cd079e803003a86d60f41cbbf77883e89d47f62d16d0df7d46f7788027f7f4e8

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 04:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Windows系统调校_20260510_603b2ab2.exe
Size 1003KB
Sample260731-fbvv9scg64
SHA256 cd079e803003a86d60f41cbbf77883e89d47f62d16d0df7d46f7788027f7f4e8
MD5 be97497ef4a03f89caa5eef2440766a4
SHA1 b3b70716c3279f0fa9576cea545a41834408f5d1
SHA512 4b519cf55654ba3f679d1a44e9290469a261f8bd5ae5910b1f88ef931bfc56e2b0e95fb6c5304c3e650d87644e17f76e8de1cd63a9cc76e40e5f92842525c37d
SSDEEP 24576:4Cizy2BlvXkI1ooKTuB1lqQ46Ywm84k5wDZY:SVPR46Dmo5wD2
TLSH
T1BF258D12B3D7C1B7EFA225B2C1B516321A3DF934037CA7DB7384192EE9916C19636386
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1983909539\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1994403615\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\kn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1994403615\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1994403615\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_776019246\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1983909539\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4324_1534295853\_locales\ja\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Windows系统调校_20260510_603b2ab2.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5944	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299465999912903"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{3F2C7B6D-2D95-4706-9F43-AB5A32400CBC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6820	msedge.exe
6820	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5048	Windows系统调校_20260510_603b2ab2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4324	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5048 wrote to memory of 4324	5048	Windows系统调校_20260510_603b2ab2.exe	89
PID 4324 wrote to memory of 4676	4324	msedge.exe	90
PID 4324 wrote to memory of 1764	4324	msedge.exe	93
PID 4324 wrote to memory of 5944	4324	msedge.exe	92
PID 4324 wrote to memory of 1764	4324	msedge.exe	93
PID 4324 wrote to memory of 1764	4324	msedge.exe	93
PID 4324 wrote to memory of 2104	4324	msedge.exe	94
PID 4324 wrote to memory of 2104	4324	msedge.exe	94
PID 4324 wrote to memory of 5092	4324	msedge.exe	95
PID 4324 wrote to memory of 5092	4324	msedge.exe	95
PID 4324 wrote to memory of 5092	4324	msedge.exe	95
PID 4324 wrote to memory of 2924	4324	msedge.exe	96
PID 4324 wrote to memory of 2924	4324	msedge.exe	96
PID 4324 wrote to memory of 2924	4324	msedge.exe	96
PID 4324 wrote to memory of 5456	4324	msedge.exe	97
PID 4324 wrote to memory of 1936	4324	msedge.exe	98
PID 4324 wrote to memory of 5456	4324	msedge.exe	97
PID 4324 wrote to memory of 5456	4324	msedge.exe	97
PID 4324 wrote to memory of 1936	4324	msedge.exe	98
PID 4324 wrote to memory of 1936	4324	msedge.exe	98
PID 4324 wrote to memory of 6128	4324	msedge.exe	99
PID 4324 wrote to memory of 6128	4324	msedge.exe	99
PID 4324 wrote to memory of 1360	4324	msedge.exe	102
PID 4324 wrote to memory of 6100	4324	msedge.exe	101
PID 4324 wrote to memory of 1360	4324	msedge.exe	102
PID 4324 wrote to memory of 6100	4324	msedge.exe	101
PID 4324 wrote to memory of 5328	4324	msedge.exe	104
PID 4324 wrote to memory of 5680	4324	msedge.exe	105
PID 4324 wrote to memory of 5680	4324	msedge.exe	105
PID 4324 wrote to memory of 4884	4324	msedge.exe	106
PID 4324 wrote to memory of 4884	4324	msedge.exe	106
PID 4324 wrote to memory of 1952	4324	msedge.exe	109
PID 4324 wrote to memory of 1952	4324	msedge.exe	109
PID 4324 wrote to memory of 4104	4324	msedge.exe	110
PID 4324 wrote to memory of 4104	4324	msedge.exe	110
PID 5048 wrote to memory of 1664	5048	Windows系统调校_20260510_603b2ab2.exe	112
PID 4324 wrote to memory of 5092	4324	msedge.exe	113
PID 4324 wrote to memory of 5092	4324	msedge.exe	113
PID 4324 wrote to memory of 5092	4324	msedge.exe	113
PID 5048 wrote to memory of 796	5048	Windows系统调校_20260510_603b2ab2.exe	114
PID 4324 wrote to memory of 3724	4324	msedge.exe	115
PID 4324 wrote to memory of 3724	4324	msedge.exe	115
PID 4324 wrote to memory of 3724	4324	msedge.exe	115
PID 5048 wrote to memory of 3140	5048	Windows系统调校_20260510_603b2ab2.exe	116
PID 4324 wrote to memory of 1092	4324	msedge.exe	117
PID 4324 wrote to memory of 1092	4324	msedge.exe	117
PID 4324 wrote to memory of 1092	4324	msedge.exe	117
PID 5048 wrote to memory of 1968	5048	Windows系统调校_20260510_603b2ab2.exe	119
PID 4324 wrote to memory of 2404	4324	msedge.exe	120
PID 4324 wrote to memory of 2404	4324	msedge.exe	120
PID 4324 wrote to memory of 2404	4324	msedge.exe	120
PID 4324 wrote to memory of 5128	4324	msedge.exe	121
PID 4324 wrote to memory of 1136	4324	msedge.exe	122
PID 4324 wrote to memory of 5632	4324	msedge.exe	123
PID 5048 wrote to memory of 4940	5048	Windows系统调校_20260510_603b2ab2.exe	124
PID 4324 wrote to memory of 1896	4324	msedge.exe	125
PID 4324 wrote to memory of 1896	4324	msedge.exe	125
PID 4324 wrote to memory of 1896	4324	msedge.exe	125
PID 5048 wrote to memory of 5320	5048	Windows系统调校_20260510_603b2ab2.exe	126
PID 4324 wrote to memory of 5892	4324	msedge.exe	127
PID 4324 wrote to memory of 5892	4324	msedge.exe	127
PID 4324 wrote to memory of 5892	4324	msedge.exe	127
PID 5048 wrote to memory of 4584	5048	Windows系统调校_20260510_603b2ab2.exe	128
PID 4324 wrote to memory of 3116	4324	msedge.exe	129

C:\Users\Admin\AppData\Local\Temp\Windows系统调校_20260510_603b2ab2.exe
"C:\Users\Admin\AppData\Local\Temp\Windows系统调校_20260510_603b2ab2.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x110,0x304,0x7ffc14c5c188,0x7ffc14c5c194,0x7ffc14c5c1a0
    3⤵
    PID:4676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,15224696744146601931,4516436277121239507,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,5465867981386593729,230233349913945918,262144 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:2
    3⤵
    PID:1764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,4288727515063867864,15704321158615819371,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:13
    3⤵
    PID:2104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,18170295167313517060,7530797429255809155,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
    3⤵
    PID:5092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,3976421072609058607,7633670272173460127,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
    3⤵
    PID:2924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,6483905832260778994,4968056413377387963,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:1
    3⤵
    PID:5456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4156,i,13987549143242151579,13779551587215577498,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:9
    3⤵
    PID:1936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,12278701282370126459,12136657148093170111,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
    3⤵
    PID:6128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,4833549350921858358,8325200975982630765,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:14
    3⤵
    PID:6100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,5879002558317468024,9907290263652915806,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
    3⤵
    PID:1360
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,11956126889982562701,6131728675504164799,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
    3⤵
    PID:3088
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,11956126889982562701,6131728675504164799,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
    3⤵
    PID:5328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,7779956193914840303,3256036726259457580,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
    3⤵
    PID:5680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,16157441815083615029,13362747156991692293,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
    3⤵
    PID:4884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,18319554007290672216,15641948275947442332,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
    3⤵
    PID:1952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6820,i,16228572261219540577,4975162029961991124,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:14
    3⤵
    PID:4104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6964,i,13318551525820784255,17144166581277762112,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
    3⤵
    PID:5092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6320,i,7909083822298631123,5646800530215864972,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:1
    3⤵
    PID:3724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4860,i,7761754571917888400,9021483282251770640,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
    3⤵
    PID:1092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6044,i,6997304825311002160,11567542798082877346,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:1
    3⤵
    PID:2404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7060,i,7118155833819453384,11863417284353619496,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:14
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7052,i,11893395440348961005,2823691836639493118,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:14
    3⤵
    PID:1136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7048,i,9347137534204932344,7904769319428517925,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:14
    3⤵
    PID:5632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7152,i,15795323578192107409,10185498301169592583,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
    3⤵
    PID:1896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5412,i,18329195062499673445,11990448386680501282,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:1
    3⤵
    PID:5892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7368,i,4194400870292919242,11749121624250285264,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:1
    3⤵
    PID:3116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7008,i,10380561296265303752,6395396477567295627,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7520 /prefetch:1
    3⤵
    PID:3904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7112,i,9574709829672539958,12342844228013674371,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:1
    3⤵
    PID:1720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7928,i,17033941025087085983,692887895077000595,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=7924 /prefetch:14
    3⤵
    PID:3020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8180,i,12848858861274597369,11054147830956526957,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:1
    3⤵
    PID:828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8348,i,3592915276437242138,15036493304425975384,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=8272 /prefetch:1
    3⤵
    PID:2548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7820,i,13359158807514361754,11875897472600686925,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=8560 /prefetch:14
    3⤵
    PID:6164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8480,i,16360265407038931991,14655301957747811266,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:1
    3⤵
    PID:6304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8700,i,2750199773331785038,4844138742927794741,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=8668 /prefetch:1
    3⤵
    PID:6696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8952,i,12958293674688754442,18042065394834036664,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=8940 /prefetch:1
    3⤵
    PID:7112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9012,i,18261565820852291958,9071642240918962231,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=9040 /prefetch:14
    3⤵
    PID:3236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9180,i,11322860294704771801,16226777821847723109,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=8976 /prefetch:1
    3⤵
    PID:3432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9268,i,12321606320283231522,17905682743572052958,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=9160 /prefetch:1
    3⤵
    PID:6636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9436,i,14134207273475315429,1308445395922532331,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=9336 /prefetch:1
    3⤵
    PID:7140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9504,i,7184752598009794125,16459068662026693089,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=9032 /prefetch:14
    3⤵
    PID:4576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9584,i,2223326075440717219,12223284866658341031,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=9556 /prefetch:1
    3⤵
    PID:1112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8292,i,8977191666375987984,14550687461562261409,262144 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:6820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9680,i,13516773169274759480,4032157597327972640,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=9724 /prefetch:1
    3⤵
    PID:7120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=5372,i,13963497476365497892,16349476341116990804,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
    3⤵
    PID:2888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=5012,i,8443393034461342871,6416854678489831395,2097152 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
    3⤵
    PID:6404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,14919932102022134522,9252107822324071173,524288 --field-trial-handle=2952,i,16492145726263195396,11296708515919033901,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
    3⤵
    PID:6688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:6288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:6684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:7100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:6676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:7136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:6328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:7028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.java.com/zh-CN/download/manual.jsp
  2⤵
  PID:2264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3388

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 28KB
SHA256 beb94b2923d51adceba6e7871f71ae9ea0f5cc369deca5bb1c91908657986649
MD5 dce5f601af757f019be48a886958ad10
SHA1 3ef06485a8f7c51accae67d15d6f0a6b06242daf
SHA512 65d04e0b557973ffeac77d44e1bfa450c63d1446c7f60eabd40ffae0f68c468eead55e0a57f7351f571c56b994b1d19214df1a072157dfe4559cd8e568228de1
SSDEEP 768:g9QSJczukalAjKOfOI75W4CcMZV+p3XMO:WcQGjKO2IIZT+z
TLSH
T1F4D2F16CD03CD17F9A8497D9376A414B0E9492B643ABCC6A7F01C967500D134E2FCABA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 34KB
SHA256 fae490313342256cca653007b55b6c04680415eb4d9507cf77afc26b4bdb89b1
MD5 57f18be454db0593cdaa80fe17f0a1db
SHA1 5e79c1e8fedda09fe92e8676230e532dc0dc18bc
SHA512 359d9ba9e52db5ea2a073d052698fa3e4207fd4c75bdef3a491ab54c5055592819d6723688e2e75347846d9a770dd87026948dc62555906a3c836b422a29193f
SSDEEP 768:Ew2DsYVyfoC/KaMi8MkKHTldi1ZpwaZ2kJ2aVQ1TN4ifRzXo+Xhl:EQIZSkmTaL9Z2u4TNBfRcgl
TLSH
T1ADF2F1D218F134EA5D713E5FEA2BA83C31D5E3498CE44898C594C79B473A7ACE31629C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 30KB
SHA256 f9696b157f6fbf6be9ec4d3f032eec890549285cf8c41fe5555d6033d1797297
MD5 94fc7cb4c8faa696a6a634f9a0612517
SHA1 374b04b901b715c40bedccd19fad34090860c77a
SHA512 97e24b7f0e866a12e5c7d640c1f7f303bc39093cd4843738c507e1eba745f700fcdae7bc2667777561b4b014c95543906d8331b19c161da2e762f846e06c4292
SSDEEP 768:CxBD1kbA/sBIfGQYQQ8xrejCCHnlT2RuDyhRbM7UC4POXa:E1zyfQ88xre+aYHrwd4p
TLSH
T1ECD2E18B51C2ED65E0C74C39AD3B17450F69B38933A927FE3A40BB425F83198F95096B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 117KB
SHA256 d9eda996a7617fb76198989e51190044a83ac22dc1b1a20bc0ed0d22f199287a
MD5 a768c2b000f6b22d117701f54ebdfd0f
SHA1 881e4ae5f1675b622bdedb54a4f5a9d22cdbab57
SHA512 12e7c9b583523addeecc3e2b00241def70e1df06bc6202d536abf0b131c620529673820cae3822ca7a3dff8a54a6ad15a81e58af43808c4725a0d416afe78298
SSDEEP 3072:jH30gZU1rnJpSUuB6z5esCJuRNceNKcsvtmG5:jH369gUu0zPCQRRNGVmm
TLSH
T184C312478F65D8085F1701891D6E95B39CC0FDBFA85326B8077C82BA2AC665C8FD7B42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 161KB
SHA256 f544d72b5695e2cbae045dbbf9ce55e25e0c8b8bc0e236f9394af9ca5a50fe39
MD5 0224585f6b5d908a44adbc5d232cd686
SHA1 5729bfbbe54f97eb37aa4355128369a124e192a9
SHA512 edb88ddaa12f6f384c6dd9f6ca0bc61955b4d57d107265b834a705e87ba9de87577b69472aa4a10b6c134dc1e0463c2f81f76ff53e1d2e4b470ca8b154a34521
SSDEEP 3072:fyekSqOzhWkMaFGk0IVVuLvIZdnvHWNImtCtwVoS2kU/AH6x27LqEgG4Kzdf:fvWBgD0IrTvHWNIgaw12k1TLqR1K
TLSH
T1A3F312669FDD7B14A36AB28EB2606C3F89032B4F4BED815691C3A78F179919D0713313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 144KB
SHA256 a0566db17c1bf28671d422d9d83cdb4c6891e844cca782364d67d4763683fae1
MD5 e0026c065c33aed41449931ea8cb23d8
SHA1 fca0c51c0990fce60a55eb68c7ab42f5a2e0bcf4
SHA512 6141f27daf000bc1a5135313c3c881b919f7f65bf66b49c198d338edfaa1ccf16189dcc31ff9217f9f370fb4082a0eb8f94912cb63097ad52e6b32b200561ef8
SSDEEP 3072:RD3qSrya4jqSvovWIOu7TW3HqI8Xlf6Ud+ev/91CCWVy5tCKYENl3kqK:RD3qS+1OnSKImAfzeYEN5hK
TLSH
T1A3E31371A1F9E6E194494C3C4980683113DAA99CCBE3C7F58CC8E9C2DCD37D616621DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 70KB
SHA256 a30030d5303877a831ad9b78be0ebe2e49495bd429d29e554c724eb875e4ecc4
MD5 8b2acf6e53d1941ea286981974fbc4fe
SHA1 2d5fd0f62d1713d5c4662e4fa636e1fec9d10e69
SHA512 d602c312fbe30d4ab7bd82e84dc2495c2eee7117c8d89d2122af639e30671446e495653c6bae48767d34bced16ddd7c730f1bfd44b890d9e5868b51f616600d7
SSDEEP 1536:YupP7WUweB+ul9ClExF0DG0o5fKIJq4Dnx5OFQog:Yud8ul4GFpjiUJx5Jog
TLSH
T10A6312649B5EF7D5CD4DBA884E0506D014A001704CFE4CAAA21DB7F34F7647869D3E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 70KB
SHA256 94f449d9ce38a3c77c573bcae5866361aa5ef7fa9c7fdd53d6ed398874165ec2
MD5 8017ef4c214f3b64eaa33311491269a7
SHA1 7ca59c45e93731c7a4a33b6d2cbf7b4339d2831b
SHA512 6e86f845e7f73b0c347ccc72f91d5c7147a8def6a0c732b69253b4671fc2314aef90ba5a44772d59f612e1f5afba8d42fc7e411804a2e12f63d405f3f6d88904
SSDEEP 1536:mOH3K/wK3uexE0GTJOBEo9pDE2ySVaqZ9Oz8GzXvhO0stAoPz:m8nK3xqHTJ0EYpDE2ySV27vhO0shz
TLSH
T119630252E74EFA8CC1C346B7F68EC1C8E6563397BCAA58D26BC50FA1C758C910C561CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 69KB
SHA256 0a30421f00356d7897965df9e23ed85227325fd38a9eedd408fc0ba0dbb81c82
MD5 062082d1dbabf0c800795af87876db1b
SHA1 1b7ae6ba21425dc000124c55cdd0795bc9307976
SHA512 501f51e21005e3010fcb08a5abc6eb0c30ae151428f08efbbc469ae5269c876d35b3fec8c83d9fe02766f54535410a77b892c1158e27a3581c3f2c06b485648a
SSDEEP 1536:ZwtgykqRGxHwPz1bh3GvPm5I+xcbdggfMMeJKPNQ7583ubgXOYb:ZwtgzqaHwL1bhFZl+teJKPiaQgXt
TLSH
T1FD6302A83C521D009495FFF216225645BE79EBCB9D20AB8FCF628B4470C6715EEB1E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 22KB
SHA256 32bcbec8c2163b9f29c0079924d885a4c99387308a2fd8a08fbf332b3248650f
MD5 e25fca0e9402201eff1cdc1747a06fea
SHA1 7b12fc3307928152acd4fbb21a246f155759e5bd
SHA512 f101b22655f3caf47edb8501aad51c617285d0bedb5caa477c4159b46e29cb6eb21b50dbbf894a53f773d00fe935635c6fba4333db9d39080302a75f60a8736e
SSDEEP 384:T7TgXklXRuYXFX+hIU1x1SpM7hlovAuKuUwsydU6Y19gf6VrmW+G4:3TfbuYXFhAmPKuUVyzzSZ2
TLSH
T152A2D0B27962F3ED9BAAD10307DA9CC7684F95803E595AA3B015A008D67D3C462FD84B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 30KB
SHA256 da3499328d8326ca3a5053a37ff33899a1c03d017fa3c85d5909fa961ebda90b
MD5 fbe98657cba829c0ab59feecf1aa1831
SHA1 436ebeaad8e1de6b944a7a455b4494cd865e8385
SHA512 e35064d2a2f7fe745a6e902ce650efa38f8082f14ae3b81d8c6339ac49877d71290dcc11f103310592d609c6aadd37ea233c6cfed703d0773a93b66f790b655f
SSDEEP 768:PpjFz9ZUURxWzJ58G2hH4Y8OqnJJVlt4sOebUlNK:PjfWzT8/lNSVXUvNK
TLSH
T1B8D2F1FCC6828DEB121550E143D8BE7505052AC86B8B0364F205CBA9BE35B7ED74A3B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 81KB
SHA256 694642218c90a76e770ab62f660f1ea2a7cdbd39724759a58ee2ec5268db3a21
MD5 08054e9542f072ed49ef19544052d318
SHA1 3949444e03c8d08cae19f4a0370cf726326df883
SHA512 fb89b1ed1747bf39774f5f1e89aea5611f06ca2459599fad00d211cba65b9625c14e3be6f33960db9cddca48f0f9ae0531aebafb103669cb7e27e62a471ac4f8
SSDEEP 1536:kj9vhV3TSUPBY9DzG20DAk7RU5B9UQ/Ok+G1sBgvNYobR1IPSVRTuYdp2RPbMmDN:Q9ZV9PBIDz4v7uP99p1sBy5b/5FuYyb7
TLSH
T1B583020A1B9DC94C33F704B79C4E86C6DC1D5D8692AAE20A7A2B34DAFDCC2D014D197B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 43KB
SHA256 28546d8c1a1ab8cdb13061488766b9e4b3e93e01c6896bf59121d9091dc22642
MD5 e818d6c94e85648fa9332bae9d7cef30
SHA1 88bbd4645597a5de160ef09d16e18377b47bfa35
SHA512 9618cfdd3fabaa1a0e3ae53710da3b19d63b474c91fec9d0f85c81b6d3a80f8344f5c01408f7047edd5675d5b81bcf7b1eaef3267d7520fc5debd926befee16b
SSDEEP 768:bc/X+rVvdLXLppM4iJAyZvWg5Y+cuTBjj/hjZfvAsSh3oTcfD1YNUCml:bV3LIrGyZvWgyZ0jjJxShv5Ydml
TLSH
T1C413F2A5B51C2C7E9163601D0BC01F7A606205E1B6D132E720A6EE68BDCFD7DBC19B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08a14841be7bfbc1_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\08a14841be7bfbc1_0
Size 300B
SHA256 d4664578b08d7d8acd09a692d02061a9e92b2609977408e427ce4def05b0af65
MD5 45cbc5b2698a66686952afabb1e44971
SHA1 4b8fc9e440e0009021cca5277d8a918740b173f2
SHA512 4a0d9db4029026eb3f818bf2a71f09f6aedd058a53f0a27e503b031bd408c2fae42e2b419b00dee6b870b4c3c9110f2d0885bcf8f29a2575a132d9c013153c53
TLSH
T1BCE072F381D33402C80BCBF2ABBB2904B72261A840F296E06422818A283DC201B4A832
MD5 SHA1 SHA512 TLSH

Submit Download

11f9b4d9b9ee3d71_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\11f9b4d9b9ee3d71_0
Size 246B
SHA256 d8737067833c09fe65f28fc74800a66df12c39eb4896936119ccb5ddffd73d3f
MD5 7b97c3312e9f5444e5920061f80f72e2
SHA1 c23958e586e2d8f61297e851a28a86c2c8687b0b
SHA512 f8d5558c085b7944bd34d35e360705269aa64df9a0ebdd34ec2481c7fbabd71ae8ac43e2927948b4f113e7dd106b28d9ca280295c7d29076d70fed208b3173d7
TLSH
T145D097E780642C99CF06CAF1AB362272C30BBCE8448848DCC00342ABFF229731482811
MD5 SHA1 SHA512 TLSH

Submit Download

2d5189426cd34b50_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d5189426cd34b50_0
Size 9KB
SHA256 7dd3867a6f1382d79e48913b28748bc39802d3079ffc16da555e059dd689914c
MD5 a5fb3a0bcf5364ce8773820e76d0cdb8
SHA1 e1ba21543f6ee4212ea7c8a2b44d8c63877c8278
SHA512 7e29c3f47716fd21dff2c369cd902c94d0b3a3151ddf71c351daeac858550e4fd1546d461ed63d0c35a3fb0a8054fa8f291124c57e278457bf98f6370dbc8075
SSDEEP 192:KIMyDHFedREUdsAJJHfStJMZvy7BVTH2ZXprPEO/U+IjDrN:KIXDH8d9dss6tyY7BpK9P38N
TLSH
T13722F872CB94BAB7C8314B7981E2891BABB1878D57C7C27FC02271F21409151ABF6946
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ef1e97558f1c63d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2ef1e97558f1c63d_0
Size 66KB
SHA256 f4a9b005ab11bcaa8b451b095483d9a7b56377079c402b7b6502e11098fd2421
MD5 96526a807b2d83320feddd4c31b97991
SHA1 527d678a3ff8a12699e4f148ed4fe5d9e27d7d27
SHA512 091b9c9d9db4ed805593165ef85e30c80b0e68b4b1c30a3f5f289a504cb7323154c894d395dac74dde8d0772fa0e4d540c66e5bc5741933e8d7382af33b0e5d7
SSDEEP 1536:PuMtmdcFROadUi/uIDyKVruyrl5quc6s9uFOPo:9tcvi/aKVrB4yqAOPo
TLSH
T1C8633CB55B50AD3BCD2A57F641538A3B633281486F93D30B20A163752C6C2F75F9E88B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33d32c99667b02ad_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\33d32c99667b02ad_0
Size 251B
SHA256 93030a3f57386e97ccc30976eb92664b0945d05cdb8ac76c9f811cba1ec28813
MD5 35ce8fc91c2c1026f74481cbe9b0eace
SHA1 5e25c08950184486bb04da8a5c6e3b7d3266c693
SHA512 6e14aa7b9cce109601b3cd433f5e48cde25c5f96fe01ad062814ce4a3b2b56d2b24dd96ffa85f4ea9089761801d8281ab6549be11341f64f369b74cfa9b049a0
TLSH
T163D0A7FF603C1840CA194DFCEAEB43A1C323B6AC46A4C5A5800558B7F429C76767E662
MD5 SHA1 SHA512 TLSH

Submit Download

4c5b5f3bba38fbd6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c5b5f3bba38fbd6_0
Size 301B
SHA256 52ff960543df159ab84e71f2319b70f9fe1078a2419931522e444cd4f703e343
MD5 4709b6685ee2beb04fc143a547b295c2
SHA1 621137ebe5b32af19788a43bd1f9858d453ed4d4
SHA512 f8ec4ce8f251817d41c2cc4dc2a510262684b6a0051acea38d88152c9f3658d457f8537fd6aa6f3686caa3e1d14701cd4f9bc76f67e485b9c4491caa48cfe7d6
TLSH
T1D1E0EB2318409C18DC7280F4AF33292BAD0450780838C081C083E4B33E2183AE211238
MD5 SHA1 SHA512 TLSH

Submit Download

56fc90971e30c050_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\56fc90971e30c050_0
Size 9KB
SHA256 c2540858cf80f5f5abc9d0653abe1327d43f0f77c3fcef83583a262867a2320e
MD5 0b954136c00228e56af76839a6456f97
SHA1 3908fc1db186d7e2beed4a79030b686571af9c98
SHA512 cd1e3bc58e41fceccb8bf0a82090ad231909a9da8f5afc95bb5a80cfde57754d2e6bf0b165921e7b7d7573a21a94ad9c8224f35ffcb0f99279b4ddd9e2a1e958
SSDEEP 192:sZAJz37XhlCfyj9WLhvKn3tdnrSvXsfbIr25UNSRX03U0qZ5C9:zR37XhoEavKn3tdmvcsr256SRXAqZs
TLSH
T11B12C61A6780BA2ACB9617FA01A38F376B31D1093EC7C26715B193783C112F71B59C9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

59c3a5e3c0d11a30_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\59c3a5e3c0d11a30_0
Size 302B
SHA256 3b07cc3d7024eb6a7b8296c2b137a8e09124cf629b8243cf1371841748e0b40b
MD5 c12639000e83732592f58eb6b327c4d3
SHA1 36040573ca63c7e0d0501cda6a9d39060b30e082
SHA512 99c7fcdf02654bdb6b0eb39b13540a618318cfdba132c18aa4ec58c0258e8e9307c99337d72a35255cb0a4e7ee1400ba0646daed8901c9dc49408e64aa53cfe6
TLSH
T1A8E0EBFF94082823CE62EBF3C33730980323AAD005CDC108D4229316A857C32A4EC008
MD5 SHA1 SHA512 TLSH

Submit Download

6c4eb57f55f2c228_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6c4eb57f55f2c228_0
Size 71KB
SHA256 9cf8fb102b47f916b6aba4730aa6a199da0c064106df7bd78076cc6b2344c105
MD5 24d14561357872f0bd9f64305eef76e4
SHA1 3caad436952d399ec3016c42b69d4f0cc180a0e6
SHA512 15c15b90495bca201e96e37450a8507add875d447b1b5a8b3e28c38c94396bd9b591eed8fa89ba2b35e0e198f6630f1f58b8277c047645d4698b04a75a010800
SSDEEP 768:zicthfsGmNN8LxifWlIi5mW/jNn9QKLNZELT4vZ9T+cJQjSdU27fzZuUmJccqUq8:zFnmnSVZ7GwQWdU277Zl3A
TLSH
T1AD631A7023906C36CD7317F5825289676777C209BF93820765E4637A2C2D3E60FADA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ea0a43db66b24e9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6ea0a43db66b24e9_0
Size 4KB
SHA256 ad605da62f96e0323cd70830561df3a96bd45a411715d0a1ac37776c7db3c43c
MD5 d1f2122b497d84c779057541e8abd33c
SHA1 69a0197b8169d662efa9d8f384a7c03f13dc3ae2
SHA512 e6311ea812b92fb62d3fb949e8c0118b23b814a1849bdf42efde25913808c5000c6dfaa8d126e7de7a59f75cd53939bd712d4a89f3c06b5e93011860f91bbd2c
SSDEEP 96:JJ/gvhNoTbM+9iqSBdubrklSf+ifGwXoUtB8pnqqbu/zMeAtagW:/2hNoHM+aqbrkkdOIlkdqNWad
TLSH
T106912B269BC9951BCD3A5BF916634F357330D1046EE7E4B640C262F93C182E3125987B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76ed439edd1203a2_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\76ed439edd1203a2_0
Size 201KB
SHA256 dfcd7d2cb8c0e7624848ac5cf945135551849ec3cf7e3955c62e5af7052d68b9
MD5 9fe2ade5287b175f29b0bae471ae49c5
SHA1 05eb71f0d310f813fe678790be35e56bfa27979a
SHA512 13e42bff4279b6c82363559678eb8324ccef6031471e6f190b9c0f26899bd35ff60af8f9f43482d3c43bb580484fc4449985f9de559e44df2a7d270860829ce1
SSDEEP 3072:5MHdtELAwWACH8KcGxNoC61/QiNQEHtmmECPoI+OzlRwIR:M/ESAS7zxNy1YEHtmtCPCOXwI
TLSH
T1141419685B947E51CE3A13F442A2C963773145492FC3931BB1F4A3393C1E2EA4ED698E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84fb345a557391a9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\84fb345a557391a9_0
Size 18KB
SHA256 1a93ad5984292a566544a2adb8f7a1ba3f06fbef14b1bf8d1069fe80cbe293e4
MD5 b1ca7bb80878e83d6a6b02b150456534
SHA1 e484732876579f0d4140978e95040db0c816ba11
SHA512 0b3dc844c0a25b34bb815d4d30bb4d10303709b869446a3d78e1c843e00cf575f40d42df98fc27053559e46921d12056596929ddf44adadc2ceaa8e63dba91fb
SSDEEP 384:pvAc/Tr4GD8ud8nntWCg7vz8c+XQGOEFj0pmOu0zYCdA:ac5mnngX8dAGOE90wOu8YCd
TLSH
T19E8285301FA07A74D37F07B514C3CB9751A1D2FA2FE541AEE1B231211E65978CAEB886
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

855ff72ee9c69590_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\855ff72ee9c69590_0
Size 23KB
SHA256 8c7530e4f77ac90fa311087b4991f8286e240a82050329e69f82197aab93ee13
MD5 8dfce1b7e73fc34d998b5b95053ff257
SHA1 8a4b089004f510db134757c580dbf2fc8d2f5870
SHA512 c1a3235bcf92f6929c8b4460743d9cff4ab27990a602f82ddac79a2c5e8523b5b15f7f82da3e84e56b1d4149dfafb4c645fe86c4f94608e303c6592fe40a0328
SSDEEP 384:FI8NcZqdXJjPZZ5nxHy/RtQV16PylX0WMpNc0VCStj2tnLXMqXU:qtAhcXQV8PylXHMFoo26Y
TLSH
T114B27D216FD02937DE3243B290A249171B31DA1A1D83872F246093BD2C167E37BEED97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c988c93caf307d2_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8c988c93caf307d2_0
Size 266B
SHA256 3f7bebe85e5a27a964526f99173a29ce5b11d2d2ccb80f4178a7529e0a21c634
MD5 8c32e726282ec92385c4b9f3c67d8792
SHA1 6a6c79f9a5757afb913e3e32fce1f09f7ea0a8d5
SHA512 f068767220a281e3d137849ccce8c6dc5b5fd1a6c4b06db4eb0fc48c0caf39baa1ebad90ce2f827dbc8b6fd0cbd950d4d3b31d5076bddb3ede54054d0bf42e0f
TLSH
T1F8D02BAB00990807DC07CAB7C3763615D341B9A80E6A99004112A66E72E5D38A04686C
MD5 SHA1 SHA512 TLSH

Submit Download

97e2cb1c468ffc68_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\97e2cb1c468ffc68_0
Size 277B
SHA256 7f31a8d9f22b85749e94d6fd2659d66ac5e1c294a552261ebbd547ed096e4850
MD5 0caecd5d6f9fc9815b39258204449c36
SHA1 24991f4086c5cedccd28950745068cfcf5034fa9
SHA512 bd2c98a322830b3909512eaadcecec2e6ac4f126654f680e8ebae09c51f946ec78cef2564b5d1249c0d29de5102c0ae3f9e1d6e24e63bf77161873035cfe2a6a
TLSH
T1AFD0EBE300441802C81217FAC2BAA2388B02438A05C88087D00084B72209C7F2948824
MD5 SHA1 SHA512 TLSH

Submit Download

a4cc81f5f421051e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a4cc81f5f421051e_0
Size 35KB
SHA256 8c7698ec18118b362607e874ae6adb1757e6832c40b4a48dc9ecc88648705993
MD5 241d75285fff83f24880206176d92d94
SHA1 90a420b5db3f8a76a21c3b30065deec1e9f582ab
SHA512 d8dd31efbd2408fd02aeaba1700d5758165ef954fe1fcd904d675baf27665ee275099c66f507c11db78e2050d4fab5c46d397464dd6a7a2923f98a176af50c19
SSDEEP 768:ABzSHGK5tDx7jtpA2oIfovqb/IyrOc10O6agALYCUV:ABmHbtNHtHAQl6SUj
TLSH
T183F2C6C627957D1ACE2603F90A719A1AF37989C93F83E32721E153352C51BE78D4990F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a50ba325b4d7d447_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a50ba325b4d7d447_0
Size 404KB
SHA256 eb140f8656bc0b45a45301a9e92a29eb4e7300e8ea4047b4c9e94cb490ab4da4
MD5 05d19150bcf6b207516ddf1de24be95f
SHA1 4844b8c46c83e1f85209568ebdd882bd8bde5d00
SHA512 fc757b2231b454d271303c7a7781c77a6e33a0ce246ac6287a2686b7ac4206f305d3b2d6a7683f6109b05e8864ff9899de94e598811900e5826dad13dcfb0473
SSDEEP 6144:WWVSWXxczlOJ9nsQHHLtZ+bVt+bV194X3ioUwmCsymtdnc5FKCdVu5Xqb1nFDz51:BPXezUHC5vsEErnbt9zHzUn
TLSH
T1E994CC582AF71204F1FB9B7A69F305526B3EBC066831CB4E21D8961D1DE3B819C52F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7aba1b76b7cda9e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a7aba1b76b7cda9e_0
Size 259B
SHA256 a2f1d7900e7fc5e653b25158691ff1cc2e0d3c5e54da7ad0cf10af265e0f6347
MD5 da9ecfbcc8b53c78454578dbb425d1c5
SHA1 1dcc6502c82c784293a32395c2948e57ca74599c
SHA512 441456eb74c6c1c3d5ab88a9e7081dc9d43ffb105d84019d74fbe8100b86df2046f74264a81004499eac92421fefb39ca5eb2f2d48997edc06e9ccfebf9f38c2
TLSH
T118D0974B0D00490AEE4AE4FCE1F2ABB7E012602086ABC389820384B9BC0663AC0C8831
MD5 SHA1 SHA512 TLSH

Submit Download

b15f8ee40c6bc520_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b15f8ee40c6bc520_0
Size 263B
SHA256 0a062548e00c00c9c92be0cf41b55694bf609c6950d4be04ebeb412e8e9924fb
MD5 59cb0ec87eeedb4e834d8ee1943c932c
SHA1 87b8e4a81dacf460257cc53d1dd199ea53cc9aa6
SHA512 2549b65f0721cf5111a9d67ce3b8c48ccef4e0db4afc6c3a7854e55fbff9c2ae824b36dd110641e9cf99431101708c4336d32088265fad651fa2afbffd2b207d
TLSH
T1D9D095930D143C48DD1DD2F1D1DB726D405371615D58C274D40B40397725971B958952
MD5 SHA1 SHA512 TLSH

Submit Download

c224f9ada4a90415_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c224f9ada4a90415_0
Size 100KB
SHA256 073c2addaca72f0bedfa3c0477519cc52fafb44151643607ae13fcbbdb690974
MD5 04d6a66694e5903f3a2821263c37b33e
SHA1 1acb56fe3dd811246576233d7b9332db8240ec13
SHA512 1f7a0ad08731718c82504fc58f36154b8a5aa3671416552e9c30063036002f4fe845be9ba9a98a975a5b5a6b868bd8003f0f2f8ce771f86c623e4d8be81f99c1
SSDEEP 3072:7ovXp0gDqLaxwLNugQzpEGIHM4lL+LgzXtM5RfWd0o:7+50gDqLaampZILL+YXtQo
TLSH
T1C1A36AF47755AD29CE3353B54242DA2367B2C4082AA3A21B31A4A3710D6D7D71FFAC4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d99e1e2d60fce968_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d99e1e2d60fce968_0
Size 319B
SHA256 a45a2370bdcc36453f9ff1c2573a939d6347ae5e12b5f3555907d9dbf9549624
MD5 f9505c7ae9f2cf9272b2d8e63513771d
SHA1 27eb28730188ef6441c31c5fddc429bd69c02229
SHA512 0c04255a09c02bebcea875a0ecf4ea1c5af0d3cb0bf4567d54934a32d08162f1ecc4593c72a906b6632f12f88476ca54e17c8542fc30906656716d45f0c66acf
TLSH
T175E07D974B6B6404C4C080B4E79D5695ED42B2544C8ECEAC4813807A7587D245491135
MD5 SHA1 SHA512 TLSH

Submit Download

dd2ae6a1f38f74d9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dd2ae6a1f38f74d9_0
Size 66KB
SHA256 a07f0a2a884e1fb62faa3ba060e1e53c5bce67b2707897aabed9ad23dec430eb
MD5 99b7ebf9d2482008c1ecb46a1e391f1a
SHA1 40086687d38f3ea571386ce95b299eed6afbf73c
SHA512 e072ce79bed4e1a9e82d97c25de0f39fcaf083cc16c0b7b803f1f332a7886151483dab0003ed7a09d1545d60c271bc7ab845fe1e31ae8ce564cc8c644c51ed1d
SSDEEP 768:PR81YI8tpAbZroYeCcqgzU8LhjmSg3S4qOjgmFLo5XE2DOPWXZcgwwx7IhfEw:PRw+UZroKglu3S3gLOE2LXl7Ih8
TLSH
T1DA63E7B12350DC36CE3B5BF50153CA2F63B681097E93921B61A1A6752C2F7D70FA9C86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa41fe078499044a_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fa41fe078499044a_0
Size 128KB
SHA256 d19444a27d54e58c70c61532f0211398ff57202e6e90719bf9dac0b0e373e7b6
MD5 b0f66e73aa67c8ec9f7b76cb6cc3e907
SHA1 e2d7437ac9571a7e7c67b7eb793a14d3eef4dc96
SHA512 50a5adc05a3bb3b692e63048f421efd2068a40309caa5c902f9e1eba82e94790369edac8d886b9e74eb90b943d0283236345146c3d11a387b7dc34be38d0a199
SSDEEP 1536:qQb0PY2sPU6u01FdoHorYvJrf9MObHlabqbby/A0RdN6zFB905O:DAiPPuU/o8VqHlabqgA8wFB9E
TLSH
T1E5D308257B60AC95CE2553F151638D17B33244493FC39B2B73D9B3362C0D6EE2D9AA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2ade871e8a9f621bec5d18a5f289076e0a59760ab10b46833eaa8490285d05d8
MD5 20feb9ae613e4636282ebc96f2796d9e
SHA1 de86351d24e186ba60c7af5d417307fe8dd817cb
SHA512 4a4fdef54659745f0cfba6df0c8f8a879a053629c2d7fe554e732ab832de85a43d090b69f0edf65e9d23b52d916197038e0a0521f5a6867c607573d83079873c
TLSH
T1AD81861923E73ED5E72B56F1A2F6576976F8801D41032E435380BDB29406F38E8EA493
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5bb92b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5bb92b.TMP
Size 3KB
SHA256 d12d23dbdae498d98e17e19ce1572cf0d9b1b8f78db0f8e998bc487a0a93831e
MD5 1f200f5cbd6306f3a0ae37d3477e9cae
SHA1 c9dd47a12270cc93b22d1d8b492d6683328dc2d6
SHA512 f6644652d6ec76c061cabd011eeca8aba8c97288890d18d3a300433f36979ac9eac42b319b775062ccca3ec6a8c81d4d3c5a12288c52f8817fefeddd0e18d483
TLSH
T10561511423A73AD1E32B56F1B6E2A75876F4445D05072E139381BDF29406F38EDEA453
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 be93767d09a150ddeb8ddb6689126499d1ea12e2c237ac980bef90104454d933
MD5 4b1f2e8ba6b550c37163749368b7b9bb
SHA1 3b2399a19011d75af17d6494f8685011e9614055
SHA512 99cf3805c9c0c78cd119bc60aa3d89a73b89aecc176f07002b5ddea0948366751698ce8ad3845925c74f95b9906d0c33133b73b6abd0cff9500b2861e18d6156
TLSH
T17261C0F783F48A6ED91196F4EA186F2BCE1D0921432C3D9AC4E4AE1793F2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4d0dc7ccb9fdf845e2c29d74fc9f840b731a9a60b8194b33c0231e11665a8c49
MD5 f1658a51de83d3275cc0c32e31ca4bfb
SHA1 a48a5f08d259e2b914c0d90a595b2783198b532e
SHA512 77203f39ff9e84649e7562841ace7e2b7464f3c8fcd89dc3acfdb0ad1ad47406da26d98289c65bb1ee2226a399a6d71cf03d5b502291085d1789007265cd3627
SSDEEP 192:sxRjRHCU/f7s9Ud281GZII1zoA8pp7/g6+WN6a5hUo6nEGhGGOIgDhx+qyCJ:sxRjUU/f7s9Ud281weF/5ZhjsYCe
TLSH
T13B42A75AAD68A93B5CC7D219FA55BF53E2F95132A1D01F48A7FC8A0C04E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 125180c51b412e273680e3dda32f5ca28e1a2e4cbab71e7c3e16d81b0e69f8e4
MD5 67d9f4f16b2114b6b7bce8bc168639eb
SHA1 15908f275a75be212559e6ea47534fd4f1969f80
SHA512 19f288f714f17a377637b8a9f3683fb88b211d048b330a782f4e66fb3be0022ea4e460bea5cd6d5e892784d33493426efca1a178d2ac3c7bb87111aa0062ac20
SSDEEP 192:sxRjRHCU/f7s9Ud281GZIIrzoA8pfa/g6+WN6wRpUi3nuGhGGOIgDhx+qyCJ:sxRjUU/f7s9Ud281wES/5HpSsYCe
TLSH
T12942A75AAD68693B5CC7E219BB55BF53E2F95032A1D01F54A6FC8A0C04E76DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 823521067867bcba5a2c5c9998f3bea8edbd94a41533e448a91c2af6bdd77180
MD5 7dbca3f7dce3260e0753880eea7a1794
SHA1 898ccca9e03eb1b32c17beb1b29966e010678388
SHA512 34a84ac08f17847694f3628a214632fa04f26f51f1425b952e895576415ee32a50d9f42a3e77923fbe4b9d93714185a0229ee2d267b062039af575ea6c169a00
SSDEEP 192:sxRsRHCU/f7sdd2C1GZIIrzoA8pf7/g6+WN6HNfUwyn13hGGOIgV+qyCJ:sxRsUU/f7sdd2C1wEz/5EfsRYAe
TLSH
T19F42B7566E68A93B4CC7D21DFA65BF63D6F95132A1D01F48E6FC8A0C04E66DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3b7f8a12b67a3ca75f2b37de174b9bf7a2abbb08958cdf4169cbaa557078e4b4
MD5 074acd208fda39ec7b755d6db01607a1
SHA1 92584e6d47ba2876e42f106fee23f6b9125b549d
SHA512 c44338660622b520f3cd8f1b2f876e8624257486f1eae84462a5bd1d64b9522982c2d26cdcb59893d232205f3a13656c625d70bc5c4a78307744bede26a0f8e5
SSDEEP 192:sxRjRHCU/f7s9Ud2C1GZIIrzoA8pfK/g6+WN6QOZUZMBn+3hGGOIgDhT+qyCJ:sxRjUU/f7s9Ud2C1wES/5wZQtRYIe
TLSH
T1C442B75AAE68A93B4CC7D21DFA55BF63D6F91032B1D01F44A6FC8A1C04E76DD620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 c817a84922c7b7d4c8254405640b2c4c4541a8cd23ce850bef9a4d8500c3da68
MD5 8ccb30ab8a662b6589bf313055057c8e
SHA1 67c16df6c0773efe8716de1c7f1c6681499c3ea3
SHA512 6d4a6b18f9e53b822a3d2548fe91e42318c13d02ac63e1078961a227de98b40d0101661708faf537ac93f474aef7e9d495b82b33916eb6ef654071af0b857a3d
SSDEEP 768:wb8dCT7pLuLfR6Wgouf6M8F1+UoAYDCx9Tuqh0VfUC9xbog/OVlvmu46rrohrw52:wb8dCFEfR6Wgouf6Mu1jaevmV6YyY
TLSH
T1E4D2DA7B740DCA7E4F800ADDAC19BE9F6D6802CB9AD8C94447FE851C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0f1775dddcefd09b4dcc2a475c1bf855d8fbb64992d00329616b9409323a0ae1
MD5 19fcc0ad5c53884cc9f44f025a9f5f7e
SHA1 73b37861a76fa80020bd465971b8b09f18324111
SHA512 45af222c79e6108054e572af517535bc744f37c5f4bbd4665b6d43c98ecfcf31c8cab174bad61185b82a39bb36e8773ec3fbc381b71b9a68a1a18ac2e61922e1
SSDEEP 96:KRfItpfd9xWJmsgRxK44g/xcnvOR9SH5WnjRzHDW3EygrDK4aglDcJh8f2VKKWYX:CfItpfd9cJmtR74g/envOR9SH5WnjRzo
TLSH
T15E91FE05323E02413C7D7A19C4A5986FD2D174A27069A42B7BE925B64FE7E038CFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a8d9b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a8d9b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 422eb8ea88c9d3ea5d5f68effbe4a8d8000413a703354caf3376e8646cd0379d
MD5 87c2595f75b250605adc1abe14f4bc2a
SHA1 01f4dd5f68ce734dfb221810843c39cd7f616a06
SHA512 634df836aadad4381a75d0a98b6bde6bab7cd3437aeb1aac44913752145f691b473ad406d79f6f1a9d6927be4fce8a71406477777f89751d8c5ec674b587c29d
SSDEEP 384:nTZcIS38NK+Py2JqPcJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBehG:LS3flaDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T11BF2BF35BC358D73ACEBA652B54736927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 85fd5bb61c62682744e4d929c8cd6ab01a5eacdac0ce455e0e75f420a2fd81ce
MD5 c6d1ffea2bf6c02dc38f01fece5ba996
SHA1 c92cc6f10a08050570461156b4c727471d60b171
SHA512 5294e72bd0ffb77405f5a31ce7e6fbbfd035de5d354014f2c644a65dad7d36e23ccd5c843d6da222bc56d1db87fea0e065560c114f55c9bfe24c143d57c74949
SSDEEP 384:n4ZcIM38NKHPy2dFTcJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBehG:GM3uGWDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T1E6F2BF35BC358D73ACEBA652B54736927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 67a456743def4ecfbb471c25ce6e086ebf68e27a48436af2b53691e7ec04545f
MD5 728ead1f75b50539ca7a56fce26e2e3c
SHA1 cbdcbd990981167f6aa64d3b010841ff421dd666
SHA512 e6e4357e18e53b318ef5b12438432856fe891cf53eff9ef1448acb37559ae08c47cec34b9247e29277ebe5acd137d8331867ef18a1a803d1854ef1159e99aab3
SSDEEP 768:bFQM3VwgwQrZw5O0ynfSszNzc4ReyIsPeb9Mr:uM3EQfSsztc44bs2b+r
TLSH
T1C4039D36EC64CA7BBCF79B82B64A7686AEF01167C2D85DC8D6D99E0C04831DD074BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7fc0b9a1506e39217ae724acd4886cc7088a4e1713cc48644d2b6875d8fe8dfb
MD5 0ffa44fea9e8fc776771c961fd6fbf0b
SHA1 0ec000b847a9eaf8c5c184aae14a2cd53bc90c83
SHA512 22ed28faf2c5d09758870f7382b02efc40209e49abe5e65dbce6fd6af51b529c0677a50a98fdd336e5d4c1d4c081dd47cd5ea7da25954bb7fc04a1ef7744c3ec
SSDEEP 384:n4ZcI838NKHPy2yJTcJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBehG:G83ubWDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T188F2BF35BC358D73ACEBA652B54736927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fb7b3f561426c3cbab46f5960adc3f23456c43cb655e087c1432b00c8dbf0bc9
MD5 f9ae075769f1508417eef1ca2581bb4b
SHA1 7570a702551e782aaedab45e6d79b89c25d79ba0
SHA512 364787c8d7a501fb697393f8629104c5a0e33cf79eefdc328d09de34bafed932c2e75b97c229dbf84207829e74de42ecd8f8ab9981cbf139b04986245fff7061
SSDEEP 384:n4ZcIL38NKHPy2Zr3cJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBehG:GL3ueyDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T185F2BF35BC358D73ACFBA652B54636927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4745d38c56f84d2be0bdfca2274b1bb3e3ddd51b4c532546d838e5d88bab3d26
MD5 8c4916f2839bb76e72a745884a551954
SHA1 84c56342c2fdb218d62f2916e9e60e6b4236e7e4
SHA512 a22385b80396e6677fb48fb9b6de4018c1b9dd3c494f7c3f7c629ef2a24160ba2a0690159bb8431a9676310589b77742d373fa60df44d1c13711f9075287afe7
SSDEEP 384:n4ZcIIW38NKHPy2RozcJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBek:Gn3uD2DZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T15DF2BF35BC358D73ACEBA652B54636927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 1671c672d0b730887c6ade5109107558bbe6a5816e9309b245f8de3705536591
MD5 c03409fd5880d390eb9d1d522d3e84c8
SHA1 df8a9b0ebc74a91a4ee35e9f24db85949d69fa1f
SHA512 930d21a95919bba3368c719f921e48978562874fb4d7d1eac9497e98b5e452e8c1002714e585b03efc846755227a94965104d54af0abb5462d20f84a9b073faa
SSDEEP 384:n4ZcIU38NKHPy2rO3cJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBehG:GU3unyDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T1DAF2BF35BC358D73ACEBA652B54736927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5e2715f1fa8e12c666d41b1b33448af24fed7a75d84d13b98ba05a1379c7f001
MD5 0d60325dbf457fdc8eaf6f397f8a9672
SHA1 563c4037a7ec4fd36cecea89e7d9546955524dbf
SHA512 422770c495811ffdea4b6678d726506bcf32ceca1e11c4a1d6065124d459105251f80209632af1901b349a3581b203a3d0410dc6e8605b08826d5a439d5db51c
SSDEEP 768:6rv+4UNbds31dDZIO0ynfMNzc4ReyIsX2eVH1S5D:6bsbS3TfMtc44bsmEH1Y
TLSH
T1D503CF36A8688937ACF66686B44B76133EF4511BC2D80E94C5DE1F0C0A4B1DD134B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7f31d0db4c4a758b1a72d07f83956951e712eabe3f256a79831f1f401bda6ef5
MD5 4803930ceb2b833035e01246d4b248eb
SHA1 24d58c9acf9df2632101d850d421cdb7e9f4a55d
SHA512 db63974ed60fe650d6e19e0e07fc73f3d0cedc067e0d6079282e77197157cb7e7151763d58d8bed12ba1ec4727229d12bf493fe24b6bead2c87de7e24528e597
SSDEEP 384:nTZcIl38NK+Py2ia/cJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBehG:Ll3fUKDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T17CF2BF35BC358D73ACFBA652B54636927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f148732a9be42d6cf5ce2d4cbf2524b8440b1c87236185116efc6f8644612eac
MD5 a4a64d000b068ccdda211cfd28223299
SHA1 befcf44e786ee85a11996d8ab83b463b3368b223
SHA512 cb548ec8a58e4085aebae21ddccbd71e8080d25e6fe2dafc2a6252b86c529a0825023695e546c7c5ba4ca44e1b52c1f9a10d467a5753ffb96d86b2b28e035995
SSDEEP 768:Vrv+4UNbda3B3WDZIO0ynfSoNzc4ReyIsPeb9MJ:VbsbU3BkfSotc44bs2b+J
TLSH
T1DF13CF35B8288E73ACF7A656B04B3A937EF4216BC6C80A98D5DA5F0C09475ED174F813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 261a1e7256ebd097654d541a203d8d1d711a232bad15e87cdb768520eb6e25ea
MD5 092d20de25f17ab14b78db49ff6ffa03
SHA1 3fcd5a7993c3ea7937b3abdf00740145f239ec22
SHA512 850c83595fc398b2bc122a502dd66e512b1a79d74e5c7cf9c5a2be70bb39d6a80de26bed703202b0f3bfe83aaac4c75573177f75a8c602b8fd17ab493471f063
SSDEEP 384:nTZcI538NK+Py2r0TcJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBehG:L53fRWDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T15FF2BF35BC358D73ACEBA652B54636927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4e2d7e95eeb3f8d57c11e154e7c403e275a3279ae247a5499b6aa14f54d001cc
MD5 ac4122521109970083dda26d52007a26
SHA1 ea190c8223d98db844f5817ecf151197317335b7
SHA512 d4b09e75adb5e392b3c5c70df090a811794d56dc2e537905ab0a1f0f8d0815d11bc4b0eff1b2faab703e11d8343016c895d39677122255d9f85dff6ae298d898
SSDEEP 384:nTZcII38NK+Py2HV02cJDZNfNoXOVSUUynf8NhETRzcoXfK86sfxEZxxsIj4lBek:LI3fE0XDZIO0ynfSCNzc4ReyIsPeb9Mr
TLSH
T1D2F2BF35BC358D73ACEBA652B54736927EF4617BC2D81E88D5EE8F0C08436AD174B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

736d2fea-e4cd-48f8-8f2b-460ee1906709.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\736d2fea-e4cd-48f8-8f2b-460ee1906709.tmp
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65a256dd-ab37-4c7c-a96f-4bac0bcd6eeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\65a256dd-ab37-4c7c-a96f-4bac0bcd6eeb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json~RFe59c980.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json~RFe59c980.TMP
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

5c5e4efd-6285-49b8-8bc3-9825730de3a3.tmp

Path C:\Users\Admin\AppData\Local\Temp\5c5e4efd-6285-49b8-8bc3-9825730de3a3.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4324_846505437\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download