hxxp://cryptocom[.]app

Analysis

user interaction
yes
max time kernel
84s
max time network
88s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/07/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://cryptocom.app
Sample260711-pkgvfab18v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3780	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134282461994757611"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{1571B88D-C48C-4ADF-AD86-824EA04C87CA}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{23D302B6-4998-45DA-9396-5F73AE8AFC11}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 62 IoCs

pid	Process
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe
2312	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2312 wrote to memory of 1400	2312	msedge.exe	85
PID 2312 wrote to memory of 3780	2312	msedge.exe	86
PID 2312 wrote to memory of 4080	2312	msedge.exe	87
PID 2312 wrote to memory of 2084	2312	msedge.exe	88
PID 2312 wrote to memory of 4080	2312	msedge.exe	87
PID 2312 wrote to memory of 4080	2312	msedge.exe	87
PID 2312 wrote to memory of 2084	2312	msedge.exe	88
PID 2312 wrote to memory of 1264	2312	msedge.exe	89
PID 2312 wrote to memory of 4296	2312	msedge.exe	90
PID 2312 wrote to memory of 1264	2312	msedge.exe	89
PID 2312 wrote to memory of 1264	2312	msedge.exe	89
PID 2312 wrote to memory of 4296	2312	msedge.exe	90
PID 2312 wrote to memory of 4296	2312	msedge.exe	90
PID 2312 wrote to memory of 2156	2312	msedge.exe	91
PID 2312 wrote to memory of 2824	2312	msedge.exe	92
PID 2312 wrote to memory of 2156	2312	msedge.exe	91
PID 2312 wrote to memory of 2156	2312	msedge.exe	91
PID 2312 wrote to memory of 2824	2312	msedge.exe	92
PID 2312 wrote to memory of 2824	2312	msedge.exe	92
PID 2312 wrote to memory of 3520	2312	msedge.exe	96
PID 2312 wrote to memory of 3520	2312	msedge.exe	96
PID 2312 wrote to memory of 3520	2312	msedge.exe	96
PID 2312 wrote to memory of 2972	2312	msedge.exe	98
PID 2312 wrote to memory of 2936	2312	msedge.exe	99
PID 2312 wrote to memory of 2972	2312	msedge.exe	98
PID 2312 wrote to memory of 2936	2312	msedge.exe	99
PID 2312 wrote to memory of 3284	2312	msedge.exe	101
PID 2312 wrote to memory of 2604	2312	msedge.exe	102
PID 2312 wrote to memory of 2604	2312	msedge.exe	102
PID 2312 wrote to memory of 2604	2312	msedge.exe	102
PID 2312 wrote to memory of 2748	2312	msedge.exe	104
PID 2312 wrote to memory of 2748	2312	msedge.exe	104
PID 2312 wrote to memory of 2748	2312	msedge.exe	104
PID 2312 wrote to memory of 1568	2312	msedge.exe	105
PID 2312 wrote to memory of 1812	2312	msedge.exe	106
PID 2312 wrote to memory of 1812	2312	msedge.exe	106
PID 2312 wrote to memory of 4968	2312	msedge.exe	107
PID 2312 wrote to memory of 4968	2312	msedge.exe	107
PID 2312 wrote to memory of 4968	2312	msedge.exe	107
PID 2312 wrote to memory of 3504	2312	msedge.exe	108
PID 2312 wrote to memory of 3504	2312	msedge.exe	108
PID 2312 wrote to memory of 3504	2312	msedge.exe	108
PID 2312 wrote to memory of 2196	2312	msedge.exe	111
PID 2312 wrote to memory of 3172	2312	msedge.exe	112
PID 2312 wrote to memory of 1440	2312	msedge.exe	113
PID 2312 wrote to memory of 4424	2312	msedge.exe	120
PID 2312 wrote to memory of 4424	2312	msedge.exe	120
PID 2312 wrote to memory of 4424	2312	msedge.exe	120
PID 2312 wrote to memory of 5700	2312	msedge.exe	121
PID 2312 wrote to memory of 5700	2312	msedge.exe	121
PID 2312 wrote to memory of 5700	2312	msedge.exe	121
PID 2312 wrote to memory of 5864	2312	msedge.exe	122
PID 2312 wrote to memory of 5864	2312	msedge.exe	122
PID 2312 wrote to memory of 5864	2312	msedge.exe	122
PID 2312 wrote to memory of 5228	2312	msedge.exe	123
PID 2312 wrote to memory of 5228	2312	msedge.exe	123
PID 2312 wrote to memory of 5228	2312	msedge.exe	123
PID 2312 wrote to memory of 5728	2312	msedge.exe	124
PID 2312 wrote to memory of 5728	2312	msedge.exe	124
PID 2312 wrote to memory of 5728	2312	msedge.exe	124
PID 2312 wrote to memory of 5900	2312	msedge.exe	125
PID 2312 wrote to memory of 5900	2312	msedge.exe	125
PID 2312 wrote to memory of 6028	2312	msedge.exe	126
PID 2312 wrote to memory of 6028	2312	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://cryptocom.app
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x218,0x7ffb2700c188,0x7ffb2700c194,0x7ffb2700c1a0
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,9405772061362981540,5079042559288906622,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,2811331111219538939,2491844359708109387,262144 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:2
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,5800868087847140139,17569487798032818335,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=2532 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,9388911248495327754,9675060212248108752,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,408406057235149254,12860174405074484925,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,4980189729247901946,6240072531705918781,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,1809344897032694990,1887937003432281339,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5104,i,1841792890627907104,4099771770711576780,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,6163210468933851165,7976737451927028587,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,842429350475289727,11279318503521456125,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,9631532209727313785,5262017088713385935,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,9631532209727313785,5262017088713385935,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5888,i,16129856550380343620,8356900099921981379,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6728,i,5943450822227212494,5164410990104641652,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6796,i,4638475936630704275,11214840468085927837,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,1462744152446447133,5717909948441431190,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6052,i,6727293215002892090,949276029257570200,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6576,i,6006784659273867054,1071338368824121094,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7276,i,3623693995945052587,1943080714223262550,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7260,i,9712866619788745759,15457416780031110029,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:8
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7264,i,10308394456398566115,16238279064296901112,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5432,i,11356687940018953882,8035368184201356488,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7508,i,7333167153598192854,116606790123653250,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7468,i,12779253864921620968,17020534444481589069,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7568,i,3915283915637558862,15664633285769262205,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5528,i,8379006292146670442,13474744311002316327,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7540 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1224,i,15932393793193341711,8443794213642802464,524288 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7904,i,3123995565100171679,7137842210175348203,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7880,i,5476436276930484803,2513157621799687520,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=8100 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8340,i,13207344642735266532,6437718727019239379,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=8376 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8496,i,11636060265866750723,11404927247982933671,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=8508 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8672,i,18331488971650482349,15792390250227085702,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=8524 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8780,i,16439514842988537584,13434223102472361060,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=8796 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8928,i,9790412917939899547,16507180382124866374,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=8936 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9072,i,10187959614260724939,8373642810777908788,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9080 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9212,i,12938122230626971874,1935513382941194869,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9228 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9360,i,7762232317054278427,9140145199501906874,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9392 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9376,i,7540638895475221520,8616122548446383396,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9396 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9408,i,12186004394436067914,15041095625443369858,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9468 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9776,i,2309668428875630419,2594275856432762910,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9784 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9940,i,11346912639698839294,15705815012310811286,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9936 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9948,i,1185442257350263832,1822546242843260344,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=10072 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10096,i,4452101427052259288,5582358566971059682,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=10132 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=10260,i,12558824733421312223,8626234599529101775,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=10348 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10840,i,5119415868515946837,17637946197763766162,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=10856 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10772,i,8329134047988327629,7007820306516836930,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=10916 /prefetch:1
  2⤵
  PID:6484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10512,i,13061740819553580555,15592236928749303679,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11084 /prefetch:1
  2⤵
  PID:6544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7612,i,582915960156023964,13080988207328974756,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7896,i,18104881891141870800,6750410487507991469,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7624 /prefetch:1
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=4128,i,6633754626373764677,3973146462189147820,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11320 /prefetch:1
  2⤵
  PID:7072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=10868,i,8583318493420115328,5314968249193596744,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:1
  2⤵
  PID:6264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11488,i,16259351903787721686,16178768296601083103,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11468 /prefetch:1
  2⤵
  PID:6332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11632,i,5888403574411502477,17825601639524639674,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11636 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11784,i,7928777667037189906,7946047250376587045,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11780 /prefetch:1
  2⤵
  PID:6464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=11968,i,8147136924007979558,7476756585935810745,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11984 /prefetch:1
  2⤵
  PID:6704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=12096,i,17956215097402394083,10954562958555728204,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=12104 /prefetch:1
  2⤵
  PID:6688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=11776,i,13379782363561118517,16187089029653237408,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=12268 /prefetch:1
  2⤵
  PID:6816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=12160,i,7387831837038068968,12894439742808398671,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11788 /prefetch:1
  2⤵
  PID:6876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9680,i,1570074130341518099,1444837279067949159,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=12240 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=2648,i,4101488294045704622,3732956237716884377,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=12120 /prefetch:1
  2⤵
  PID:6968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12500,i,175648486233008935,13111313930002288194,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=12780 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=12956,i,16633614524728112080,5268572798099274156,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=12928 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=11488,i,14491032401195008224,3555458686286457671,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=13084 /prefetch:1
  2⤵
  PID:7196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=13268,i,7695584000455949257,2679165907789775391,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=13280 /prefetch:1
  2⤵
  PID:7252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=13376,i,13568908551871994424,6737593364148575523,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=13392 /prefetch:1
  2⤵
  PID:7260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=13556,i,4285354760336473170,17182094777570265774,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=13552 /prefetch:1
  2⤵
  PID:7364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=13744,i,8208361497791684970,7349509935622996177,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=13780 /prefetch:1
  2⤵
  PID:7424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=13240,i,6235282750863693400,9314253356478545152,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=12944 /prefetch:1
  2⤵
  PID:7524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12768,i,10429399261446514800,7948247447720626452,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=13580 /prefetch:1
  2⤵
  PID:7588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=14156,i,16851009767805000924,6940835616477527591,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=11068 /prefetch:1
  2⤵
  PID:7720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=14264,i,12856024903276451232,16812100652946663884,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=14332 /prefetch:1
  2⤵
  PID:7916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=14408,i,1156732124357207754,16190059304253745373,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=14380 /prefetch:1
  2⤵
  PID:7976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=14440,i,8208781350906111972,16496014717528938363,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=14520 /prefetch:1
  2⤵
  PID:7984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=14388,i,9820507035332165449,6004586579023527688,2097152 --field-trial-handle=2492,i,14397795965859202556,1327055520565803961,262144 --variations-seed-version --mojo-platform-channel-handle=14768 /prefetch:1
  2⤵
  PID:8092

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3376

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 30KB
SHA256 f5ee053bb13e5a3faf543784294d601a57c6c39abc6bdc2237e9d94ea0c4aba7
MD5 acf541f8cbbce3c428f60a029d113aa6
SHA1 1219c1928f9b74641a57b25873d8606a89ab9136
SHA512 14503443b4c4328a162e64c48d5fe42aa7803af68e5a20a9e6917ba9fcd55da4f4a1d94b62fc9c94e150dae2fee566f7c3e47b011097689a3a1d605b9ddf8df3
SSDEEP 768:OTX0WleyAHL4Q4nOe7IgmdTnaQLHQFlASTcFGg8Gyp:cFc+d7Iv7lwFOS4FGlp
TLSH
T1E9D2F154DD04CF693550F898CAEE928D43327F58F929E1A3D29D5228216DF968E3A091
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 373KB
SHA256 a5c27d3298042314d98634f85836ab0c48cbdf572ee676981a852c3e18738d8e
MD5 7eb1501498252ec1a30118a2d3917c94
SHA1 b275a098ab3e050e2b4ac71eac10c238c2365c45
SHA512 8f5831b6bfeaea74aba0d23b684687e0a308f51f1528859535c9df335367b946b6be42500ce637e77baff40795bbf152e24abcfcee227c6d9d0e490412e09d26
SSDEEP 6144:bBJYkBiu4su2hIklCVm8ZiLHBd0R+2jBLX47rD+CNOgtU28xNAoWclJ/lo31jjuQ:bfWV22kvnBSw2FLIPDVNfN8nWclJ/Md9
TLSH
T100842306FA0DD6F4A7A40DDD2990A3E04D1372444CFC4A347B8523B9DDE3AEF4A159AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 67KB
SHA256 2b5ed041424f24d8f0473eb3defed6fe82ab0c9c21d51f959935e8c7f569292a
MD5 068702a04ed266e5f85a1bd7b7beb3d6
SHA1 9c9e100c94193fe904ca224d8ae3fd766cb54db5
SHA512 50e31424bbe13a5080c5634d89eb6d100284ef15cea34ac21dcc5548668577c01c3cee500705b9f2edc51aa76f0d13c6b062d58e4e80d5ab0a9142c40a0a80d9
SSDEEP 1536:E3B7N5R5hwirOGHn+ofuxzIJG6vAzDqWKGWM03PL8jAN+Zh5aSUgK3Gkb:EVN5zYzoiUI6vAzBKl0jA0Zo
TLSH
T14E630285CE4DAEF296352B7AE31AAF51550CD2B5CFAE62BF3EF1C11342C4C55886402A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 401KB
SHA256 98f245dd4ea1657ec5caee3b61220fe47bdf506065cc6cb3157571c88c360407
MD5 1c4c724076400ec414becc254150cb71
SHA1 b7b863185d901d1d66dee8013eeab87dfbbb7584
SHA512 78d9fc2bed91ac369b7574f103da89bd820a7db176c43adf9c083f9e74f3cf7d93fe25998af31d44f55378d352ac855c04f15d572d9c8d8c2b81453ed32402da
SSDEEP 12288:PtfgtaUcQd6jMZlyexMi26SLYUmYEw+Qc8n4KhUSQOgnC8Hz7:Fgt9CwZ4exXwkUqqB48NgnFHv
TLSH
T11394234FDEB0F07B772C88531FE4A80F66D676A209BDFEEA15F15726E31D0A109A0548
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
Size 36KB
SHA256 86db6cd44df49977d457fff75bda1a63a31377dbb352e1c844fff5a062333840
MD5 761800cc7b13806703719d9761d3a64d
SHA1 cb6a0b530323ea43db8ac9ea9c6f14aa5209801b
SHA512 5ecd0dca6bb8fbc76245b6c606e8c9c3ff3cbea1e2cebd6e179f88eafeb084219657be14737425f40f0a691df55e46c0e771617ed5886a1352e1f49e8515c4eb
SSDEEP 768:fOQt/KvYIIAZ3kg6FXtDT9SSO7q4KpCLXk73ON/iN9xquWqhx+/w/:fv/KAfAZUg6HTkS6o3OK9xquVhxCS
TLSH
T148F201D9F348F6B92801E43BC5CE0B65F222CD8C51D9990E23774CB48896EC9E4E6277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
Size 16KB
SHA256 b17b23990851346a40d733da642788136fcc9913a5e690865be124637f16bf66
MD5 e97f51ffddb5102e601f568bebbe6656
SHA1 80b1ed86320c70b9a17f9d5981a132b9a4a6afeb
SHA512 0561e3a1f680d2cf8fa0d19282359588fbdb3a508831810aa5059d6b7b072c840b06323d4ce4c66464ab016fdca47bea6eedbd765acf8c6a503ff2edf91d5fb8
SSDEEP 384:PUsJMhkvuJpDKSNflVDtakrzt2ro/zvllLMZ3u:8bz7Y0ztmez3LWe
TLSH
T12872D0A96EF500237B2B8CEE15D083948E847AF36D6B7DF642883067849C6A17D1858F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fb
Size 16KB
SHA256 abf44e4e9928c3c6141c00842746c42192078d699b8e8e65c4f7e630aaab0210
MD5 e6e59b39017f4009a0a3327967431678
SHA1 7c69616071dd68e02e4dd2b6e07281a1b627f706
SHA512 4fd7cdaa93d86fa40ebce2c45f9fca7cfe2293c60c0b2d84ce0cca3cbeebf5fe60aeabaf3568f7d73e1285a088f9e1c0bcd77c2731ee24981e393347e7cffcad
SSDEEP 384:pOibbuO6oghUlywYvxZyNCQvLm0HP5a17dO+:sYbIXJYfvLlHRafO+
TLSH
T1DF72D09752C0858B1C3003AF10ED05C18DAE32265B5B4FC1D08FD6EA96E2EABD52B727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_accounts.crypto.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 25KB
SHA256 ff8f9f8d53d26fc93179c9b6f27cb8b8eb6ae00b348b24be08e28be17d51c328
MD5 bcd51edc522a49393155d8ae96e2ef90
SHA1 74749661ee94a03b89a8b09419f745ecb8ec7f97
SHA512 e979ca3ffccca66c4212bf75f9a452c5087ec22b35a8bdbbb96cbedfca8fc9bf826b2eeaf0dc49c5a490a58e1e803f6eebae5f2190d21adf3f3bafd6aee0a1fd
SSDEEP 384:DFB9Vw1fz7nPYvBtBKmu1uAKbAE3hNHayw91KIQKMniT/C2kC6c3pi3a3r+CQ3WM:98k6o49UtLmgiW6nP6x
TLSH
T14EC2ECF3C3E4896DCA1252F0AA146E1BCF1D0969436C3D3B89E5BF4793E2871E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3adcadcaf2d4e105201885d20f7bddb6bec8374888573b6cfe2e797bc56e9f0d
MD5 4d50fca7c33167c7ff27600c9f46efb0
SHA1 88c211e743fee88264adf7c9a485d96a8cdfd373
SHA512 d07ef1088de4581484174008d9879bcd1229ec455c7b5e1b8f654837e7fcb4897a9e9c018217528ec7a0a68563483c774b0dc1ebc8b0e9b95dd679eede482353
SSDEEP 192:sxZBRRyM/jK1Ml8MkU/fXs4sbIdpor4HW6+WN3LI/YLWtwMIgrJ:sxZB3MU/fXs4sEZHb8/l9
TLSH
T15542E8126A345977DCDBD209FA55BF53D6F90472A2900E44AAFCDA0C04E6BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a233fb2fa808467c749de4e85abd6c8091d876346a33c4a40f8141dc90f56ef2
MD5 d6a6b89e38eeb9fe9b3c5ac5ea30ca2a
SHA1 8e1e5a57988e22a26723637217f23d97da583bb9
SHA512 f2bc79f55a15d2f65dd48c2fd58920e93da22d4b667d83580e3a5a92b102b76cf22bfcddf87ad256b040bb664a386faea66b2ff11fb5d81b1cafd41d9ea9b1de
SSDEEP 384:sxZhnMSMU/fXsYmkqHl3F92lHbwLIblu/ya:s5M/U/fbmkqF3YHbwL7B
TLSH
T1E872E9126534497BEDE7D218F915BB63E6F85462D6904E44AAFCCE0C04E6BDD2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 b4dc2b8572b0c678ae054d62b184fabaddc9da3bf4d7994b6ed754eedb43e06c
MD5 e188a7540297f7594d08ba320f812787
SHA1 822f8a90b183d5f3d94cf1b57e4e7479dee4b6c3
SHA512 deb7ea5f06ccf01b514e260cb5943895b120f0cd3715917349110a7bd8f6f0d859499ec430ea0e7b204f22795f6eb97a05a2bef69f48fef35dec4a12d14db655
SSDEEP 384:sxZhnM3MU/fXsYmkdlxnH2lHbwwlu/fma:s5McU/fbmkbxkHbw1fl
TLSH
T10772F9126534497BEDEBD218F915BB53E6F81462D6944E44AAFCCE0C04E6BDD2213C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 fcae9ef3d8e79d07f70879b1c0235c77971b9fa96d170c6784a91bf3d2b27669
MD5 889126f4d5ffeea8f093f4b3b2902471
SHA1 f387ede327d74889c89c67f0bad45afe35c728fd
SHA512 d0892318480cf6d6bbaa1d958b3c9c7e94bd3873d3fee84ff265a5180275d09a7cd7b0c82ae6a9535f2c81e96a5b40a128a60420606c5f12ab54f879b3d43522
SSDEEP 768:E6s6pD1WvxzUj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNjroT7:E6s6pD1WvxzUju1jahILIsNQT7
TLSH
T19DE2FB3B680CCB7E4F841E5CEC2A6F966DD801CBAB54899447FA484C03C77EA512B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 1KB
SHA256 b2e2509fd949e946e302c7468c24965bdc783ae47a641f08a5161c3b33bb54a9
MD5 513806a48afc4ff0b1889b7a40dc34b4
SHA1 b7d9ff75c0a78e300e36a2706f1da7af77fa8c3a
SHA512 23a9f0698a399579423b6661066435a4c94348a6fe84bb785514ff20015d1989977dbbd7c1a55e3a93c6d65fce43ba182b640eab3c2a797a7fb2454b5e481b74
TLSH
T10121009D5EA1499FF8A490B71577E5E4B33099DC4722A3235C2C31316E2634D295B5CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591592.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe591592.TMP
Size 1KB
SHA256 d9cd544492262408cce114f2c6fd7a16889807a35fd957798047e4037f3ffd05
MD5 9d8c3b9566f2e11c4f5ad98c09670b6c
SHA1 c896173158943d3c2feeced7149b65fae846c96e
SHA512 c15aaa8f4a8882d0f4a98f44fc192d558bd9ef522b5e5d9b8a9b791110fd856e1b75e3eea057238f258ea647e56678628aec4ccfdd70cd5a5a69a7e6409f06c0
TLSH
T1CB21EF954A954D1BF894917B1A67B4F8B3308D009722B7A3A93C22799D35B8E094B0C9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 39a2393c5b88f89bf46896f75d47298ab25f26914eb326a09dc6bdaf08cc7b02
MD5 b2c0d612199d12d28d5586d51a736704
SHA1 5583ee5e37beff749a8c94977022d6aca271d9b8
SHA512 6d8cf6c5891d562774d247cb3e0b8eec3c7f5228ae6edbca4f34ddca79f22a8de8e54665b8d1e629e8ddcfa0bc3838978b502ee20a8525da292be645c81c0cd5
TLSH
T152A002240AC43011C0461AB329D609A36A104AD7078917396295408CC8D57495A4201C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 c4fdc20a02e2046e16a9b6065795ef487a84aaec0609509fed95b1d0b9eccf49
MD5 dbcbe955c55c12ec1f2fa91cdb8d9f48
SHA1 c52b2041450eae64b7be31fd6d3f9d84462234a7
SHA512 2c5da38fbde7ad07cb31261711e0e1675181a848ca41964fb035cfeba213a625c77deff522f9cd9a946757a9b9151c71cca3a3ae46d456f76a5900137629f11a
TLSH
T1DCA002108BD00006C05719B115A743411301CCA09114530790D30048CEB08474E6641D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 11a6ec7110df772506445f59c78efd8a4d34ed0c2594ad2d0c6891a6a8065998
MD5 0b15526f98cb7f465bca4b186d382dcc
SHA1 7f1b1eebd889e55111122fc68e8a25bfa443557b
SHA512 7f5ddc58a85f0bf1792a50dce779e37a48b212fb5caf88fd1afb5a51b422f7fb4aeef17e2ab68ffaa2eea09453dba59cc6dca737e6f9f551b9d4c099d54d5565
TLSH
T1F4A0021341D520C6D2120AB0948101CA2359D9100263531380A46859CD501686D2612A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 a5321425204221a486219a058aff161a4c5cd0713baf2f17a65b23d41c982384
MD5 00033018d2ba300d7b6253f8c79fb8d2
SHA1 2a6c6e65aae2487170669a03ad2a67b91dd007af
SHA512 a0602083f9009f8afc6a2555e07158c486ab9fc0449842f20dc4d028f087cfb2daca03dc6aed9419f71be276238f2bdb799e41eb63fa795067b2ccad8a1ad251
TLSH
T11BB022C2083030CBC00003BA80C328C8332CAFA80B3B320200BCF03CCC2A20888EE0A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d9a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d9a2.TMP
Size 48B
SHA256 c65c0b03a0cce0ecee38d1fc9fa34e3c94cfe66fcdfbd4979f1cd876cbc90929
MD5 800e6b5742d427e44006132f06cb9745
SHA1 a7cd5a2c2b3fd46999b593d686ff4b89a1927050
SHA512 284974b0522673b453e4d88ea4f28029caf073bf22719d6a3359158c7b768f4921cb1d1868acd139e11029cb8e28eef803a72f9f5890dcb6d1b66ef141144e6b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 25bce99500e2af524d8dde723d51e9385e1ee7d6fd98af3e39d1631f58d7d8aa
MD5 8b7bffa3cd93f91011d8e07bb5bf0f9d
SHA1 063ee864649e425cf0da81dc83a7cf79ab09b668
SHA512 956fa4c528ddeaa9b412a80bffdf65d976e0bc0a9eb6f072644ebc01678d05121ee26d13b530e8251baaf8250d6a2af9d04e9d8379e2551a074a82eda9af34b7
TLSH
T179A0021026C0051BC40806B071D289C07265BD501E43020564D21EABCCD41599195644
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7e4101520e0d465ed5c2406e12fe586b92e387fdd3e5d16beb569fce096eef9a
MD5 7e94cd1dea7f8cbf57f0546d6e657c51
SHA1 9f396dcfb805e8676d571dfc6ee673753175a1eb
SHA512 64c7d5bccdaf47045e0a27fe94f697fd671c434616ee2ba41ef3494cb114cf58a242f470ee02d5912dab2af84fd5fcf1be53117c652060dd7112358ee651bd5e
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFlIFKe4gfytVIZKGE8s:KUAAKtePulWKe4iuV2KGEv
TLSH
T15B91175331BA13023C3E2E0D935487668E4275A3316DA42B3FAC40725EABE214EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593ed4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593ed4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 979b2031b5e46dda980b28d7b8133bd17e6285d0c532aa169e5b0d87e04354b9
MD5 e60de6c91cdd7bea5ff2bebbfc1aacce
SHA1 1fcc0e7d070625a524b5ef288f05238578d91b68
SHA512 1c54ffdc57e3fe61df4c81735194253992d81b7353a5e4fcd1cae2c51e47dfefffd36bfb981343defe7da63aff552fac2359b3fb2688c6c2287ac1008b667d25
SSDEEP 384:UtNn/s3n9SfsNCN/idv2a97ORMKoDKKOObjI9G6w7qUP:Uj+9U6v3JOpoDKK29M7
TLSH
T10C92AE326C289D331DD39195F58B3A178FF8417B97CA2E84C5DCAF0D02CB6AC534A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d6f53a445bc535d3a6506ae6a78ea3059a943681ea0a2f8453e6f584d215b2fb
MD5 48cf85fe7f710a9c45324d8fc7f9f747
SHA1 7fb450f61b9221a97c1b1e25b9de9deb43706bf7
SHA512 a472bfa0bae4912f6a11970995be8c758847490729ee132df27263561450f71b8733e0359a79e7289871c945a6efa1ad353c6d4d6f75c76d930966df4d887070
SSDEEP 384:ItNn/s3n9SfsNCk/iGCa97ORMKoDKKOObjI9G6w7qUP:Ij+9UADJOpoDKK29M7
TLSH
T15792AF326C289D331DD39595F58B3A178FF8407B97C62E84D5DCAF0D02CB6AC534A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ca428b8d7f52685ed5d19efd755878bf585659a684fcd016254b97b1c811c823
MD5 25a2226fc748ba45a161525cd2ccbb89
SHA1 c4b6f878f0a42e70c92eb4c5c68c5aac82d76fdc
SHA512 3f2227c3a2ff3574ef14c7f8061f9600342af5c87ce7db2742a8d2743de0d6eeee70afbdc4d04b20e9b40224b22ad310bbc6fe8d716e7dc780c1c4952d7332e2
SSDEEP 384:NiF1tNn/s3n9SEzsNa8TUNTUlIlUTMpwSa97ORMKoUKKOObjI9G6w7qUP:EF1j+9PHwg4zJOpoUKK29M7
TLSH
T1DFC229F258D78936E99E8747B77E2E178EBCC067B5852980B7885A0CCD871BFC346811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 46e6885321162b863070f813a1aad8d0bd2c7a2c59a640b8a10683396f72bbb0
MD5 93580e08bb88c2d49265497b5fcedf8a
SHA1 03f687f77d25fb9c3b1f05f573483c3e9c00ccf2
SHA512 7518f64363aadc3079cbcef4cb4014d1c0c44c84b784caceefbef32027afdb8757b8eedcd477b67901c6cd25db37ceecc777b36ffa6eb4dd5994d8480deb4ba0
SSDEEP 192:qONa6O7+3hQmiUyDFGttb0aO2eh2dqgGKvcU6:qONa612Gt97ORMaK0U6
TLSH
T17802E83569286CB75EF2AD45FA873B239FA5113BE9952F80DAD81F0C00D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d8ff811f24244c66f839e7caaee22b1372998dd43257c03e549219d254cc39e
MD5 eb9c82ffcad0c0369a6bcaa8120c6155
SHA1 ab583e56fb0090bb04f2feff3a009413c4b73ce5
SHA512 140c22bc465c01354c61c615d90fd299f84592cbd90a3c91688b2b75c3a167c67c6317b4f6ae39365a1f538713951bb71c34b0d60e52a48df3abae101dce4aaf
SSDEEP 192:hONj6O7+36QmiUykFqttb0aO2eh2dsLEZcNKtqJRU6:hONj64Dqt97ORMKouKKU6
TLSH
T12B120C31696C9C771DE2A585F58736139FA5412BDA866F80D5DC2E0C01DF6AC234B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1a5ba10f4f49c76a25fe640ed9f37094557230c8c6b143c64974a54f49e056ff
MD5 9b08f8540ed35c53d4493083adf87744
SHA1 1a66a8c28ff7cb6704eab4a816f6714df0638c89
SHA512 3445758847b201e733104b61501f19d921cc6ca5b7cd76724353de945afe152c5ddf24572122023887065a25858f9312acd6cd495cf5338b1e93bb927ead4715
TLSH
T107E00102930000ADC07C033011D31B36BAF6C0A496B2031A4B2102781C733447FA2FD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a3e81041ccc28f80b95613d37ed8ca4337306b2b13448a74f69f5f9fd7c07559
MD5 4ff1d5dd4998b72e2ea3031c5691d417
SHA1 ff974398538470480f5c393a91649eff4dbe01cd
SHA512 12371cd7400e79b53ccd46d840feefe217003f8c380ea20cb1516587892e2706184ca746a081cc7d1d3bd526c451cb89f040ec742fbedb293b4970298178f5ef
TLSH
T19EE004035300005DC074033010D31735F7F5C0D443530317451003740C313447FC05C1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c7f32274d0bb75b1c43d7be8a2fe88c46884980dc3020017b604b438ac9de29d
MD5 4dc5d2a46bff8d308a47d287bb66d621
SHA1 9b40cb7542f3000eaab9cd63bed55d813b1f6435
SHA512 b4e92866541fcc5af7dd6c41a0fb6a4571f5299210e68f094cf58227cee9cb9aa4008de94d3202a2b1ec154dc1fb41dcd517306da6329f64eabf72585e66eabf
TLSH
T131E00203530000BCC07C033010D31735E6F3C0A496B2031A4A1002640C731446FA0FC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58b62c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58b62c.TMP
Size 392B
SHA256 74a00ee13250af0d39b00329ac2f5599d4d1f2612f83158a4f81ac5fef8959b5
MD5 f343a6337d0b8200c1ae3e0b7a673f8e
SHA1 ecf1c533ae71922127a12469f6b021433165c30b
SHA512 559fb5b992237fd4a91e4b667a7fd52ab5116aa597e1748def26094ef633a9f6029f5d543d1c941b18e403f013582f28771e30d9acff3a035b66241edaf54644
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8fe62062b4c54bf9cb7946e53766ad48e86be181abc4ab3f7c67939daca1ae6c
MD5 37b6d4dd1bb6b6cb90e94267861840da
SHA1 72bca08bc0b36e7e5d8011a0e30342edd22d54ef
SHA512 b129993b501d068bbacfb36d738aa12dd3127a4c1a30435c0e427f3d354895e92a40449d08942af3570aa236a7942829b9acb4a1b549882768f807429d3887df
TLSH
T1BA412698A6F91108B3B76E5AABF6686D587FBD373F06C45D10010E4E0A23A44CC72B33
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads