df2e0
SHA512 2c30190d623c2f9b6c1065b86675b7dcc737d65d20ebe347813f0c0a86b7ae70561a096af602103ea17972a2899fbbc0e9db99681d656c78acc735de2a094078
SSDEEP 192:sxZvRuyMqZjK1Ml8UQe9t/fks/xoFY3YIdpJFunmMtyyHW6+WNFuCAQ9YzkFM+Si:sxZvnq4t/fks/2GZcHbH9Ahi
TLSH
T12662B653663459B78DDAD219FA45BB53E6F51422E3944E44AAFCCB0C02E7BEC220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c1515b132aa6438d40da5306fd8aa4d4012bcb3867af9d826ce0add7c109b94e
MD5 dcb5c982ca8c6c4574a6cec773dbe80b
SHA1 4d6a315012aaea0b1ddbca2e8b379b8874656a60
SHA512 be9a2be61c2eee3f9dcad3f94157908dfb418b374dfd426d21fcc8e45e0fcbd1868fd14ea29cbc130ff849223a98cb39f63bac88f3aa0549a055d7ff10b0fe39
SSDEEP 192:sxZvRuyM/jK1Ml8UQekt/fks/xoFWYIdpJcyvHW6+WNqRaHYz1FM+8Ig5IJ:sxZvQq1t/fks/2+THb7HZzi
TLSH
T17A62C7526A345977CCDBD218FA51BB53E6F51472A3940E44AAFC8B0C01E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 57a010046d063f791cddcd5d7c90433f67415a25a0acedc12cc1cb1b7be2b485
MD5 6aa9121136938a5633712ed4fdaa26c2
SHA1 ed3b7f0a80f131f28be000c272aecf7cc68a506e
SHA512 365c3f0562646645d09e1bf8c6945b76e2b68298983927ce4a6bf08f811f970bb0e4380362084f9bf7ae3d32b06c8c3f5ea6606eabe40182bc42d0ae55094417
SSDEEP 192:sxZvRuyM/jK1Ml8UQe9t/fks/xoF4YIdpJcsyHW6+WNq4GdYzsFM+8Ig5IJ:sxZvQq4t/fks/2oYHbIdwzi
TLSH
T14A62C7526A3459778CDBD21DFA45BB53E6F50472A3940E44AAFC8B0C02E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 559178bce5f56dd0f59e70b91c8a9449f028cde81d50c0c9e3b7cbc0899e9e0a
MD5 618e08d5183ab473b63262cbb4cb3e1c
SHA1 a75e5fe3e8e13994a07618669d2e09acd10b4b05
SHA512 aa133f55a8017c576f6e8d2ae6b1c90e58531956da397c31d9bb50f1de795643c094aebfe493b713d28ba6fe17926fcea6eba4544ba772f639a3f0c9b6962fe8
SSDEEP 768:Ge8W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjeCroIliTYx:Ge8W7kf0Wvqidau1jaa5LA3jeZmx
TLSH
T1A9D2FB3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 1KB
SHA256 f04f373e44262da8da699fcf9af9fd3439efe71c967c80a42fb69d8331743750
MD5 5439795d9f11dc12fa3bb95296438d36
SHA1 1317d995278cf6b5258567066cf604ec573d8fd9
SHA512 a3c64996b7f0f0cb8d62a61c1805e0b75fd925439352fc5130f77fb2ccc89c87b091152bca9cfe548929b685c4b1f82d854b9b0f358caf4667c9ff223df5d8da
TLSH
T1302161484EE08A2FEAA840B315B7A4E07370D8DD4321B3A35C3C36302E13749394B1CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 8700f79b967a1a4a9906e7d147d21b25c62dcfdfe3703c3e2d36c35f429be3a7
MD5 04c71d10351f9602f5776d9282b02d2a
SHA1 47edf782b87f06c7e92cbfe52e088ec5eae958b7
SHA512 1964cb357be3fa2ecc520a6bab09b46c54dd4e546e3c93a4715b9f5184d48c3effac632645cd12272c0ecfc97c652516842ec5ebb8a18bc19f0aed8042bd64d8
TLSH
T18151DA8DCD492B8BCC6C11B3A8BA14C5337668DC4B844F075DECA538BCC733D186565A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d4eaf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe5d4eaf.TMP
Size 1KB
SHA256 fd6443f26b9feebc3d5134c1ca486a055352fa573ea2e1b36d086a498e3117aa
MD5 cf45b5e0786d4929b3c114beaaf2da1e
SHA1 33154e7fc4c702fb4862e8d37cd6d00f39899a4b
SHA512 65ca95324c9521e77ca243d7e6f00dd2e96b0ffc2432518e60c137173108a83e874213751a29383300a4fb6cbdd5d9731992e20b3febff940c2a665c2d04bc76
TLSH
T14F21449586E18E0BF984517B1A53B4F8B3308C009322B7D3697C26798D35B8E1A4B0C9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7d714929-66b5-4908-a50a-1dd8c076e5b1\index-dir\the-real-index
Size 72B
SHA256 87bd129e369fb4dd9c2c36430bb305ed55a42bdaa9f2fc80f1377020aab757a9
MD5 173ba1d35c006e0e3bad625d7c6ba2c5
SHA1 25b5ec5d0681a25eb5c8c28b8c70b23b6e3e0c88
SHA512 0055d640a6191ec5b3a4ee6b04c05a33b135ae0b06ae6c938271dc4b3cb38b0ee0de8e8290cc63c5295ca5ce8e0b4d0da1b04e3809edb31fea8dcbbd3366cb7b
TLSH
T1FBA0025C6544B602F4182B7130914251266448A5B501C27641D451C6CCD175885033C9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e0db9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7d714929-66b5-4908-a50a-1dd8c076e5b1\index-dir\the-real-index~RFe5e0db9.TMP
Size 48B
SHA256 182848bcdc1ea1e21bc8f2b6d3746d95ebcf102990e453db5128bf38395fbb2b
MD5 74c28bfa433145631223a32c3f58f84a
SHA1 fcf6fa4352bbb73ae85ae6bcc0243e903b37a259
SHA512 cdec03b38834a3a5fb6283e3d4e09b319b5bb6235e55a83b6f812c67b6347ccb1d6d0d61ea0b5883e2e8810ee6909064474253acf3d923067e7ee0fddeb84969
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d841de8d-c56b-44d4-bb04-c5df20c573ba\index-dir\the-real-index
Size 72B
SHA256 cb68e430e7c31fc90c291b192f6c9db0ee59d455192e6dc88a4ae2d4c11db6fe
MD5 59d312ac04fbd8ec78f11c07d713ea11
SHA1 9222f59149ee923d0ade0719692ddd3b10cf39d3
SHA512 eecd6ce7f1acaaa7c09dbcef05d371c7e5c11cc781f604fdef877822a14b39788f9678e854e75b178c4665f253321169fe7ada82f8a5bd8cddb30fe92d7710cd
TLSH
T13CA0023012D41483C00906B051C601B523555C25E301971580909656896917C4A131F4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 410fbb674c477f4ec58f2fa14d585395ef1b2bc48f9ad946305d9cb8af026783
MD5 ab4df19fb7b7057d496207c9e480e998
SHA1 cff85ab9c9b49222f228c3bcf42830cf584d7ef3
SHA512 5f2cd897a6e71c43c8471bb151ce09265573a4c7b2fac6ff50729e1a88cc31a0ef5b237667b75eddedfa448c5c1655a9346ce112b17938153c056f6f9a05bad7
TLSH
T12BA002184BC49209D64652B02696C95532A08F704389136D71E40044C8645C94A4904D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 281a525793c47226d7c459a02406d886b47cd69699891553bf6505335d04cc8c
MD5 0cfafaec5c7588488e65744ab2ad6136
SHA1 0911e1de048a2af45eeaa25aec6394f8f63ce01b
SHA512 3a55fd763b8b7592cbbde383516181279273facdc05e78bbbabfea5c713f88306f179d79d509122b0c786c537dc0c63014fa202059a1308952b68c1cd313e20d
TLSH
T151A002309F800045D81212B2255747991301D8D46500171780D30054DC544544F8245D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 4a3b364d4e4f8853afbdd16f28aa96f1fece146953b05a32662f851f2c65c2a9
MD5 fe3e21a4f9db175133246ac0dc378f9a
SHA1 3f84a07d74fca242f5c7313335720ccfc45c0247
SHA512 064610305a81dad00bd50a1d0f13e05c7c36e6412751cd80a7924f2453fa556491bf1c2daa61de0a0b32ab08f9df98d194b72b75f0c963eb0a052571922defdc
TLSH
T13EF0E2B73EFB1C14B96F87D6247266A082853C58C501FC0E2526B29BA0F2725244EC71
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 c355d5d4a754661f1fce4cfabaeef9ace95b3bd29adf49271da543a681ebc7df
MD5 75720eae55a25c40521971060272fd3c
SHA1 a4cf76d840e7fa24cdff9d326b0c2f72e09b7989
SHA512 2a059d512bee698471dc710a4e0f27a235ae1b0425369581204e30a9a02afe19012b3fd7c65f022c0eda358dc932c3d4409c307a0c0de82606ef71583ec73099
TLSH
T107F0E2B77EFB1824B96FD7D5247265B082853858C510FC0E2526B29B60F2725284AC71
MD5 SHA1 SHA512 TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 165KB
SHA256 02cfc473ad91cd419f365b2909dd1dc5deaf45609b9767267fb2a35e5dd92057
MD5 0ae3c3b5e972e64551100a31314225dd
SHA1 efb864d14c2ac46f5f47baf34a41c65b57bdd90c
SHA512 69773536968515a870de4807dea8d8488be83ba9f75f31a215edaa5dc008b3c7f0f6ab56e764c08f2689791285a3ebf14c980ddc4f29e013821014ccf31cde3a
SSDEEP 3072:V2egbeWM9sRxPCa1WgAfbYEuU+TcuFCQi1KULC1DsQ:VcbeWjWbcdTj0aFiQ
TLSH
T1EFF34457D1F899636F6B4443E8857E82B32C3047E619DAE1F987BFE0101EA2A70F5835
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
Size 217KB
SHA256 f66f6c0afc05cadae1de748c42c359919008b291e80aadb21c28e6f29812d5a5
MD5 4fb7d474b392219067d5d9a902cf6408
SHA1 e1b428a0921faeeab0f852a2c73a45371c7e1eaf
SHA512 c73d702920609c246d91fd52fc5862a0d8e324da562640b652afc406576e36964b8258ef8ac883ef27c1987e1d3e0f6284e9a6feaa164be14505fbc261cbee09
SSDEEP 6144:YaNsdLrIy8v4vLe+G3enapWFBcjZmni9Hi:capCBc6x
TLSH
T12A24199A632617BFDF3943B95007BE1153210140EAE3C1C6334A579A242EAD776BEE3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 ae3fa34f2c568aeed4e091268fbb23ef43c826db4490271924d0ce1a48639cbd
MD5 95ab62fa3ceab9e31d9fa9aac4b34b57
SHA1 e17ace6f67314fd3110d92f001312151f8eeb586
SHA512 1a2603bd541a55bf34fe65eae3fe74c83be89ee2639e3b39a97299b3e5269bb61fd1df31d83c97c0e8cb191e6e77318f27c1b8d738af4359b1f9ea2d642c5f0c
TLSH
T143B022A3C88BA032C00803BEA0C083E8B0B0CCA8C30E33EA00E808B8C03E2C00803200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 6c2aacc5bafbdf2086605d6a4a04299f9c294a0684095095f1a6a5aba4d1a384
MD5 b5c8797caff48b8d45d0d0c20c9057dc
SHA1 f724423e77c1862607d82033d636e482c40730ae
SHA512 a0b5e5c3b9ccb08c1f2b54419e3e5b83d7c3fe13338586de4968e9060cbdd659d82da63f7020f17c4a33078796fa490d878a656c65ea0941f14bcc74b2c384f1
TLSH
T1CFA002E2C6569A4EE1055271B0530998A210DD504619231393AC0058A97F5914522568
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dcd65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5dcd65.TMP
Size 48B
SHA256 1ca7ff340877aae8f35c41e518b4d901b967a45b940eb6eafe12dd8f36bfaf18
MD5 fdcd21ae354ee12012f0e18affa92626
SHA1 224a1a8a688acc12df4e1a7464a686e74c343dfb
SHA512 e9f64c1e38226c99f547b2e92007cbf7befcd10a2bab72aee48b7c40e23062092521f0cbaa9f46076985f24de1218a9f9f70995ac08d2360ab9da08934a42fe2
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f9c0fdff398c3e80f2e8e2aeb754d6770f3170a0fb24831068816e8aefb2d710
MD5 1c5ae7991b63fd3f149cedb82e139f8b
SHA1 a60fe3bb378b347caf6bb606f633927db221fc8d
SHA512 a61603e316c9c898633b65aee30bc579d51864c9945919605f63809379db29a203d02120efd72e6b0a8e0d64089b67beb232673ae24fbb07cbb0238a7b4f4a4a
SSDEEP 96:KIbCKcjNmKeQqCIwKJu/zc5t7xxNWlqggVNK4sg8:s6prGzc5t7xxolqxVHsg8
TLSH
T132917742703B465138BF2988929AC5368E8236633518E87F7BB855721F67E224DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 d653aac152b67d59b799211b03be048cc880fe4cb332048190f990d538bac1ab
MD5 9d5c3320ab0de62f34ec3faadacae4e7
SHA1 96a4538c4375c58088d9ef14d73ecdf6050c23f8
SHA512 b8aee564221500c3d7bcfd7ae19424db4a4d414326b471e9dcdbcc83dc6a8d63797f92a4e701c2a2e9e5d34b68aee7bf98431d60908419353bfc4632181469a5
SSDEEP 192:P+xxHKwV7fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxIUfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T15F24730A7B747001EDE6D9725CB080771E3CB1ADCF22A6915DB254698DF2853A23D8EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594cce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594cce.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 4cd14b4457e4889f59fe5fbee7b312ab601b27cddf225e502d9293d023eabeea
MD5 71e77eb98cfb04cf2f3387b95fb28e14
SHA1 cc0344dfd89c2fa850368929e6232788548bc7cd
SHA512 40eecace555cdfeb74aec97e12d1dae9e2a4ec752e21c20bd366535e8a4c598f6e994abe0bd76012a771333971331feed456cd2e472438497118548c2091f44e
SSDEEP 384:gaiFZtNn/s3n9SOCsN38TUNTUlIRhTvSb1VKKGdpqZiOObjI9G6w7V:gRFZj+9s+wgq3K56i29MV
TLSH
T188D23AF258D7893AD95E8747B77E2D068EBCC16BB6805A44B3D85A0CCE971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 99ddaabcbdf8351d533714c800c2b32420ab2515896502a4aa109d5271ba44d9
MD5 96be09297815ec2c5a5f572707261c78
SHA1 0fd4a798f2ba8dfc1fcd96a2a576c1fd3d9a064a
SHA512 183bdfe78bef41e5beda1fe3805b817dd4d06d5428b6c6ba0cba9c3116cfc259224a94a0cf105df38996854c1d66a88fdbc51bd155a3233e9987003fd04d7ca9
SSDEEP 384:gaiF1tNn/s3n9SOzsNN8TUNTUlIltKSba+KmGdpqyiOObjI9G6w7V:gRF1j+9Zowg5LKdfi29MV
TLSH
T1A9C23AF258D7893AD95E8747B77E2E064EBCC16BB6805A44B3C89A0CCD971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a36f8b676cd209f536f776b0df2dea42b6be9237f500f4f0939cab97c285486a
MD5 3b1a08db984d4bdf469a1041a9732bb3
SHA1 889fb77b91224e4d9f7f0f98edff0f20d8dee3e9
SHA512 bc5c8685667ec486d4d8dd08e5644a64941607b7e3f04740e428e4697aaf519e09546ef207b349feae309fc16f2ba0ff740e07e5992396b9cf5e2c5a4c4d2264
SSDEEP 384:gaiFKtNn/s3n9SOCsN38TUNTUlIRhTvSbWfKKGdpqOiOObjI9G6w7V:gRFKj+9s+wgqWK5di29MV
TLSH
T140D23AF258D7893AD95E8747F77E2D068EBCC167B5805A44B3D85A0CCD971BFC206805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 36f58a15aa7173250d688e0c155243a1607c92054214032ee3a9fa8988810319
MD5 bff265f89f96e9f5a6813d099e3c1635
SHA1 b36fe45ac183574354a57ae75167fe8d68ad405a
SHA512 e83305e3f28bd2ca2f3ecca39c5dcb7990eb90854de38eb4eda46db54f1416a4ae3d2a9788e0dd4e9f61ffaf05ee7a0fb9b65fd0351b1cb71e85ddb8748887b3
SSDEEP 192:MON064BAQmiUyO1xW5GBPKT++FdGsfaDrouU6:MON06eA9zW1dpcEuU6
TLSH
T10902FA35AC796C7B9EB3AE45F48737175FE8113BE5C51B44EAE85B0C019764C234382A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8cccdc34f894deccfc4b9e7b19482fd8e67bcc1ae336a251bed06c862559b7fe
MD5 9a0b7ae9032e750f73c5370865cefd29
SHA1 4d8a5eb57fb61437e721fcfd3cc586b1fd06691a
SHA512 2aa09da9d28563197f1a473a96256682cc2cf59443a1a5d95aa64e0f1e866d27c4cb42df70088378f86a217084e836e9c8ad1290772567b54c938a5cf2f4e264
SSDEEP 192:uVfLsNMU3QzcBbFwQmiU1rKK54aGBPKT++FdGsr2PNFdNiqCU8:6zsNMU3KSbakKmGdpqpiU8
TLSH
T150321B366C75AC6B5EA3A144F44736039FA4413BE7C46F54E6EC9B0C02DF69C631B41A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 34f9d8c0bef593939475b11da871e104cb3675f3c33381d021059371cf9e09ad
MD5 5db71ca253892393183dcd2ef887f76c
SHA1 17a9208326e2bc1c2dcbf62380b04b2682e8593f
SHA512 23f61750cdf4e2d7ef83f9ff75e9832c4d07378bd6be8c89b2971545c3a93365cfc710efd95c4362b625bc1296048a5d012859ab1f5faec0cc55e68161e83c8f
SSDEEP 384:YbtNn/s3n9SfsNMUtKSbakKmGdpqpiOObjI9G6w7V:Ybj+9U8VKdSi29MV
TLSH
T17D928E366C665E6B5E939145F1873A075FF8417FA7C41F48E6ECAF0C02DB6AC531280A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6a869edb1e688e3c2daa5d10b6052cb6f0f75cdce2aeea152a825d74cdab278d
MD5 cc83b7ef4c8fc9817e0c76a51c335a6c
SHA1 eedee096787213c3f8497dcaab5472793ee84012
SHA512 310f1e3a2c0caffdf3e81b319056653657bcae6edaf415e93b8ff85795f793a6ca411b0c2ca00b9b37cc947b242d4421eec269d2b8dde80ff775215e631bf6ba
SSDEEP 384:gaiFztNn/s3n9SODsN38TUNTUlIRhTvSbH5KWGdpq2iOObjI9G6w7V:gRFzj+9F+wgqlKtVi29MV
TLSH
T1FFD23AF258D7893AD95E8747B77E2D068EBCC16BB6805A44B3D89A0CCD971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7f3bdc08819d0f0a232e7e984bff07aa6c29e969bb9d54dac1db1955f6775df6
MD5 cbad32cbfc5cc4c3ea6f60d1c3f82c0b
SHA1 6c8ee7171dccdd1e31ab7956bbb053bf683a89a3
SHA512 3efbbaede48fd0b593a51790713a5e40d90aa99ab762b8ee095aa34c18421eb30f5b2acb85f1ca8f3f3196222a3baa57051ba334fd039b729920031f5f362967
SSDEEP 384:gaiFBtNn/s3n9SOwsN38TUNTUlIRhTvSbJ5KWGdpqKiOObjI9G6w7V:gRFBj+9S+wgq7Kt5i29MV
TLSH
T127D23AF258D7893AD95E8747B37E2D068EBCC16BB6805A44B3D85A0CCD971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 34b86a17395ebfa94bc6802caced4aae592a8500bafea201ad491a745ea0243d
MD5 aee560c77d83c54d3f3825916d291b8a
SHA1 182b4b7924d5c004d8b50cdaecba5c7ac5dcf955
SHA512 1e5647af0ba3fd0498de3a19e3fa44a3af3cf4c322728d4afcf0216b9786ae3c87cd0e6bcce1204fb627eb2ae394d0fddbaaaeab4054a8cfc4e69d3e6e09fed1
SSDEEP 384:gaiF0tNn/s3n9SOCsN38TUNTUlIRhTvSb55KWGdpqeiOObjI9G6w7V:gRF0j+9w+wgqjKtNi29MV
TLSH
T12FD23AF258D7893AD95E8747B77E2E068EBCC16BB6805A44B3D85A0CCD971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c29ff887980d81aee9d62ef3949e2bcaae240cb436e1a1cb0d00a542a3f8b142
MD5 4719be4bf8588421b2255f19f8f6e941
SHA1 2d296aa6ae3d28b6ab1e70f95aae4894c8b1bb7d
SHA512 93cbec612b6282fbeb17bd6d61c1d58d74d177585fa62aaf1c6592756df47bf64bd11faf0b04c94f06ffd937c53592347744ce925b1afdbcc6953f8eeb805dbe
SSDEEP 192:uON+64BBQmiUyIxy5GBPKT++FdGsr2PN4WwiqCU6:uON+6efvy1dpqeiU6
TLSH
T15E120B369C656C6B6EA2B141F48736035EE84137FBC56F44E6DC6B1C02EF69C230781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 990553df73f75ca1a5db2af2743938ca5ba2c8d67cbe0065b8d92389da5b46f9
MD5 4f9546f61084174d9338e282e310233d
SHA1 5bc46b877a8c0604ead0a6b0bcd37596c24e55da
SHA512 ae7152a54bd40efb6af2391c5c243de6eb4c6726a5ee9458f9a2818c396510339748f0a90bb8897b2792a114ab4d26f07388cd2aff95724b3b76894a57b86c5f
SSDEEP 384:gaiFItNn/s3n9SOSsN38TUNTUlIRhTvSbJ5KWGdpqAiOObjI9G6w7V:gRFIj+94+wgqLKtji29MV
TLSH
T106D23AF258D7893AD95E8747B77E2D068EBCC16BB6805A44B3D85A0CCD971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 93eec9c42b4ca1ef37ff9af6a39578f3842916ed0ff4f240747e1d6e90ed2ab2
MD5 a6569bf8c1025d2d528eba060c07ce30
SHA1 5bcc404fc832e96d628f17cd4cd6fe94819a8e7d
SHA512 764e8f2507648328947abb99df92ada3f21c8118ce58e423b41262e74e2e1cefbda7db99cbb7064b635a79186d88f8ab06f28d2b1ee6e4e6a9df72c98fb7f8ea
SSDEEP 384:gaiF6tNn/s3n9SOWsN38TUNTUlIRhTvSbC5KWGdpqyiOObjI9G6w7V:gRF6j+9o+wgqQKthi29MV
TLSH
T1E2D23AF258D7893AD95E8747F37E2E069EBCC16BB6805A44B3D85A0CCD971BFC206805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c6ed32bc78aa1c94ce654705bedc3f9fcae4c012cd2abbb349c285f3ce4d96e6
MD5 fb2d242dc7aed9195b3b446e4ec653b0
SHA1 7abd0aebcf6193006e78b7813c70b15f3ab6e19a
SHA512 e3005e54006849a690218265cbd4cc606c5a80f37df840542b74eef3da9e54d4836b61801f79dfcaaa47be39452e4a34a33163c048e5ceebabaaccc55a84d043
SSDEEP 384:gaiFQtNn/s3n9SOVsN38TUNTUlIRhTvSbc5KWGdpqbiOObjI9G6w7V:gRFQj+9b+wgqWKtgi29MV
TLSH
T187D23AF258D7893AD95E8747F37E2E068EBCC16BB6805A44B3D85A0CCD971BFC206805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 660b7fa11b570e89acc27c79412554f3e12a9465e4c5cb9fc8e84942af4a1017
MD5 938832651f67049e3e027f45be9886c5
SHA1 0c13f948c9836cd0bd7592edecd98b26d14ca0df
SHA512 53ea75a28ec95c99777192ded1d8974b5c03af91952ad1ef0df6bb5cd06c2ec52b39712dfefd2cc2129f3d1837e9c97c45f39a7022d7b3922612e64d0f6a08e8
SSDEEP 384:gaiFrtNn/s3n9SOrsN38TUNTUlIRhTvSbWYKWGdpqOiOObjI9G6w7V:gRFrj+91+wgqBKtdi29MV
TLSH
T173D23AF258D7893AD96E8747F77E2D068EBCC16BB6805A44B3D85A0CCD971BFC206805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9e42c7244c4feddc563ce1af7bfac637f260947297b0244895842488bca4475e
MD5 b55e7bb28152f7bedb9ba5afbbd10368
SHA1 b69b53dca28abed3ce4702fdfddce9433a91adda
SHA512 52df51b0815b563ecabb059c33bdb8c4e38719fbd129e129373679a6fd278acfe5d865edc4676b7fc9bf862e3f2137637e1e272ca82a5d142cefdf4b3305f695
SSDEEP 384:gaiF2tNn/s3n9SOSsN38TUNTUlIRhTvSbFFKWGdpq6iOObjI9G6w7V:gRF2j+94+wgq7Ktli29MV
TLSH
T11DD23AF258D7893AD95E8747B77E2D068EBCC16BB6805A44B3D85A0CCD971BFC306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 32831f4e9513a619b848f54768b6668e6a6cb81a0d6de109d99211d2925e08f3
MD5 e75b79e64254f0dd0d355cdf6d0ad012
SHA1 25db73720febf135ac0109451575ccbc57a9a731
SHA512 53bdd0469a177e959bb22745f0665fb4a8bc7ff2d860106de1ea679cba050dd09a316809695c7ad0f32817e5c74b3bd863c445dab1728b2e0c784a8bf04a0d88
SSDEEP 384:gaiF2tNn/s3n9SOOsN38TUNTUlIRhTvSbiPKWGdpqziOObjI9G6w7V:gRF2j+9c+wgqeKtoi29MV
TLSH
T1AED23AF258D7893AD95E8747F77E2D068EBCC16BB6805A44B3D89A0CCD971BFC206805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cfb43f7695afd32d9d5e623fd458847b446a65960ac1bc4b97772df80990742c
MD5 4a3275617f7cec7b15b2b06f5ab1fc87
SHA1 9cd9f617f80c935ac764cfbcc58ab42ddeecbc68
SHA512 6892b3e6172c0c017c4c25ea58e2db10e5197c3a7af4028c230dda6fc54ee2c3490b04a9b47bd203e0e2e4e5ed1c9111ad43f58c0a802b2a247f2a990cbd0e44
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 35d2fb72ad35e33361b96e059044a2f3fbebcac1a3408601c7ed50c13b679008
MD5 355581273d15f9008e98547aed6ae7dd
SHA1 ea7b8a3ecbd6b127546136f2c23dc16399d5e0d9
SHA512 aa348034966e30e80359296b1b556310231aeff04ed839e73e04b1723d4fcd0afd2e91b64af9175ea075e912a52fe9bf11108e5d8f5f4adc237811c6d49dca24
TLSH
T1CBE0EA63EB1456BFC0BD033014D70B752BA7A07496B4472A0E2100997CA33142F24ED4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5c216291c3a4d99324f3d2e2ed00df09c0a51d80bffd4eb9588d307e12444924
MD5 0c18ef221733c1118092461ed905517c
SHA1 2f322a41d4bcd43a14eb422a8cce5334a390f024
SHA512 4d99c4583c02cfa08c409b1d2ebb04ff21609913ff185685ea6e09af1d4e333d7224771ee70bf58e14ecce8a20dfe5f42e62b4282747cfe0d558916e812dd03c
TLSH
T107E00913E75190EBC0A8073128DB16682BF2A0708366072A5E052578BD933152E14AC8
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d5538cf18e55580b4d33ed898f1375d684ddfccdf122c5c6f9632611a9748156
MD5 d8ac779bf5da6637db5b38cb04fb8d6f
SHA1 c8cd7a7b69079cf59023744fec67eae6cc24af79
SHA512 eff2b8198aab6f4a116802e68b6f30751fd52aee2effa938899e7b945b051acb82630b644b50bdb42d8749f75278fe5e5b0b87b67e0f767cdf1386f978505e2d
TLSH
T1FEE00113E71010DFC0B80730289B17742BF2C070836303264E011178BD933152F14AD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c1f3ed3321108c875898136a090e2239277944e5636e3e0a52fae76ba1677e89
MD5 82d0c0d8bd1c95edf06bbda653a6af49
SHA1 73c7c08f1cd400afc64b63bdef15ca20e9a7748d
SHA512 c8122dc72c0a58429cba43329856591cd492be5909ba4a9f9e5615c88ce765b94911bca8379b9a696a7cda348b38791d98bb49fffc38fe9b724fac3849099173
TLSH
T1BCE09213DB0081FBC0BC033014DB07246BB3A07083A203370E011028B8E33242E20AC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 19e61ffc9cbdc800a6f77c0c55e70e9edc3a0075f4acb54452c38ba7ecb50cfd
MD5 d150a6c08bdedbba0e0fb16bf5e270c7
SHA1 1f6a406cf5c82c152feceaafb8e96d08ba689a0b
SHA512 4ac2716626fbed6acbc7e9945c326f213d44a9e43ba646776a3c7f1a60d013f438350a57fa457459beced337189f012abe8db8ae2d56e5e3e0108cbc3db0891f
TLSH
T11EE04C13DB1451FFC0BC033114D7077567A7A07092A143360E1100557C933142F24EC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6ae19749d5a5c12c6021067575c646ddb80aa20da248134360c328edc4eabf0d
MD5 0301e26d46a4fcfe7e3b38d8169c9935
SHA1 d0fa8ddbb2319efbb6edda6820c52fcaf6cc8073
SHA512 24389a1df0a01414a8145bff307b1140e2202d6ab02b02d135f5c1c089d4aed604b20d4a78f32aed75eb18584bc3d68ac1659c647e0116eaeeb735bbbdd58555
TLSH
T19FE00213EB1451FFC0BC033114D70B752BA7A07097A543360E1110257CA33142F24AC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1255b990214462c13f4cdd68a56a6a936a5c7375cacb2c58f103ab7e44affc90
MD5 7511925a6aaf1d60e1bff914ad9d7302
SHA1 bbe6949d035ea396d4f02fb4189c0a9868e60b40
SHA512 b22f7ff646b65483c440b15fcd86033f20ec8fd1134fcd32c18b9f56e030bfd5977c575b6522646c591410c8745ba4ea5ae9e728d34b8a1100b8f8865f1decf1
TLSH
T143E0EA63EB1456BBC0BC033114D74B652BA7A07497A5472A0E2110697CA23142E24AD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 302b8f9705e607005c874788333c087f7c45d29200b8aa65c1d1a7937fe95178
MD5 002f0a6868004fa10b83558b3e891c88
SHA1 2e90bf640d5fb9773623c8ffe046135396806178
SHA512 8ae232d507e966b61d49567331496e0d4023b1008eb91391f08a856b764503be01a9b39da6517c0ffc3218350d3151196617e5959565441dbf03ac9e38a4a0ce
TLSH
T1A7E0C923D714127FC0BC033001D71B6577E3607096610A270E11109178623142F24E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8a113797127fb331a9b19f42c81a3304806a316e63e80c8b250635e7f2ea84e6
MD5 717c7370c6ce247b1e85f91eff8144d4
SHA1 3a8464fd9b346e05af53093c1f6f4167b458671e
SHA512 8cf3a5b11c163eadee98220ff52d38e9e28b6fb81bbba97fe2676ce7ec05427162b09bd87f56e39913fa1e57d2bd549ce02e46fe97c80dda57f1cd84b2c36521
TLSH
T1FFE0C963D714127FC0BC033501C75B617BE36074A7750A264F2110A578623142F24E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 54aaf021c9af730165a116e6f7cd8881df2aae88083ab8768a705623322a94d6
MD5 3470be5765c7b375de76d37899634be0
SHA1 968d85a90874a2819e8ac8741c7208a1d6401519
SHA512 6f57c5f69fddcadcfab4e1cae1d4fdc3901a17024a340179939e93f31b7d6f4d02d354678eeead0359f52197d3e79ef90b0c58365405940b7d324d02579bd0b0
TLSH
T107E0C953D71416BFC0BC073801C75B617BF6A075A7B60A274F2511A679623242E34FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c97974155ed6c233f46e67db07f2af9729cd7700d83cff0986daf01d9189ca75
MD5 26ef225da405621212502b2b46b964d9
SHA1 1edc1b230d80ca3c963af589916d8727c688ee8d
SHA512 7efe6d5974febea506c5e90a9fc3daa764602a9ef3f1e9a608c6af98507da3411b575ca0fb2ff12975e7b477d8bdce2928a63016df7cf56465e9f665bbae992d
TLSH
T148E05E62DB1012BBC0BC073505C70B613BE690719766462B0E1411A1B8623142E34E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d245a7aaf61bec7f3c3cada0d8f5cc8e1abdca6914ea8feb28a63812c19c8e95
MD5 10ed83dc8c8c2e2c164571aee906a0c7
SHA1 0b18910105ebdc8c8c1eb31e4cdc1ad7c83c7f0f
SHA512 73127f95bd84cc6fab849c5874e98ac2ad58b01ba203c928171c2acc47f7d357a183159f68deb6e1ff1bbd7cf2f77d20121c5dc57d4a8b35f88cee5ad472138c
TLSH
T179E04813DB0051EBC0BD033014EB07286BA3A07093A243360E011028BCA33242E20AC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 95e39f53920365995f021d712550a48ed4a662aac26e82aa643618f9deed5de4
MD5 ec6f2ef49701b661571341fed8c996df
SHA1 28bdb0d6fa64fa63122844f4559ad68c2e83079f
SHA512 60ebe379215263af7c492ee3cc0b8c0e80e74f5b4c5c08e53d36c80198df1aba825684057e0624d03c305f0bf02c187da02a98ce42c572ce2cfa5621b5f0b6a0
TLSH
T1B3E00213D700008BC060073024D31B643BF2C060032213174A11217C7D523043E00694
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4e8aa039bc9a2426cb49795f48ea9bf56e8030139bf7d37f28b03ec6f68bcce2
MD5 2dd8be90d5d0edece9be92bb449550f1
SHA1 0c488d9a2526f1fcb8462bd2e086d100c5cff2be
SHA512 90a5e7e977bf44314967cb202a797c2766a110e26aee263d6475f3a3946d63150118d660d043aaeb3c691b2c60f2af4274a389bc58e9b94f5c3a9bf4fa04931e
TLSH
T18AE00213E71000DFC0B4073028931B743BF3C070836213174E11117CBD923042F14AD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 31834b68692249348f3b1804e1419bb655b0113a8e9d6b876f659b7fca336963
MD5 fad587bfb0306d9e09946776eb1e9c02
SHA1 217417d5b26e9f80c313b25155cca41e93973169
SHA512 19839c7c2749ace474aa81cc4169682b4e861036b055e317da98e2d6de0184770481386aa94088d637743f8bbc4468780bd8fd401ffbdda23f4d54a3e6355eda
TLSH
T138E0C963D714127FC0BC073401C75B717BF6A075A7B50B264E2110A67C623142F24F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 76b9e11ac75551a4aa429be203074376ac59650b4326b806f415749193529273
MD5 d0d942ad7cea105f6e0a380d031b24e2
SHA1 1bebe99b1cfbd495394d4e766eb1d1c066bf22d9
SHA512 3e53ee995b446e2613b065a3e48f8d48f0383d8affa83af06c3b3d99d145139560a3c3ec35eed10a2ada8a10d9b943ea8596574642642935fb3e06867276f810
TLSH
T127E09293E710667FC0BC073801CB5B613BE6A07597A60A264E2511A6B9A23282E34F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7fe72c8b3e5b94920fa15397971ea2087118aec2589fc494aeaf419c55187ce6
MD5 713917beb2932cf0a7a5656e391e6bd0
SHA1 709ec4679457089aa2d8f87ca6ccf9fc4ea65f97
SHA512 ba77a9cc7aab99002cfb27b553905af652285b87fa58c87e5317db84c7a0c428c3f5310fed39f93c5cf927c1c42f9621e789c91759e194ab120d0aeb9783ecfd
TLSH
T15FE09E93DB10517FD0BC073505C717617BE69075976506264E151565B9623142E34E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 40dd305e3f20f200d151f8405120ecb7658af727ffcfe23ef3d4143589f7eee6
MD5 e562bfb98cea387b6943f03f1c1a0864
SHA1 8d4ea80aafc9c46926d344731df85e596e5448ec
SHA512 65abd21e38e399d2b6d9f5b55ae6e566892d3c59c48f88c317c26d3c3fc34852e5545743702e69dfa0d02c655d5551f4c114711e34f8bdaec580549af5648542
TLSH
T19BE00923E75590EBD0BC473528DB16682AB3A0B083A6072A5E052568B99331A2F24AC8
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8dd530ef1c833ad5ba86bf76afb38db71b0562129895fcda2832b971ea87af9b
MD5 229dd976db644ab4a1a67f594be01676
SHA1 6c4eae8594dc9498897ad38f7fc1a19331403428
SHA512 041a6e8b3124822b030fc1b237fb8f021a58f3a8fa829683425ce506058df16247e9a3b2ec07e00e2c182623b91e3c3c10e9da6b4640a051f51a95422e56a9da
TLSH
T121E05EA3DB1421BBC1BC073505CB0B612BE6D0B1A7A2462B4E1814A5B8627142E39E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 127bc0108b637e8fbb29bb5b662ca6d104014fbb2663d95f08b39ed6a7e82031
MD5 80fc22bec860b28dbdbc82ae69309145
SHA1 07abe8f1fb212c0516fc95822c71393a1de61ba0
SHA512 c91fa7e98508d47f4cb90dbeff1c626ca3b07e2ff9953591a5d0f39fe2e662a8b0fb04a00fc62cd5f972d6eae7f8018fd261f0e02b26b76e8212543e37457651
TLSH
T1A6E00213D75590EBC0AD473514D717647BB3A170836607275D451569B8D37152E14AC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e015b7463454733d4c88ca49fc2151b1869911f0fd8f0990e34472537e845372
MD5 c615109f7195657d3d01519ec404195a
SHA1 dfc63cf855b82181604d7c64e6cc592cbeedad01
SHA512 113ac7297d975cecc317775935cd9819455436c06806e45dddb1b62ab60c0966dfb2364f0eb355e77a054ce0273135f11a29b45837f86d992ad7eb18851e0a7a
TLSH
T18EE05EA3D71421BFC5BD073505CB07612BE69071A7A1972A4F1814A6BC637442E39E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 28ba3d4a412933a41f47e39885b0171a13b9d67462e78b515ac653a2b00c2b61
MD5 f578d35756e4837c77c2adfa133fb961
SHA1 4d7f1843187e1a7e4aec01e9c6acb0a9d141efef
SHA512 2a5575738f06831a9672c1c4fa187d07293742ab818f855df7af1c888ddb332adfd50014266f5e4bb084c3bff749478a299199fbea28d5fa274823a8f7108240
TLSH
T1F9E0CA23EB1402BFC0BC033004DB0BA53AE3A07492A10B2A0E2200967CA23142E28F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59cc5e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59cc5e.TMP
Size 392B
SHA256 78ea6c53a9a3101979e315213fa3d68172c1531b172f4f7d27d55024399760d9
MD5 ef533954fac55f36175b37231ecf7df0
SHA1 84b5a779df7b6574bd05c0df68514e4ebdf29edc
SHA512 c74dce3ddd79cd137d965a0ecef4a7f9d73c984ab1412fc73e0541c32bbbf0951f22bb20fae90d8a78fa5ac1a43d9f7fccdfbbd052f2df3915d350614b51c3ea
MD5 SHA1 SHA512

Submit Download

d9459671-f875-4471-9fd1-ff859d2bef13.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d9459671-f875-4471-9fd1-ff859d2bef13.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bbbda03812b6fed2fc55ee56107d57e1e8add2bbb2c473c0f7311c061489f28f
MD5 37b205fc1aa69f6574ab2980c9d02238
SHA1 e25131edb833050c18da90837877ea5c081947ce
SHA512 00f7ef4717b410d71007b7803697d25f208c45d89c4a27b05589f3c1bf1fbd46f5699f6d5fc65bcb71a8570bfec8862ee2ca8f536c02f80ab63c0bc16191e758
TLSH
T1AB412C59A6F91144B3B77F169FF7A86E487B7C372E06D45D10010E4F0627A00C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 90209b6e7e507df7053fc4cea0fe1de0508de77a367bb88140f6e9c55cdc1bfb
MD5 f7e35541b857591161dd0ab0c609cb6b
SHA1 3ee585d46e2bbee487a6a5029334e692f9a02b33
SHA512 0da81061f27b0b79192fc2ef358a3c980391a482096462da57b60062c26aff19e40ba63cd47557853093d3ce92671df47603f916568db26e24f642f2609c674b
SSDEEP 96:58BJOIKKwnrxABJsMuLcOTBJrucjmBJnIuQ:QYInmM0n5OBIF
TLSH
T176022240ABE91612F2F7EAB1B5B26710BFB7B9099E148E0E008041491C73F149A6EF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 026636dbb0c5a30e5c2a8c80a2ad4f66b124701cc8da50fae13e3a5dca062d52
MD5 07c1780ac6b458bbaf2710095f152d81
SHA1 1f89bd677dd183270e67c7cf672698d529e4cd44
SHA512 567f9c5d98e3565bea52cbea2a2e6cf8219fd4450907dec8e5e5d850a2fcc31175353865f874d6ab1f4ec5e811836c655cd27b96c5e07730cf83e94a7d93c962
SSDEEP 96:PABJQuD5BJOZo9k1K4wrvYM5BJ2PozwfodTBJrucwmBJnIuQ:+GQ0ZxlMQ45ZBIF
TLSH
T177321344AFE92122F2F6DA71EAB66612BF76F5059D188A0E0090C1491C33F14DD6FB77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 efd85841c938a02027cc10de4ca7cd27ae9fd8d53dcb44c26b4b71aa876d261a
MD5 1e5ac02b592091cd62d4fd49b4e10aee
SHA1 845c9ea94c85d1a682f9e8e9e196e26000412c6d
SHA512 eef0b996686091b7a049c1c052e55fbb1b1327082b720c40af5183235f61df5e1596f27231e7fc7b43507bb87f837095f062bbdc2b8e984e0fc8f330ec975f45
SSDEEP 96:jABJduXABJQuX5BJOZo9k1K4wrvYnTBJruc4mBJnIuQ:6XpG40ZxlV59BIF
TLSH
T11F320344AFED1636F2F2DA75E7B66A12AF76F50989188A0D0090C1852C33F04996FB77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 dad3e8d2a9f9d8b96fa566f2fef93a5fea2b12dd09c1d9cd3dac0e0d4d6a8fda
MD5 381eaffe863131ca183120e92f514c4f
SHA1 b80e9201435456d2b672621235e2335a851b5482
SHA512 c03bd9510315132c14c219a152692475a341630a4feae068a6ce2d838811579dcf1dd3fc618d4e0741aed34d917a32657ab095eb40cf7ed4c0b9d7f32479a399
SSDEEP 96:t5BJOZo9k1K4wrvYG5BJ2Pozwfoc5BJvLdLxoNw1xoMTBJruc6mBJnIuQ:N0ZxlOQzZLdenW5TBIF
TLSH
T170323144AAE96102F3F7EE71FAB56651AFB6F5159D088E0E009080490C33F14DE6AF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4312-3118-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-2752-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2745-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2738-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2731-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2724-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2717-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2710-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2703-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2696-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2689-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2682-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2675-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2668-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2661-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2654-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2640-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2649-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2646-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2643-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2641-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2759-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2766-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2773-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2780-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2787-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2794-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2801-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2808-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2815-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2822-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2829-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2836-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2843-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2854-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2861-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2868-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2880-0x000000007F0E0000-0x000000007F0E6000-memory.dmp

Download

memory/4312-3106-0x00000000006B0000-0x00000000006B6000-memory.dmp

Download

memory/4312-3108-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3109-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3110-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3111-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3112-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3113-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3114-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3115-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3116-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3117-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3119-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3120-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3121-0x0000000000720000-0x0000000000721000-memory.dmp

Download

memory/4312-3055-0x0000000000700000-0x0000000000703000-memory.dmp

Download

memory/4312-2893-0x000000007F100000-0x000000007F101000-memory.dmp

Download

memory/4312-2873-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2652-0x0000000000680000-0x00000000006AF000-memory.dmp

Download

memory/4312-2323-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2306-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2307-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2309-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2311-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2315-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2304-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download

memory/4312-2301-0x000000007EF50000-0x000000007EF51000-memory.dmp

Download