hxxps://crayo[.]ai/dashboard?pmStage=checkout&pmPrice=price_1OgXrRIT0LdPat3Sq9947siC&pmEntry=monthly

Analysis

user interaction
yes
max time kernel
298s
max time network
304s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 15:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://crayo.ai/dashboard?pmStage=checkout&pmPrice=price_1OgXrRIT0LdPat3Sq9947siC&pmEntry=monthly
Sample260730-svkkvsbf43

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
273	whatismyipaddress.com
274	whatismyipaddress.com
276	whatismyipaddress.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3812	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298988493800998"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{4F942AF8-26A4-4C0F-9F7F-FBD61D9B193D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6068	msedge.exe
6068	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 53 IoCs

pid	Process
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1164 wrote to memory of 3992	1164	msedge.exe	84
PID 1164 wrote to memory of 3812	1164	msedge.exe	85
PID 1164 wrote to memory of 3756	1164	msedge.exe	86
PID 1164 wrote to memory of 3756	1164	msedge.exe	86
PID 1164 wrote to memory of 3756	1164	msedge.exe	86
PID 1164 wrote to memory of 4160	1164	msedge.exe	87
PID 1164 wrote to memory of 4160	1164	msedge.exe	87
PID 1164 wrote to memory of 4204	1164	msedge.exe	89
PID 1164 wrote to memory of 4788	1164	msedge.exe	90
PID 1164 wrote to memory of 4204	1164	msedge.exe	89
PID 1164 wrote to memory of 4204	1164	msedge.exe	89
PID 1164 wrote to memory of 4788	1164	msedge.exe	90
PID 1164 wrote to memory of 4788	1164	msedge.exe	90
PID 1164 wrote to memory of 752	1164	msedge.exe	91
PID 1164 wrote to memory of 752	1164	msedge.exe	91
PID 1164 wrote to memory of 752	1164	msedge.exe	91
PID 1164 wrote to memory of 4284	1164	msedge.exe	92
PID 1164 wrote to memory of 4284	1164	msedge.exe	92
PID 1164 wrote to memory of 4284	1164	msedge.exe	92
PID 1164 wrote to memory of 4376	1164	msedge.exe	96
PID 1164 wrote to memory of 4376	1164	msedge.exe	96
PID 1164 wrote to memory of 4376	1164	msedge.exe	96
PID 1164 wrote to memory of 2720	1164	msedge.exe	97
PID 1164 wrote to memory of 4464	1164	msedge.exe	98
PID 1164 wrote to memory of 2720	1164	msedge.exe	97
PID 1164 wrote to memory of 4464	1164	msedge.exe	98
PID 1164 wrote to memory of 2184	1164	msedge.exe	99
PID 1164 wrote to memory of 2184	1164	msedge.exe	99
PID 1164 wrote to memory of 2184	1164	msedge.exe	99
PID 1164 wrote to memory of 1252	1164	msedge.exe	100
PID 1164 wrote to memory of 1252	1164	msedge.exe	100
PID 1164 wrote to memory of 1252	1164	msedge.exe	100
PID 1164 wrote to memory of 1676	1164	msedge.exe	102
PID 1164 wrote to memory of 2124	1164	msedge.exe	103
PID 1164 wrote to memory of 2124	1164	msedge.exe	103
PID 1164 wrote to memory of 2124	1164	msedge.exe	103
PID 1164 wrote to memory of 4144	1164	msedge.exe	105
PID 1164 wrote to memory of 4144	1164	msedge.exe	105
PID 1164 wrote to memory of 4144	1164	msedge.exe	105
PID 1164 wrote to memory of 3932	1164	msedge.exe	107
PID 1164 wrote to memory of 3932	1164	msedge.exe	107
PID 1164 wrote to memory of 1520	1164	msedge.exe	108
PID 1164 wrote to memory of 1520	1164	msedge.exe	108
PID 1164 wrote to memory of 1520	1164	msedge.exe	108
PID 1164 wrote to memory of 4728	1164	msedge.exe	109
PID 1164 wrote to memory of 4728	1164	msedge.exe	109
PID 1164 wrote to memory of 4728	1164	msedge.exe	109
PID 1164 wrote to memory of 4492	1164	msedge.exe	112
PID 1164 wrote to memory of 4492	1164	msedge.exe	112
PID 1164 wrote to memory of 4492	1164	msedge.exe	112
PID 1164 wrote to memory of 436	1164	msedge.exe	114
PID 1164 wrote to memory of 436	1164	msedge.exe	114
PID 1164 wrote to memory of 436	1164	msedge.exe	114
PID 1164 wrote to memory of 4224	1164	msedge.exe	115
PID 1164 wrote to memory of 4224	1164	msedge.exe	115
PID 1164 wrote to memory of 4224	1164	msedge.exe	115
PID 1164 wrote to memory of 1748	1164	msedge.exe	116
PID 1164 wrote to memory of 1748	1164	msedge.exe	116
PID 1164 wrote to memory of 1748	1164	msedge.exe	116
PID 1164 wrote to memory of 5844	1164	msedge.exe	123
PID 1164 wrote to memory of 5852	1164	msedge.exe	124
PID 1164 wrote to memory of 5860	1164	msedge.exe	125
PID 1164 wrote to memory of 6112	1164	msedge.exe	126
PID 1164 wrote to memory of 6112	1164	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://crayo.ai/dashboard?pmStage=checkout&pmPrice=price_1OgXrRIT0LdPat3Sq9947siC&pmEntry=monthly
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffdd527c188,0x7ffdd527c194,0x7ffdd527c1a0
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,3874095033064907254,7813065619361158817,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,11792724963640232152,17316307074076761100,262144 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2640,i,8362024510181579964,14997406266836432268,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=1400 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,17364806101419017239,8064793309747857261,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,7542658141520588575,12216101189946267394,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,1162565445173899734,11428587100409982642,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,5574304547529097025,17817830356030222988,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:2
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3648,i,3880070320145224540,5176267027026086595,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,6667874911860661589,199761351080953691,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,9881595834257663067,16950869524926384322,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5696,i,10448355481529187096,6929922033646422975,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3624,i,1230251744476949104,3198991389240983201,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,737950105807149658,5011970896910458543,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,737950105807149658,5011970896910458543,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5124,i,9189501846532276581,7063750132171993499,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6504,i,1103058831184551910,13057516439411146429,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6928,i,6423332073009625010,7189497261404135981,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7280,i,471095654416729220,8397996609510329711,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7520,i,8563027647040369053,12719719912893466292,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4876,i,14341121380938897065,10834821631337906344,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4512,i,2242110088371063483,12734450095015306749,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7620,i,9450654403800560542,16236962906174831244,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6520,i,9742686254436463902,13062764103984442722,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7892,i,10514066303731919972,5890355356992555906,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:8
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8020,i,5321843639931781452,823873677107075985,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=7900 /prefetch:8
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,1770791791207803106,10472979928194518938,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:8
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7452,i,15541178141816462200,12028973492892763421,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7936,i,1510517737403753924,4478797289198696801,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6516,i,17255033824959618026,3831665046948989019,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=4808,i,10395840830805818098,1425397618949180645,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=4356,i,17104049845737681708,8925986824954200760,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8120,i,6092017785700079923,10194825248550757875,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8112 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8540,i,9630535229061219141,7682696932016905456,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8524,i,10084477742332357210,16358689203038024140,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8384 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8752,i,7234227837069493108,8734338900980285668,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8708 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8816,i,5033361370041989663,8048527805484816897,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8844 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8864,i,13643684955625216616,12851882996698450094,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8860 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9124,i,18399813183616924855,15640203257900886558,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=8996 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9256,i,8186100677114034821,16777084389549547715,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=9260 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9392,i,15816877483067131542,7869617318814602511,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=9408 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9800,i,18000680473402821318,3698587870832450251,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=9736 /prefetch:1
  2⤵
  PID:6400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9936,i,4704330940161329991,9577989627224626936,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=9768 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9932,i,3767848283949812646,2050464624840733321,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=10052 /prefetch:1
  2⤵
  PID:6468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10224,i,9434425915703788711,5908777363534645028,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=10188 /prefetch:1
  2⤵
  PID:6560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10368,i,6624076614350405445,10228809951648018135,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=10356 /prefetch:1
  2⤵
  PID:6624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10420,i,340660883486492683,8325605324102679923,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:1
  2⤵
  PID:6636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9756,i,12537710811337803959,11534356045770606088,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=10228 /prefetch:1
  2⤵
  PID:6736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10712,i,9695852960575373850,18086398012881169554,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=10792 /prefetch:1
  2⤵
  PID:6744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10920,i,11691123896902082267,18073146263909176916,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=10932 /prefetch:1
  2⤵
  PID:6752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=11132,i,17705681676360943438,14698522150550299041,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=11168 /prefetch:1
  2⤵
  PID:6908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11340,i,17000406855265804555,15619365439238986640,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=11312 /prefetch:1
  2⤵
  PID:6972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11352,i,13743331732748387099,15872308467021966260,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=11480 /prefetch:1
  2⤵
  PID:6980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11648,i,4319207005296216323,11524661297330265430,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=11052 /prefetch:1
  2⤵
  PID:7092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=11772,i,270666682161699236,15742160203862878794,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=11784 /prefetch:1
  2⤵
  PID:7100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10696,i,6068361459537652594,5700567829639451524,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=11976 /prefetch:1
  2⤵
  PID:6304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=11464,i,6229584189690161738,2552751335476457941,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=12100 /prefetch:1
  2⤵
  PID:6520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=12196,i,18379919223494815559,13607743399217454427,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=12208 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=12360,i,9129987861814088398,3893704851693769148,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=12368 /prefetch:1
  2⤵
  PID:6988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=11828,i,2159345145185570763,17057422378243688635,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=12576 /prefetch:1
  2⤵
  PID:7412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12708,i,4578812670836819105,17907283027826547386,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=12736 /prefetch:1
  2⤵
  PID:7472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=12836,i,1480342783384103865,12467013710154233969,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=12856 /prefetch:1
  2⤵
  PID:7484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12716,i,3911422661291179833,2156674246909760296,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=12684 /prefetch:1
  2⤵
  PID:7640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=13016,i,3644930912680244731,5550553789827800770,2097152 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=13060 /prefetch:1
  2⤵
  PID:7660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9496,i,14494317723971238317,8036065880523863204,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=9480 /prefetch:8
  2⤵
  PID:7612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,15469643709695142931,2389560919279523626,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=7564 /prefetch:8
  2⤵
  PID:7712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7340,i,2612773998332723346,15574482486622420993,262144 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,6848652243111847392,7681706313407253453,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=3996 /prefetch:8
  2⤵
  PID:7780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,15809283308013837824,6975815538528044344,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:8
  2⤵
  PID:7776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7564,i,11366835467990212251,3053880201048416525,524288 --field-trial-handle=2088,i,10690799121604426116,10909935194315464743,262144 --variations-seed-version --mojo-platform-channel-handle=1308 /prefetch:8
  2⤵
  PID:4376

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

15ac6cac-961f-46ec-9744-f197df926709.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15ac6cac-961f-46ec-9744-f197df926709.tmp
Size 20KB
SHA256 d2366db8b5c946228600eb942e4f19e19858bf7e073838e2b0be5a97aee1f2a8
MD5 2f7147ab73d83946fffd48b3be42afe2
SHA1 794ef1dd6d9e49eb1ccd5d86848d5b4fd70b6fbb
SHA512 84b52db4c756e7f2afb35728c99f17e69d9ac70411013b82e8283c20361ad00ce6dbc97c77f779dd16dbd4c57e2d61bca52efbb4bed1a84ca953826455c1ec21
SSDEEP 384:fZcIhsNV/TE6vVUna9wvzJrqNg5OObjI9G6w7Mq:3hmCa8h2g529Mx
TLSH
T164928D366C284D76A9F7E151F58A26275FF48177EBD91A40E0ED9F0D01EB46C1306C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 fee06784a3c2034ad28476e6b7ce94a4a2121d90d0d7970b75687e6a45e83b40
MD5 b312ce62a9a21a749c427714cf9c861a
SHA1 742f33afc671e765dad8621a68058a11688d932b
SHA512 85500a6bfdf9402ae61ad30e9ed4dd65e39836f93361f2e42081f474f78bc9b4fa4709ac00c048415226067abe2006c4842c76548b2ea389663e04d2adf9c531
TLSH
T174E02085B386D3E5C10D96DBC2DE63D44070B009D6DCD9FAB707E194540240E4F85ED6
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 67KB
SHA256 5e9ddd849c267cf191b2db00f575728d4b086f3b4fe31417a455bf0f4816514b
MD5 088ec17d4fa0e1202159915b03be22a7
SHA1 382daed964422de3fd5b9868d05253fd3ed4ffad
SHA512 c09cec454c2ed9330ae55066e690a1a017b3e401875a01df398872a7077ef7dd76b81cb9a5bd8d65e49b6170013f977a348e8b15467a9c96e1dda3dd949a030d
SSDEEP 1536:pAtMV9QuLlHIH7W6u5giUEJ/hnyydpMPoIShQg2WnFIZ3:pAmV9zZr6u5dJ/oydpMPonB2WSZ3
TLSH
T1666302B5D4F9178620352C8EA4F6907428EBA7F47950E9F050C4DF488DD8A7BAC08BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 405KB
SHA256 1b60a6c04cc80fa726e3c5026255272c3b75303cc1666700305b3f9acf8b2226
MD5 e6b338d0fcf0d823a1874c7606dc62dc
SHA1 501f5d87f43ac13f1545286e3fde99eb15c5c5a7
SHA512 5cb49ce345babefaa0b4070245244a8cf2611000c2fd124532f43c764022177192f62a14090d3b5945544449788612326e215446cbe5f1830c4309720cedeec9
SSDEEP 12288:Ph3qrs26+46/k68I6l0X7+uHw8AVTQPUg2tQVy:PhqrL6+vkzI6yIVkY
TLSH
T16894237C930EA8852F3F559A617D2C8A1884F8F5CFD95E81BDE3E7E150A0D090B5B328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 204KB
SHA256 4656da2e3ece5a9e9c04824f6145cae8eb173b661b1f3399a454fa02a0bb0ced
MD5 651e693d03433578081c2087bbeb7816
SHA1 a7d1f8668e5298eeebce4613a56dc7c708b11f09
SHA512 82bf31f4f0257ae4fa4652d47a778e53926fba7311c6e1b35bfff9c1d58117859f57f7d31a99d8f1fdc6721fce06cc6b73f604518d05b679141d4fb32c70792f
SSDEEP 6144:0a+1x3rUvr7F8+tu8VuT/sLbNp1AbHq+GLYQ39ks:a1x3rUfm+fVuQLJMq+gks
TLSH
T13824132804FED2B093A7178E24A0B81ADDC8C9F7DD19875838B15753DC8D7E1A837A9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 512KB
SHA256 9a55f5b4da42f0b12e14cf3b4959f2bf8c41b356577211d90f2df96e51d083c1
MD5 fe53ea7bc9881cd79475121c91c84dce
SHA1 e467d2c0195dc4c5252b9068db63dd4879dcfbf2
SHA512 1dd6b7c55c1702df3f10f88a4987a0a5618c2e3530062c0b201a7013f5481ab6950bc87b6ffdecab0e0d772042b904f7876aac5d3ef7ac6170adf5969da60031
SSDEEP 6144:yvzOResswwSQmWRPhkcIJd222iXCdBpKklPoxLyz2DIPjpAmZp2wkhAM:y7ORessbNRpudjcg/Ly68dfp2ww
TLSH
T172B412718BF0B7C5C9269972B2DE38CE5D2A1A2C5B0CDC1BF2618D25FCB954EE6406D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 256KB
SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
MD5 be569398e0e595dd2f72e1bc4cb2e4c7
SHA1 a7a59eddb0ea2dacb98ff03113480327c1805c9c
SHA512 475d255ae27e373971a32efb3c28faaa9aba5e3b6790329c211e038d1258f84b826b88aed8c7451749a608dad9aa433b9454520314c20339fe6527872bb15f61
SSDEEP 6144:oxQsrSL1TgnPaBehiQ0tlOw49YjoCrT3:eQESLNMaBeGyS7
TLSH
T14644BDB4FBC3D782CB132BBDA43D3D374BA852C561D05A0744639D26A598B26E30727E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 512KB
SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
MD5 063ce058cf92f6249d441c03c9dcddf1
SHA1 6237aa7a601d9500ac6bf6fb7ff57c64a936f9b0
SHA512 cd8f11170f42188e4a5334ae234c046ae722c3c2f7e3c5c428a04b3cc382fa0cdb160ec992db5a3af7dd968e428fa99475bd7375724bc501e4a86bebbbfa2df0
SSDEEP 12288:JqPcXea7AxraLRORPUdUxYUtrM3GS1fhQBcLLY1bKd:Jq6VQRPMUxBTSACo1G
TLSH
T135B4237717071097D53AB37022CA8BCEB7AF77BA4B01EF7629239744E2C8445F4AA490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 22KB
SHA256 deee03b883e06fcbcfe81dcb5d8fd225bda7a80598f81d6584983a1cf1a35807
MD5 2c74ecec17d0b3d5857e6fd4419b540e
SHA1 6cfd382daad80de873d05f341ce1c61411ff0f11
SHA512 caaaf694953607ac8d65d738ccc262e5631e54556e867766f163bc0cf6014d191e826442f20e1e12ef65e78e433c65030605dccba3db0e8190992963d710c124
SSDEEP 384:bUHFcxYR4j+Y6voNEitCNqKO6n7/lY6ZRpYt/80eJ0PS2B/4VBf3mUkcm+oyF7Ie:bUHaxYuj+Y6voNEitSjn7u6kUqS2B/4l
TLSH
T196A2E170DC9B27FD61299FE4E8B68FEB323AD06495A5E1960F4DD861343C1E00D28E69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 21KB
SHA256 c12a32d718f4dfd14c7b9f05621b3bd1f2edddcab44ca82eb5360d1a873ee1d8
MD5 f4fcc918187d9d1d462b2d1245d7f2da
SHA1 2a4e146e7370864e8f3178df58fe04df8130ae95
SHA512 45e5c3b19f1039f6f6532d6b6e857d0859cc9761fed12b94b944307d8f1adb5bbd0b079a16383535eb1de6b2d991d93081778d8525c2310cb04d27468683f184
SSDEEP 384:V8u90NuYeiCe9DlbybMa5ghGRuEe8Ft+v8SQjg87ejYpq+tyH4Bb6QjRsjWd3CzX:VGNTJCsp2b6SuEexv8fg87eortBb66bg
TLSH
T10AA2F049E4459FC6FAC83600BB18EDD90EEDCA53C563890598FB239820E05DDEC81FAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 52KB
SHA256 17ddec4e4efbc800a364d7127ac4f8a501ba7879a72b4bdaeb9c7c8d15217107
MD5 41c921be51d1a8169d623ae9a041b5f5
SHA1 fc64f403ace240d4e12c441f8182dfde1c701abf
SHA512 7466a773ef225c9f3dd68210060a24877d75fbc52b29261c1056237e36dd9b32b8b65daf932ca35d5166777752f7e9babac8a51757cb50210a3969bf91175c09
SSDEEP 768:ZBkMBFYkFVUoHIS/peJfhPKsIWHuKnF8Yh51VjnD171oHfWdT7/atoomxN4P:Z7NHIShe6yuq8m51xpu0/a3mj4P
TLSH
T1E0330279D331F95F8A8989A4B39AD03370ADA020B9B7C4489D24D1E7C7F276F74E0086
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 18KB
SHA256 e20a00a1515c40dce399de85108e117f334ad3a6cdcb01d865cd7d60d2edb963
MD5 bd9e33504a5a6378ade8fcd5fbcbac04
SHA1 eb988c65a499c1c2cd64e4371e8cea618d70ba5d
SHA512 b588cdf299c19f43e91012da77ac32309be2ab64b50ffdb9c6e12682db30747a4975be26d20bcc7efa8cd26acf622e14a3f5dbe196c197556b729f2a394d0aa1
SSDEEP 384:bNmjcURwbtqxRi2XezHLWmGvnXdKV8TFL2twVeXLxbVsygrZK4WoCq:bNMcU+Mn9uzHLWmKnXdKKTFL4xbVsf4O
TLSH
T13192CFC91B112DEB206D452462996FCD42A7EA1E93A25E813C4C8037C76BBBCAD311DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00012f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012f
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 80e390351e1a9597b17d66878bf3bcf59287b8abe9db76b055ee079e3bb0c85e
MD5 6a71a4eca83f6db0a58472813133edb0
SHA1 418ce097ae51016769b42bf2b5c0ea408ac5108f
SHA512 2700a18a54bbacf106e7721dbee2a2c2e42506971a5c1cfd39c15ad6fb545b234af0bdeb108f56dc8b0bcff0e948c8836e400657bc5914550037898924c7f329
SSDEEP 96:GoE5Yadb8uvxocHzZvAknx6XbtMW23beZb74SD8mQqtap6T+2lc7uX0weIi6:DUxxWvBMWc2sSDkqlTNlDta6
TLSH
T1CB12E5605C91C156DBB886FAE6E82FFD31F884690E83CEC721455E3D790FFAE6121808
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59c886.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c886.TMP
Size 3KB
SHA256 f1321a00007b91e795f03ca8753f7250644802733ae437bbcc995e07b0efc83a
MD5 823eecf96c12e34afcc41213120f5e33
SHA1 a678c4c7f73287cbb1ba44bd26619cbbf00c7093
SHA512 403d183c58ef5a31ea89c53f53ab953637cbafa048e6eaa17aa5f562e45ea21a629e48a464abd1a246ee6ded5f2676a07b6ae2b0f093a83cd39c87eff429bc63
TLSH
T1E26109380D22C886E3B117B1D0E23FFC79F991B90E636DC9018499BE9A0FF63A139504
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 38KB
SHA256 534b1384e2d9adb33029c673196fb56ed754bdff2c5f8660fb0fc88e9864b79f
MD5 f298333ebce2b47eae801d1f8b87196e
SHA1 a0a44f35ce8ec2acf20eaabde6e8e0a8d20ad2e1
SHA512 acb03baf3460bb14051f38dfb884da1369d9cd476a35b723c485ea1fa223c9fe07098a7edb8c7e03d9c960ab5d2e045209c1368c4c92c016882987907f0bba5e
SSDEEP 384:DwPicU0t9ltr++we441nbAQRDzeHA9Hpue3GXqNJkJ+IewefmsJYruBe79GS6a8S:+euCSi1ge8PNqf3u4iUf
TLSH
T16D03DEF783F8A63E9E6192F1AA152D1BCE5D0921531C3C6AC9D4FF0793E1432D242A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries~RFe58f2d7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58f2d7.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

eb7fea3d-7f77-4fa7-8d50-4072e3d181ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eb7fea3d-7f77-4fa7-8d50-4072e3d181ef.tmp
Size 211B
SHA256 01cac02792e4a6493a6a5c4a97b190d1964ad96df5473c09bfced2b36c13fb23
MD5 7fedafeb8906f67ee3d0fca4e75cbeee
SHA1 c65b4fb00c82a943bb2541395d7569ee4f4c7bd2
SHA512 c6444f34e3a4ffef076791f2ec2a3e4df8510bf4f75daa750ec773413d6f479bf603b6ddd9e9b37dac499e47e792471c2495a5feeaeed9c51b37551f57b2aedd
TLSH
T180D02223330530B9AA6C7E8A45EAEC8FC32B10600946DDDA10E0E8E88A394AD4607D40
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 60526ff9605d5b1e2db153fcd055ee71707d46c91a1d069385d1bbb18115409e
MD5 2c4dc1151c0f175ca66299ebd25466c7
SHA1 bcb0417433b654e8c6de39ea6bb47863b6a70e13
SHA512 dcdee12433f934ab0e0c25ab3e48af28611e7e5841708a173aa5ad907d5faae57622e810b842574da7f412d5167872ccc32e0ea043ca164965b3c8171e934ccd
SSDEEP 192:sxZTR9yM/jK1Ml8MWO4/fKs8IBc0scdpmgGHW6+WNE1tqtO/YLIV/eVYIgrHUznO:sxZTRuO4/fKs8IBvXKHb2T/k0YjaF
TLSH
T18A72D7125A249977CCDAC219B935BF52D6F50463DE914E4C99FCCA0C04EAAFD2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 ec82945d81a8a045dedb62715213e26966d4f25b9ebc4c58c2b4a7f09319f95b
MD5 1e9898c209aa7e31eca51576e520ebb7
SHA1 f35dc92b8745041e3fbd3e6b865bdf68234a82ac
SHA512 4c37cd7c7805cd635b89507d7b845befaf4739b3b495cae8bb9e23a26afd3e1cf1904c514ed59b7330d8b5537659cddfe69693856a825c989d125418d1c5e36d
SSDEEP 384:sxZIRjqd2m14/fKsuI1iBQXHraTk/y0vjaJ/Vjai:s2eom14/fEI1iUHrJy2ju9j3
TLSH
T137B2E7535620CA77C8D7D519BD31BF62D6E50463CE914E9C9AFCCA0C04EA6FD2612C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 36b81833dac1bcb0fac7c5ee1ec2e92053e1a9b24f139cf4e8599cdd57dabe48
MD5 934566166602e4f781df7c48e5cdf0f7
SHA1 48873ed35ce31260129311d6368ea69146684cd5
SHA512 48226efdf79faf68ea9d0dc710fe41c1db28bf53268978787b84c779fa5f8d29fc0547f2f0df9fa3ec723404f9cbff9b36af61a640c13ef67319209ecbbf34c9
SSDEEP 384:sxZIRjsm14/fKsuI1OMkZHrvTk/e0vjaJ/Vjai:s2Am14/fEI1OnHrKe2ju9j3
TLSH
T1A0A2E75356208A77CCDBD519BD35BF62D6E50463CE914E9C9AFCCA0C04EA6FD2602C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 aed20b7b9dbb9a56f1b646785f798910deb1d695147d0ad0cece3f4e77c06a9d
MD5 7f8ac167a5c3a53afbeeeee8626c699b
SHA1 985469378bcf19431ba3c29a4a0f27fb7f39bb16
SHA512 8301a7eb0ecef7affc6f79737daa40f7b1802eaa6c30dbb37710fd2d3193b46e856e6b025d0b95230a7b18a941fef97d0f38bd461e9af217eb9625d13c7ff6d0
SSDEEP 384:sxZLnCjKjsm14/fKsuI1YYCxHreTk/r0vjaJ/Vjai:sTCjKAm14/fEI1YNHrdr2ju9j3
TLSH
T197A2E6535620CAB7CCDAD519BD35BF62D6E40463CE954E5C9AFCCA0C04EA6FD2602C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 a093a29819db9315cbe5aaca962b32e72025e3ee49a6e0fffda7a761c5d0c14b
MD5 fc14447c3c05ef20abe2652eebbd0d86
SHA1 f00613f867ad7302a24882a59f84191d8eaba456
SHA512 7161912853517666d67929ba4104dcfbfa1473e2c1d777e77e9350d1a1e73fd8dafe69cc4b1295afb748b9968f9ad64b180afe747180cc63993e89f6147c07e0
SSDEEP 384:sxZLnC8KjuO4/fKsuIByCHHr2T/k0hjaF:sTC8K94/fEIBVHrskMjO
TLSH
T17482E7126A248A77CCDBD119B935BF53D6F40462DE944E4CA9FCCA0C04EA6FD2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8335b5033d2312f5593f3d8e6a948f31e1a7d56762d1d07933626d7bcc8df341
MD5 85651b7d2e0ec564b11971a13928088c
SHA1 4e284da97c5c2bb9de8add5a3440e20e46ea41d7
SHA512 9e046d435b7f05988b86e6c99ba2c757dd8ea02aa08314aecabed2e5c4869e2fa1c8650f57d77af5f1d4c847356f6d1e4edb20287eba39c66b5333097fe005f4
SSDEEP 768:6As6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNRrop9X:6As6pD1WvxzWju1jahILIsNqp9X
TLSH
T13ED2FA3B680CCB7E4F841E5CEC2A6F976DD801CBAB98899447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\70599668-79a8-4baa-bc5b-42404e70b9c9\index-dir\the-real-index
Size 72B
SHA256 8ee8b68e81c98ac099818a10c11a6baaf4b9c413baafe60171986d52dfe74c4c
MD5 ad148b7b8a75aaaeab40ac19be753b12
SHA1 38d2e72aff38b351bff0004f0562ebefec998777
SHA512 accc7e1a69c1dc53781e0662bf06e9f3652aabdde06e015b7c972b2942260495ac3f93a0d29ce9eca969e09bf38961f3eabca8174551f58354fe2088f60aa163
TLSH
T1A6A002F401764847F1490AB151420A912314DC556A73C70696D4067F9C92E5CA602098
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 2KB
SHA256 cac2210f237310ee508228b4f3c1a7043c172ff7a9fd06f54150fdfaeacc34fe
MD5 4e308bc18115941925a84edded0d96bf
SHA1 e930d8f03a89036776c3d088b666f454cedfe8bf
SHA512 dc69e13d5a2c65e23795253b1b94b82e6190b19f73787d74eb11d0db21d88f3f4715e229300bae5d103fa6f0d51027a8abf5d4726e9a4e00722725edc1cac9f8
TLSH
T16441D68C0C42CB6FE9A840B31472A4943770A8CC0A955613AC7C3235BD4777D295A3EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 2KB
SHA256 f8991e04f7123438d5d956300847d93763db44cf33bf537f189dacb08f1214a1
MD5 3fb355cfaf91064a911fac9b0271c709
SHA1 c1f2c4014980de3364897a7ac68a43f4f09e214e
SHA512 9d23b7185d5f0778237523992782853431d3dcd57b85251fea4195f3789560e48bbe7812f9c6dac23d3e28cee3c2c568953a92543c70d5264a5f89b251f98afb
TLSH
T1A051C94E4D476B6BC99C017328B70484373574DE5A888A17A45CA574ACC36792D6D628
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587412.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe587412.TMP
Size 2KB
SHA256 dd900c6beb8646be8c91eb02c2abb3aac3e06e01ead4c4eb5e154a6eb562ce73
MD5 2b573b5efd975d10ab17287213452121
SHA1 2b4c55b8685e109985ee4f7efd44fc14b6c25a8e
SHA512 fc9b4bd6dd1e46b21c6a19ce1bf61d047c9fe13151711457c4e1c66726d43b5222275a1957fd802a8e79d391e776ad2cb0f7d745181b0b5622eb4ef0c9f79648
TLSH
T11041FC9A4E81CA2EE99440B30DE368F43335580087557F4378FCA236ACD27AD3E4D1D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9607515f-8c8d-4274-acab-f49f8791e4a1\index-dir\the-real-index
Size 72B
SHA256 14a4b23b6b9a64f442b2f24d02d37a457e0ec9eee632d067f4812b8b77e9f339
MD5 0637aaf5875552b0c069e9b6795eb55d
SHA1 9c449f7427566ded913970315172d95a606fa6f0
SHA512 effa44a47fb9ea05521c13c234284e53ea7054d6dca1fe2e3fce57c2bbff888262162818bd16064c24339c1ed2125dc0c716431db68e229e0a8b38af2427e3b8
TLSH
T191A002B047449901D00497B134536F926290DC324A42575352B2B57CC954990D132404
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bb19.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9607515f-8c8d-4274-acab-f49f8791e4a1\index-dir\the-real-index~RFe59bb19.TMP
Size 48B
SHA256 6a9c4fcd0ab4d9e5b64ceed27e6c4db4df50be3d708678b83b3cd8c6081a9d56
MD5 fe092988c53144d9e2e78dcd328bca9b
SHA1 af6a8884f5bf5187ae851e70915b38c5b03588c3
SHA512 a24fc959c2005dc7ac7de9fada626eafed0a3dee153c7eaee0a5c7f08e677e9fd76c27901dcd1e07603a363b56010ec3d1fbc08a9c7b9cf401a94997c2b31893
MD5 SHA1 SHA512

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\623cd082b6202da0_0
Size 62KB
SHA256 99dbe875088117b505f6ab4eae3befbc7820dab396b2a5ef65e5fc40a229c373
MD5 b3fff43c1271067ad1e7451f9d0ab30b
SHA1 0b92c527116008143f093a9f4827be95a5cabd09
SHA512 2ae30ce202833c6a2667660604a7e2ab0b3ab411f09dc9c21b7ecd7cdfb3348fb63de2140f176b1e76acb3353f06a2fae4257b12cb0f9c1d14f048f4292b9cf7
SSDEEP 1536:LHFSJyuBHKut3JWWOQ7Dt3/Ydsllqty3NHdxNUF5HPwqpzG+/i:pbukgMgDtvYdIYcqj/i
TLSH
T1AD5339A3B262A035C7AD21D564967F04F12B13561844C9EDF0BD66913F18ECB62B3BF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 4ad2249015c67e0cf8dd740ba7fe71465dad0b5aaa4f87aa134504a9d21adc1e
MD5 613a03ecd91d56b40d0f5c648a279815
SHA1 e5b53f31a6b317343d4e5cdc5991c43e73614516
SHA512 d155f913465cb2799ba20abab3d78fd742fd81fcf5106c1846959aa96d59c90101c26cf2ae7762a0c1b47ba37cc8faf66d6cdf12fa0232e2165db882ebca0885
TLSH
T1A0A0025C2AC74431D50A22F82AD711856324CA10430A570549E00E45D859555454203D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 0cd3b2661520980559676c769be6aafe30b3f09b9aba19163dcbec1b478f73ef
MD5 385e0783c0c54aa5ef30b1f4315413fd
SHA1 6c508a9e5467af902b309477f5ead6aa98ed84f6
SHA512 0a1791eb5d023b8c913f946f47c717c1a2bbf935dbcdf6b29654221a8bb69111c8447db0eedf1785f1594d1770f4526e1c7b62fe2094a1dd7c5b42c6e01f0b1e
TLSH
T174A002900380801AC01255F6AD5212413391DC942180231740E90249DC554405DC100E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 5ded9f71ea7870a0f4e17fd1227dde5948f15821e2f9f0004fdb7ff65a9e5daf
MD5 3603d5149c9c7d95ad3c158b3bf36888
SHA1 1f05f31c37c4e07723f9b3966f23c312ddc5f2b7
SHA512 2df3c520015030a13d57d3fe79f25b8235e8ae6445e3b2526d0b6b2dee7295c9a9bac6e63be3d7ff4120446647e9294e8e01429ee23ff3d7d1f7f1d5c19ec3ce
TLSH
T133A0025862C0A071C24A16FC2DDA01452264C914170E1F4559D058B8C89864D4A55C3D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 d7ec279edbe083ff0fc88a2665cb14b28413ae7e358cec0afcfce9b821239dc8
MD5 53596c7cc72edf8381ae77f3c70c2ef0
SHA1 75520af9de64b6ddc2320ee9261f9c1f9d66b198
SHA512 0303d632c3dc7faefdec7ddaa98ec808ddcc89dbc5718156017265709f50712cb5fcbad1f4c94be3239798a43d534a181208ae1b644bba1b37d5aa0b25540bf8
TLSH
T1B4F027B76EF62810FCAFE3D33470947106417C1C8420FC4F585AA68380B03652849CA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 904fc1a677d1aca82411652e1f72eff27c696f600247d83ac97ac9fe27d170a5
MD5 167f7adc6adfa6345cde2e825bcef984
SHA1 a0e8a1d6ecd35ba8bf837b7557ca71939a621219
SHA512 9fef75619c057db27e6ddffdae79c135851ceacac1d7e5940486a7fff9f7c767638b4ea2278f8c4eae0a71ddf589fee9fd5298cf953df15ef429c0a562bb5b40
TLSH
T1B8F027B76EF72810FD6FE3D32471947106407C1C8810FC4F585AB69390B0325291DC66
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 5265ca366400d9003c41d721b08993492774221b1ae8d41152d47c7e91065306
MD5 751519d58fd177348f027f8d89b83a4a
SHA1 cf44f042938e0c18d98465c4f571dc3c3263ec95
SHA512 c3d7deaaa7e7397c298aa09cbaf5b2e76223c05eeef3bf231998b3f40f0f0c0b322ab92e51dbc952315e0be92d355f2b0744bba995ae6715f1dcca3b1837b283
TLSH
T115A00251CE559455C0614274ABA201882E90B8FC5A49629146BC14E9989014081E3458
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d3b6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d3b6.TMP
Size 48B
SHA256 beb28eec4fbc70a90c9a604cf8f2700621e792658306253659ddab1ec298a25d
MD5 07a322383e12a42fd5222d99e5789892
SHA1 ab09acb2d7024d7a099ddf1340055f1979a90aa9
SHA512 c4e98cdfa2fa27c2bac1c489400e6f54641de5e61595cdfd6c69c744efa86e396de1d5d7a020b9c9587ee0297f7781d22db1ac132e829466223964c1c1414f06
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 13f4d702025dd2206aae5157b67fb4a3d6a0885b5cea2c9cfc184b2c8e91409c
MD5 29bde96d009a46a2bd3c198d7c1c1ebb
SHA1 d8cc37bdd0bf46dc6449593defb4f25fb234d58c
SHA512 87ac20b37f96187d1b6016cc6bd3ff77251f84c8ec3dcc2a6c5609b7e6bfea8f146535a81a86d6539247f2fe07a74bcb48b93df93125b5ebdb59e0ef56200bf2
TLSH
T117B0222080202A03C002CBB00EC33082B3F00C080F0B0303A0E00308C8AC3B2B232200
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2779126231e59079476974dcf9dac904ed25632992036f2849e88ec7c8566515
MD5 78d8db5273fcd2f26845d13222fcacbd
SHA1 a0917ced69253cf720b9f44f7653963cd9c0f331
SHA512 9e07a946b457251f708f0dae71af44cdf5e486083d35e075c89a71fa0a2448cc2c0d923406113c93b59631b9b4c9c65a2333ea2696b8828d3dbbb4c6ece663f2
SSDEEP 96:KUAAKtePbJSKqoCe589p7nTkjn2PdhkKlBdzkRJpW7w:iieBe589p7nTqn2lhFBdz6JpW7w
TLSH
T13BA1F45236B703123C3E2918E264872A8782FA637418E92F77AC50754E67E344DFC5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594145.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594145.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6dfe5a7f4afcf5cb42919e6b6a7923554e2f76e4614d75914d1dfe620d5630f7
MD5 677b9184fd4a819f34fff3c6d84a5801
SHA1 8ff7e990fafe56dc13e091b65e5ca36b6bac920f
SHA512 ae292219974ee7062e87d0f0913a13851a52afc777f5ae3d4ce94e931caec04a5397f2d6f707dc3131d7ad78c5207e99ee46e2c4e497619b954289aeb2953fcb
SSDEEP 384:/ZcIhsNVQTE6v0ec2a9wvzJrqNg5OObjI9G6w7Mq:Xhrzc38h2g529Mx
TLSH
T15C929D326C284D76A9B3E051F58A26275FF88177EBD91B80E0ED9F0D01EB46C1306C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0e50d05ea1952082e9f38f1e7997e13b1cdfddf8033ff3aa44a7b67fa2ae4b91
MD5 2b793f57af27db1f7ef0ebcb114f83e5
SHA1 b61613cfb026c74b968493db3f11a704f262799c
SHA512 8824127e9f0a60df40ac19e834f520e1b9aab69d20ed3a391c32b787f73352ef23c4f12390cb3ea5617d4596ecb0d85cef940d2b85b2eae5ffc5d75a1f7eabff
SSDEEP 192:qONL6O7+3hQmiUykMGttb0j3bvgGgN6U6:qONL61UGt9wXgwU6
TLSH
T15502F93A6C6C6CBB8EF2AD45F58727135FA5117BE9A62F40D5E81F0C00D765C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 996bb0d03d19d87da1dd378a1344bbd8e3e99a353ccb42acd7d868fc48773bae
MD5 2f5efb1d92dfc370e9d6eb8d0b417129
SHA1 32846ef28f433c28ec036ab06fe61f10d3287696
SHA512 a0d2adeb3a7a45738e234dff27c867e3d65a79e0241270b3d31b378461c1a5491d46309071eeb7f66f24270c7b60dea94ebd87ec5ac3456c2ce3c1d701a4d662
SSDEEP 384:0iFiZcIEzsNv8TUNTUlIl/TE6vVt7a9wvzJrqFg5OObjI9G6w7Mq:PFQ4KwgLze8h4g529Mx
TLSH
T191B27D335C588D7BADB7DA54F98A36178FF44177DAD9AA80E2EC9F0D00AB0AC1306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7f361c4f0afd0f81ed4c3deb48aa903102795b0d09596f827f5da2e56cbeaaa5
MD5 d498380124f38717cfa514541afbfde0
SHA1 26af91e0fbc85f95351277bf2b25058bfe40f5bd
SHA512 44ef407ea7ea295bd7d875a261995df1b39dd59637b47ef409212ba017ba8f096570ccb3ac80de8dcb53253fa6e0e0a863baf45da5382300e9270a894c378820
SSDEEP 384:0iFRZcIEOsNv8TUNTUlIlbTE6vV+7a9wvzJrqPg5OObjI9G6w7Mq:PF5lKwgbEe8hMg529Mx
TLSH
T126D227F258DB8936E9AE9743B77D2D134EBCC067B6955A40B3D89A0CCC960BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1bd75634af2abec6f41e7392eb5a49981cef4991bd588bd7c15c296527d1bba1
MD5 d5d60390482d1104dccc145edcbc9c4e
SHA1 4cba886ed00610a9db38ad23ff0b4c68b36774b2
SHA512 edf710b7b9d9588f1922516f16c9c5ed079fb06cd4a947d4662e992e105a084342fc0ee18dd54d8fbd246f2d201ddcc7527b253bbe5c51eaa2e2d85099a115f6
SSDEEP 192:1ONQ6O7+31QmiUyCM5ttb0j3bsuF0SJrqO2cNg/qeJU6:1ONQ6NM5t9wvzJrqIg5U6
TLSH
T101120936686C5C6B5DE2A580F58736135FB5416BEE8A6F40D1EC2F1C01EF56C234AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 4d876b73f5dc871a4cc94cb3edb3eb8a3c34ba2cebd715a3d66ac6ce0980ffcf
MD5 d18baed4bb9a1921e6909c70b6ba3a46
SHA1 b625d39488462a468b502d80939bddc496935b67
SHA512 994b7dbd992d6e3f654c42dac1c4bf9d76d33527b154170aa1e391450439045b702e17b9aaebd7dfda2c7e9e397383b87bf24b32cedef9cf7ff98d2695b58a55
SSDEEP 384:0iFPZcIEOsNU8TUNTUlIlbTE6vWL7a9wvzJrqng5OObjI9G6w7Mq:PFHlXwgbge8hog529Mx
TLSH
T117D228F258D78936E9AE9743B77D2D134EBCC067B6945A40B3D89A0CCC960BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 011c16318b4f4026ede9d40c0976b2a538cd2418be8fcc44ba361b9d0a229a8c
MD5 28905e60d4d4d93eb5693adb20a679a8
SHA1 6beb459fbf83e9e514ee9566a0f0a4d17f6b1670
SHA512 92ab318fb9901cf72bceff5731a4b81e8226b811b73df120306246dbc1c025d7da27407ab9510c1c0e3577bf9cdd61288b5e0817e9032e2d98e1d57b1464eb86
TLSH
T107E00103530004FEC87C137902972A3632F380B402F242069E2141744C577001F30FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e1e3c4ee16d0f48c7515c00fda324a639f2aaad6f3fad3243040d63bbba6a6f4
MD5 a960fe64c2d103b54c4c858a128ef038
SHA1 7aa023080005cf40f1573837593de49c4e706235
SHA512 3bc72841154cab9ae0f2f7f9c54a78cfa0dfe7a819a391b548660c4b3a00cae92d3933eeb2ccac5b3a9586ed7ae0ecbc94442a7bee35f1f85a55500b3bcaaa9f
TLSH
T1D8E00203530004FDC87C13790153252511D3803001F10105DD1141600C176001E30FC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f151072a282d663dc7832bd377d0e7506c9565b302a76cebfc1e97f04eced0bf
MD5 bbec8cae1c52e52d9b396184499ace28
SHA1 947b2ed5f6c645b3450251877e93f1b52ba26579
SHA512 004704bb5a881a82938ef4cf6f71ca14b151fac3c5e0eed6e62c82fa04a96b52c9e26ec9fe59d82f79087ac94b4f7e365f250527a4e10c47918d2e43fcb8e8f8
TLSH
T17DE00946930044FEC8AC137902A72B2632F284A416B242069E22457668677101F30F89
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58b3bb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58b3bb.TMP
Size 392B
SHA256 73c797a2612862597ac50ae55173b9d1c5b0507c4e008a994036c6cfac419d25
MD5 8d78ec0fe8df2e285f752733d1b67576
SHA1 50f6474959d6f29712cf06adc81d6cfb736daeb9
SHA512 414b769150e39777ec7a78307d0d08d63a8ff2c3a6610dba7359ccc27488f19746403aee3e61b5af8fbbc72f6817b85e9e0ac752dda17ad8b9a660dc9fb83b81
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5128e8ef455db886bfa376a6acf059bec39d91038d0c23f90b38a97c6f2289dd
MD5 9bffa241d93287e5142b42a4887fd34d
SHA1 a7d3b2f779b8741ad23f3a21b0e160bc0b86c61b
SHA512 56dbdcbfac8298b0a41cc79d681b47e072d10464a0151d08fded37f33cfa5f3fa84933eddd68914e2641b9884ec3d1b1bb963c0a7fd9da0f80a7cd3735353a85
TLSH
T11C41185CAAF90158F3B7BE4BABF6A56D487BB9372E0AD05D10110E4E4623F00C862737
MD5 SHA1 SHA512 TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 d9eaf9b057aef11143038b56914923846f5e98e29fa6de78540349cc9cc5e80b
MD5 cfded40d664002723fc50491a473279a
SHA1 acace9f504181b7ef693b1a979a00ef142fe658e
SHA512 bfea5881de3194d78eb7ca4b159f19a59c6542c05bacc8310c0e2707b804f0f163044808a164102463e15d4b454b7b716d84a23d2635a1d36d3ca4b4e433b03b
SSDEEP 96:8Pr9JQQ6wt0UM9J7u9dal9Jru9IjS9JnIu9P:G92h99pwd695wt9BIwP
TLSH
T1DC02CE40ABEA2656F2F7E971A9B36721AF7BB9054E148A0D0180911C0C72F04C97EFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 d322a688ba12bbb9ab4d8b2302265503c41baa1c9a370083895b5d20cd6eb967
MD5 98c9fedf104b62679ead9b46a59b708f
SHA1 8a9ed642a0251e19981de4cb52cde96030383cc6
SHA512 0fed22b4228942927ea45380170cfe4ad20d3a004e118518d23de159fc619819533d4648dc59581bb00de1fecb8ede882921deca0f2ceb7795bbd1b0303d1dc5
SSDEEP 96:JM9Jlu9jD9JL3SJSoRwBoz0D9JQQ6wt0fl9Jru9IfS9JnIu9P:i9vwP9F4LO92hd95wd9BIwP
TLSH
T1C722CE40ABEA2656F2F7E975A9B32711AF7BB9158E149E0D0180910C0C32F04D97AF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download