hxxp://azarado[.]com[.]br

Analysis

user interaction
yes
max time kernel
357s
max time network
391s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
31/07/2026, 17:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://azarado.com.br
Sample260731-vs3prsdh45

Score

3^/10

discovery persistence ransomware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2008	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299918267060568"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-42486406-2033776002-1658862356-1000\{8D920068-E9FD-4EA7-9EEA-97DA802B54DD}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 31 IoCs

pid	Process
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe
4180	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4180 wrote to memory of 1912	4180	msedge.exe	83
PID 4180 wrote to memory of 2008	4180	msedge.exe	84
PID 4180 wrote to memory of 5076	4180	msedge.exe	85
PID 4180 wrote to memory of 5076	4180	msedge.exe	85
PID 4180 wrote to memory of 5076	4180	msedge.exe	85
PID 4180 wrote to memory of 1296	4180	msedge.exe	86
PID 4180 wrote to memory of 1296	4180	msedge.exe	86
PID 4180 wrote to memory of 3504	4180	msedge.exe	88
PID 4180 wrote to memory of 2632	4180	msedge.exe	89
PID 4180 wrote to memory of 3504	4180	msedge.exe	88
PID 4180 wrote to memory of 3504	4180	msedge.exe	88
PID 4180 wrote to memory of 2632	4180	msedge.exe	89
PID 4180 wrote to memory of 2632	4180	msedge.exe	89
PID 4180 wrote to memory of 2556	4180	msedge.exe	90
PID 4180 wrote to memory of 1000	4180	msedge.exe	91
PID 4180 wrote to memory of 2556	4180	msedge.exe	90
PID 4180 wrote to memory of 2556	4180	msedge.exe	90
PID 4180 wrote to memory of 1000	4180	msedge.exe	91
PID 4180 wrote to memory of 1000	4180	msedge.exe	91
PID 4180 wrote to memory of 2036	4180	msedge.exe	96
PID 4180 wrote to memory of 2036	4180	msedge.exe	96
PID 4180 wrote to memory of 2036	4180	msedge.exe	96
PID 4180 wrote to memory of 1820	4180	msedge.exe	97
PID 4180 wrote to memory of 3444	4180	msedge.exe	98
PID 4180 wrote to memory of 1820	4180	msedge.exe	97
PID 4180 wrote to memory of 3444	4180	msedge.exe	98
PID 4180 wrote to memory of 1676	4180	msedge.exe	100
PID 4180 wrote to memory of 4116	4180	msedge.exe	108
PID 4180 wrote to memory of 4116	4180	msedge.exe	108
PID 4180 wrote to memory of 4116	4180	msedge.exe	108
PID 4180 wrote to memory of 452	4180	msedge.exe	109
PID 4180 wrote to memory of 452	4180	msedge.exe	109
PID 4180 wrote to memory of 1188	4180	msedge.exe	111
PID 4180 wrote to memory of 472	4180	msedge.exe	112
PID 4180 wrote to memory of 2464	4180	msedge.exe	113
PID 4180 wrote to memory of 1172	4180	msedge.exe	114
PID 4180 wrote to memory of 1172	4180	msedge.exe	114
PID 4180 wrote to memory of 1172	4180	msedge.exe	114
PID 4180 wrote to memory of 2212	4180	msedge.exe	115
PID 4180 wrote to memory of 2212	4180	msedge.exe	115
PID 4180 wrote to memory of 3372	4180	msedge.exe	116
PID 4180 wrote to memory of 3372	4180	msedge.exe	116
PID 4180 wrote to memory of 3372	4180	msedge.exe	116
PID 4180 wrote to memory of 1164	4180	msedge.exe	117
PID 4180 wrote to memory of 1164	4180	msedge.exe	117
PID 4180 wrote to memory of 1164	4180	msedge.exe	117
PID 4180 wrote to memory of 4920	4180	msedge.exe	118
PID 4180 wrote to memory of 4920	4180	msedge.exe	118
PID 4180 wrote to memory of 4920	4180	msedge.exe	118
PID 4180 wrote to memory of 1884	4180	msedge.exe	119
PID 4180 wrote to memory of 1884	4180	msedge.exe	119
PID 4180 wrote to memory of 1884	4180	msedge.exe	119
PID 4180 wrote to memory of 4676	4180	msedge.exe	120
PID 4180 wrote to memory of 4676	4180	msedge.exe	120
PID 4180 wrote to memory of 4676	4180	msedge.exe	120
PID 4180 wrote to memory of 4312	4180	msedge.exe	121
PID 4180 wrote to memory of 4312	4180	msedge.exe	121
PID 4180 wrote to memory of 4312	4180	msedge.exe	121
PID 4180 wrote to memory of 4360	4180	msedge.exe	122
PID 4180 wrote to memory of 4360	4180	msedge.exe	122
PID 4180 wrote to memory of 3420	4180	msedge.exe	123
PID 4180 wrote to memory of 4388	4180	msedge.exe	124
PID 4180 wrote to memory of 4388	4180	msedge.exe	124
PID 4180 wrote to memory of 4388	4180	msedge.exe	124

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://azarado.com.br
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffa1c54c188,0x7ffa1c54c194,0x7ffa1c54c1a0
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,5944259370723394762,15782880122652039691,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,4175733384046827992,3700645548775035578,262144 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,14108052659566967890,5648886001982293715,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,12104902220306214823,164428200084046688,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,4733330884228966070,14096121682210625675,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,8594603938906857898,7403738423122291836,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,5400637459034456193,13838030606947675354,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5160,i,7274044531492951415,13385096343396373333,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,13903857500580244181,15716442892305819884,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,17120302644335775657,14930979831156437627,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,15385604634778188621,10452850229375170932,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,15385604634778188621,10452850229375170932,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3580,i,16048985632638240500,10520179799306512303,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,2265573437276289912,9601937127390909888,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,15972267070553516323,9928707186340796397,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,13493094082843592280,12325710538550948705,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,1385060787939064396,10597124655876077141,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=2108,i,9402129310988628178,5641564933235322969,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,7992114149146840141,15446115745917202977,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5240,i,4168073161725113045,16333460875292811042,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6660,i,15108983267636874703,10069855203857963638,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6780,i,7958544102571696446,6233099077054958758,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6864,i,7664079131786983089,9076748753747169325,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6816,i,15285086189353788988,11393247319026736609,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6932 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6960,i,4099234659132784948,16986130754388919689,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7256,i,218912600321635999,14118459042437420576,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7504,i,17420867012969410896,14322357233368893476,262144 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5348,i,1167802303055483346,1900810040923093973,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5252,i,12366979859279340388,9582476098168967046,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6216,i,612146314062447729,11509262218051735222,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,1880765439194838905,11265266822812099759,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,15714256713703265015,16482573890429134255,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6684,i,2303073971879887077,12929511912147653319,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7360,i,11923516297384328298,18249881414525479068,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6836,i,15602797112419618702,14412102448301263904,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6812,i,8004352774203735363,13391838851878850117,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7456 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=6436,i,10835952866193556200,994821606313785197,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7448,i,16744171497197070076,1394728679354232983,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=6712,i,4098461713657290296,2750181691185436845,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7676 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7908,i,3987166830922851292,2538455369869662661,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7880 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8088,i,2075716620388878729,6964739076870457239,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8180 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=6776,i,4227709787672931921,11488221627754424809,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=6828,i,2574239374695579953,4343750995379866230,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8128 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7796,i,17875142489861446965,5581052023496202034,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8136,i,17088302113100751987,7520077940215461352,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7040,i,577324599758541481,6667536086166399683,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8504 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7608,i,15577857787342258216,6032050377809790515,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8628,i,11596295876827639420,10795937291076447414,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8648 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8564,i,15172712838653768782,11317375111644425602,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8532 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7572,i,14500874735327107208,8709954673840900295,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8804 /prefetch:2
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8988,i,1993625309483070734,1907683097016375750,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8964 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8180,i,4011578043759636159,8971583669693221201,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=9076 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8376,i,1224836862418686760,10019167135640280289,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=9080 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9292,i,4449669245777546498,10742552600448440270,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=9092 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9296,i,1382894622266355070,2759230895108071585,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=9436 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9464,i,11317063109779072715,16308885557018820109,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=9288 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=7024,i,11974827297539386235,9403498057442283517,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8560 /prefetch:2
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=2108,i,10996035131043873028,11049925577039098141,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9616,i,5890791572797754215,15839626937036309060,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8100 /prefetch:8
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9440,i,12122950557298796324,10015992137625416974,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=8660 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8984,i,2897825874140141200,3375767878997493241,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:8
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9160,i,15956885843851358846,17669049881236441534,524288 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=9268 /prefetch:8
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=8576,i,12685104083365787910,9064941325442867594,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=7620,i,11276474893546840716,15647631413399919746,2097152 --field-trial-handle=2304,i,15199066434121571784,12506208560073533998,262144 --variations-seed-version --mojo-platform-channel-handle=7492 /prefetch:1
  2⤵
  PID:5460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 d5217640df91248fea94d342f3c3c5ed0657d3ad28421a019ce0669e40197978
MD5 78b9de034e3a7edea6a485a8b51bf1bb
SHA1 6f4ef3e49b6a55fcf4440d37ef29e5d9fc82f4ff
SHA512 c503627f0c4e23b000b3131bf927030af409f64a95359222d1cae683858fdd5627327d7a6ec74effe1cf8a491d6eb4671448b4eb8c35c8a35f43f76c7e4baaf2
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7J:fwUQC5VwBIiElEd2K57P7J
TLSH
T14DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6a64f2ae6a6617d628aecf24522b5fc03d56fd3b87da29c09e359aa8c784278c
MD5 319f3e9547ae8f5bd93b63a209353feb
SHA1 2cbbe39cbb469d1b008a38a5f66950de62d7be5d
SHA512 2335ad7dd232ded853c12042411a51f4c045d5ae5954aac7df9f840b69e4aee72129d3b0d5a528b94f8c84e50d9f92ecc1fcda50496c846e7b2b716f7e287127
TLSH
T115D080F777586105E75DD131EC13CB111B65195215D7DB02E314C99CA4644F566871C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5c85913b3d3cab7ba2879d18441341b2b4fd7ad9ce12d0c3ebfe421e6267c647
MD5 962c87a3f67f82f2083d6294250d9e58
SHA1 cfe9fd1f6729400cde038cbdead8751b96eacaca
SHA512 059eed3376b6b470a0be74a5db7d47fa3bae4b0557c4216789040d711e15417470e3ff6f96808c2e42bf6080c9af25da282ed4dabe378bd81b0971591713ef3b
TLSH
T11FD080F737586105EB5DD131EC13CB111B65195215D7DB03E314C99C94654F566871C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 142c96769bd41b623eaa6fddbdd1be236a75155de5009f7c7927f0330cccfb9d
MD5 11cbb1a2fcebecd299c05398d1468fe5
SHA1 0c6563571c5dbb596b063c742f0d94c8cf5d8e7b
SHA512 b94f18d62d2dfd53c5a7374ea8cb7689aea2bc6df0216e5a15dd4c0833b56fa75d387bc69c7e0bbde817d8c733a643c714ff8313378c7aa05fd747eca939b7ce
SSDEEP 192:1jz0xmVuiTpTpIIeVLk/ahhhRpkQjjuuuCoNNMQh:1jz0xmVuittIIeVLk/ahhhRpkQjjuuuv
TLSH
T1F7E16B4686E8CB9A9F4910CB49A0B39C5070370AEBDCE509039CDDED344E4DEF6A56D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 52KB
SHA256 9cffa9f09bdfdb908fc72ad4f471c56524bd5cfc40c94acead007bc44d8abcbe
MD5 8bb0e0a79cc69e54c321b5abe25056fc
SHA1 e1dce4629c0f0294028eb4fe4ba756b783c69b69
SHA512 fe0a5dee2600de974d4c4fb22a359b71e148958b33e8294df6c78c0696c4bf23d27a7448d11d47923267e0676bff0d7640773b172a598875a3f38a9d95ff2f32
SSDEEP 1536:+8Hh79+MYGkrMOGqcExtepaCPA+QuM5Lpc:zHOtZZ7eECPDvMbc
TLSH
T19F33F1D243A900D3FBD2FC3D52751B9DD699E050892709D03E26CF82452BEF15A9BF2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000186

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000186
Size 20KB
SHA256 d7f914c1bc69b5e44e72df5ac8531836f6a5c0eceafae0b74c584e3575563fee
MD5 42c1cedbc594a3050f7dbf75503e8dba
SHA1 6825f2303e7599122e300d9fc4e845c724b50f9f
SHA512 d0312c334cd981b8be059b27c0f69accf302207ed8d2d63f46bc3c4f5713fc3476db28e83c80ce4f4d9ca8c7797a3e57b6f341cba6e7915fd43262f2d6687117
SSDEEP 384:k+tujIOwPHk/CRNsQiSpsZtaRmo2OGVUZxLtfR0TGNq4pDBiTn21ux/tFL5YjrS:k+t+ILHzRNvilERTGVAq4pDoz21ux/tz
TLSH
T12592D0AC8B45D4DF0E4E8DB5DE33DF455064A58136A48FF5DC74092A42ECD8A413E3BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001af
Size 114KB
SHA256 19d410cf923f8bb4f081f400fcd0083a5edf8f380ff21a5c3a8d11051353dd6d
MD5 13aa516157d50e05b815d890cba600fa
SHA1 e5db9937574c4050d905b36dd4d8112c22ba83d9
SHA512 f1ae97c2917c7b27964ebab9530ba4918a02f5299c162d77ca92f51b76621ea074cbe41f4dd4f82508a0897761fdc8c0f7d3d442ec3ed62eeecab7e266649a01
SSDEEP 3072:25KTa8bNuyLN+/vDWcZjuAIUXgrnUZdU+heM9PoJW6A:gKm4NRADWcZjuAIsgDUTFp9wY6A
TLSH
T107B31234E536A50144055A8A84EDB97F16652BCFA0EA92C17E7B14BFF783270B7E01BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b8
Size 21KB
SHA256 4c3c86fbedb531faaef4d882a565fc5d2664ffbe8cc5abbae290678b6ef7a777
MD5 931b2abdaa000f7f9c66e9d68c681b8d
SHA1 4343c04602447e29c7287cb5b225e57ebab24a90
SHA512 12ae6be14db5921ff685750fae82d18e414376c92386eded05cc5dfa8002912f5aac207a88ec764f7c489b4d8c2998b60e2712e96297c3f8b802963d5b6939b4
SSDEEP 384:/y6Q5HSRXpGQ7FfcovE51KjjhuoHIWLr6IW2gWKmy7Ns2Ki0LqHF1I/IPgaD:/yF5c0QKoe1Oj9oJ21yiFqHDI6
TLSH
T154A2D06ACEC23C1430AC9FD1AC64910C9CE5C709A779EC5C4F1B51C8268AF6F47E9B69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001e0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001e0
Size 43KB
SHA256 d556ae0b7a40c06e2ba9daeb0242689a0f75fe21f81c34a62ebaf1d74320ad4d
MD5 a575a0fb3b78d9eb2007c831b021a222
SHA1 5b717389dc516c288bed3afec7d879800442cda9
SHA512 02183fdd1c5b26eb6b7ab91bac1ac28fa683fb22d56d4bccdc17aae0c1fbba1809ae7d6db9c0f4a65cd8d00c9869f4df13c3e49c14b1eaed0ada64e993f12db5
SSDEEP 768:87JF9K4BeTIxnUye+Iy8c+CMDnLfCAJ1xGiNrt+mpNvXyE6gl3z7j2jFX0HF:87JKMKIxnRe+0nLHLGiNrRpNvyE6gl3V
TLSH
T13A130203ECC85791643627F5DEC3EEFCB41AB65413B8CA0AA01C6025172A9D7F4A9B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 5ba47ae688cd6ce172add089541f5f4fbb82ee26b3f88df0a38fbe3bb6c5bf68
MD5 e86b6243fed876089945e46e4e00905f
SHA1 be7339ff83a8602bd86702e8c19c4fa0ac180e92
SHA512 e114e9e12620d367e0cfdd145dda8a29e906fc0aae16c170c8ee50395917ec9b983895dd25fead235dcb204a9c33e96201eccfc6b4d15a611828140a4de091e1
SSDEEP 48:dfChUCsnupWe88E+/tAoLAFzC26pOSW7Hl4UzZy/HjKPN:khUhskQhLK+2R/47/i
TLSH
T16581D439AD03C4F2F7B0C13125D243387AB289F5DA272E5A1890587D366534DBEAA94C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e5cb5b41519534899ff6c7e50e04fc096d70e04ef01424ed0a44f437ed6b9df1
MD5 e2fe26a11c126b5a4821c6780b630c04
SHA1 13d227b4c8af7e162e54afafff170828eaeff23e
SHA512 c20f7bb463f66a828fa79fd5b7f1e1dfb506339f0ffc4db130eb819849756d91cb7b9123335e612e76f957bf8bd811576ccf4b77fa283ace81d638f189447cb9
TLSH
T1088108396C03C4F2F7B4C13124D243387AB1C9F6DE272E1A1490547D36A475DBEAA94C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 8da20b2e033cd070ae530f21405b42f4cbe32d4483e56f721c511287489f4be0
MD5 c3313e25507cff9dd1049842e6ac5a0b
SHA1 0b167fcbde978b20c78f2f44f0e3d925e91746af
SHA512 de9429a7d3ea00b66b1ed4448bdcb2e258c59bd42971227fffe784aa15c05722bde4c6d5475574e5762f8410a0847c1d52e1be454a424a04032e431fe172a41f
SSDEEP 48:HfChUCsYfpWcSzE+/zVl4oLAFzlds26+OvFWQMLwY4UzZW/CjOWtPQ:6hUSB3QBlXLKc2IvZML54L/26
TLSH
T13AA1C6389C83C5F2FBB4D03520D2473875B185F5D91B2F2B1844843E375A389BDAA84C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b17cd7134bdb9b08ce0e9f0d8a09707fa6c46608e6474e302cc1226abc371bc3
MD5 e07ac566510c4c5a66c52472e3015a7c
SHA1 6c691ddc5776d281aad2e4abe42838d30538a390
SHA512 5d91e173b82761e9987008aa92a83fcc26ccfb81e30048a30500073a5b50682509bca777afddfe0a52dc7c940e7faaf7d198e93037a6cc381ecb8aa684741907
TLSH
T1E7811A396C03C4F2F7B4C13525D243387AB189F5DE272E1B1490547E36A435DBEAA94C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591ddf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591ddf.TMP
Size 3KB
SHA256 5fa9519534d4398b4c28da4c651be2eeb0beb7b29a64ecebfa435017a3e244da
MD5 41fe308d1c4d0df75bfbc8e4832ec6d0
SHA1 bacbe3f5a0a67a43a4229c727d2877669f4913b4
SHA512 e67f61830e70ad2cc13bf928731544466533636133809fd3ecab793dc613a5cfcd25b8c5ef707dbe4bd5f66875b2b51d0567ced5a63b641cb66c0883d6f7b232
TLSH
T158710A392C07C4F1F7B1C03165E243387AB5C9F5DE2B2E1A1060587D3AA035DBEAA94C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 29KB
SHA256 0de1c1bd01d9e480085fa2fe6f687f960aa549a0644e8726f0d830d593ba2a3a
MD5 ccf8162c25437059f8a80b6450cbe6c8
SHA1 8965275d16d098634609e2bd2d8c94c0db02c66c
SHA512 b139663fc2843eda4d5cc1713f10cc8e35f59471cded635e75f50b68a5407d93589cdf51a46c93d5d8088231dd3fdc829544b499151811bbb15f846e12106f2e
SSDEEP 384:DWer+8kWe+JPp53YmY+0BeAJImNqaL3pryOkkFV3MRA+/0pgL4pnms7KIcfemJft:7a5WWy9kllaYyCwRpNL
TLSH
T161D2A1F783E8CA7EDD1266F1AB246E2BCD5D0528432C3C2785E5EE4B53E2471E24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 deca3b687ee79991ed4c2a5bf2eae48d22fb09dc33e283b8c6cb62f04d40129b
MD5 50cdd9d018598e8661b8af1e2ffb48d6
SHA1 bffde0377fbf2c6d52d70bff4e7a1d1188b3e08b
SHA512 fac0efd24839fa52da671f81b47310c5437eacbbc6aae8c91e12f3dd3770e61a8a4e0174a7a732eea5fb862dbe7a7d5919e32efb35de62dd376e8c809e5c5857
SSDEEP 192:D0iBJnd5We+JPp535kgn4pn2hvZPiKBSUq2EB7KIcf5wmvBftCm2z8x:D0ivnd5We+JPp53ign4pn2hvZqKBSb2B
TLSH
T18B0273B3C7E48A6ECD5256F0A7257E2BCD1E051883283C1B85D9EF4B93E64B1F24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 581fa969a5f04b4f58865a5e4a54826895b0c40f6e7e9f357aa1de72db04ba4a
MD5 1f25989aa1bec4512b585723564cbff4
SHA1 56c5e38a6efdf84d521441dd3a42ffee03ff657e
SHA512 e7869991219d5de9855f6e113807a78d47e672e8019c591ae449da89e14ce0368441a5977edab6f6de4ca22f665ef6004557b5c5936ef6a1cf7d0ecbdad5b6e5
SSDEEP 96:DBOiBJnd57FEe+Hz8NOWD34pncBjwyHRYbhEs0EvZPl:D0iBJnd5We+HgYWD34pnIjHRUhEshvZd
TLSH
T1E0A170F287E487AEC95756F097246E2BDD1E051483383C1B89D8EE4B93E68B1E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 97e8a6c41c6aaca10dab474430e21f6a7746fc78df16bb3a513aac182a222fbc
MD5 8e75dcbcfb52aa34e5c627c2cadcd290
SHA1 4298511271ceacffd3a7369b0e176670903ec5a9
SHA512 cfd3b046c950afa3bbf94b386188772c72ff5a49df625b25e7f24571c149e1a0ea27da4392ac3b352c40986b05088feba438b4f8011f72889aa87fa0c4f879ac
SSDEEP 384:D0ivnd5We+JPp53YmY+0BeAHgn4pnIK77KIcfemJftVbfexH2JgZgeJnkgp2TSo+:ka5hW/6mlc
TLSH
T1D25282B3C3E48BBE8D5755F0AB256E2BCD1E051883383C1B85D9EF4A93E58B1E24154E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 cffa20749ab1a32ffc77fda80cf1df5c392063d635ee116056eb21309af8aa5f
MD5 2be8e637fed1b906eb02016f3c197ab7
SHA1 6af672a7e805579f6bf0216e503a627fa2072bd0
SHA512 d2a32fefbd552db310dafd70ead592aaf1fb176857f4081435b2ad05f2e8d3fc8c62225f4084b223576828227bc8d13e16952004732035e1ba5d4657e6ea6d35
TLSH
T11AD022A31A0431B6A5BCBED5A17AEC8FC73A00A10883EDDC50D09C9A093146C460F24A
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5d6eda.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5d6eda.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f65e9f58739ce09e5b6ce43663b526d42178cda70b304655c962d768b5d19f32
MD5 ef21c989ebd9daaa99c16803a9d22c4a
SHA1 9cad21811080199bc4cdd7eacbb17bb05a37e208
SHA512 ec0a57708fa0482d90aac9da167255291465fc1af3e86e2b7ba67e29fd70373650cb1ad53da02075702fc3195723f2f332f388fb7cb0c90f31f2ef55397e79d8
SSDEEP 192:sxZSRFyM/jK1Ml8Mk7/fjsUkTNOhIdpyGHW6+WNhpe/YwwWWlXIgrJ:sxZSdM7/fjsUkTNOKpHbO/69
TLSH
T1DC52E8166A349977DCDBD20AB955BF53D6FA0473E2940E44A9FCCA0C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 5dd3b5e1d7858fbcd1aeefe77e7a2e77f05dc107d7de74c7bdadbd9e8d226803
MD5 5068a879abd43ef772a68b7cc75e435d
SHA1 368ace2c9fc2c6facea029f13efd49bce6dd27c1
SHA512 2ae0bf4e7037b34f0ad01c62351689d0515c552c30d3c5d51c3b9986c8ccf5a1ddc4937eb4471df46a9c1aaf2aacdaee2309d50d006a9caa6c92f7b5e7148bf8
SSDEEP 384:sxZ8fqum17/fjs9kU66s8qMpRiYnazAW8pZS15posJWeT+8BSHb/RM/Pra6YUE:s0ium17/fmkU4Mnc7WeT+8YHbwza6Yd
TLSH
T162E20846A520C867DBD75D19783C7E32DAAC1052AA85CEDE5AECCE0C019D1FD6B07C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 e7c2b39b5741079328d463c971729a155025a74265efd71fc5a09692ea809331
MD5 8c28451558a3119570c8034d17a14b00
SHA1 ab211c098952ff42c0a4c9b449e629890af96f93
SHA512 e1ef382095679c0459c1134aa279f1fe581b4a994083b31f1ed3d62a7e6a597b62426fc1dfe5a1bb81c9908574e9e7928f88c989a1891bd50e3229c1dbaf7b7b
SSDEEP 384:sxZPfqum47/fjs9kU66s8qMpRiYnazAW8pZS15posJWeT+8BBtHbUnRdM/FrOYUE:sHium47/fmkU4Mnc7WeT+85HbUylOYd
TLSH
T1CEF20846A520C877DBD75D19783CBE32D6AC1052AA81CED95AECCE0C019D6FD6B07C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 8e2851c7c4cb0d6c13884918883fecb5f978e5e5c09ff9203f7d7d1c308fec23
MD5 0b51edaf8cd353f06df21c1ac5b11bd3
SHA1 ef31541f61e99b9f5fc268bd5cea98796540af29
SHA512 32ac282f9658f586f4f65197d7db6ba5c25e1ab57e2cc33e9ac8d37e14a64fbfbd22d2e66575c7ffddafc93efeadc54e59bc2d82389187a30dbdc144ad57d7bb
SSDEEP 384:sxZxfqum47/fjs9kU66s8qMpRiYnazAW8pZS15posJWeT+8rQ93tHbUnRdM/FrOo:s5ium47/fmkU4Mnc7WeT+8r0HbUylOYd
TLSH
T186F20846A520C877DBD75D19B83CBE32DAEC10529A81CED95AECCE0C019D2FD6B07C66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 30KB
SHA256 514c1b93cb2085679e74adb8d2fa29c6a14bd72adbec3a4d9a27f5049611dd7e
MD5 07e43b0582c7963c65db98dab1550a5e
SHA1 73056b460d5def136104d57ff1ccd5b1dfd40d58
SHA512 bb402736f900498a1395c72217a7212cfa6d5eb82c9131a63febf92010e70d7d4ee7280277059476a42596daf66acea1001b516a1caa29afe27fd6eb5e075b94
SSDEEP 384:sxZSfqum17/fjs9kU66s8qMpRiYnazAW8pZS15posJWeT+888Hb/RM/Prag:saium17/fmkU4Mnc7WeT+8vHbwzag
TLSH
T1BED2F606A520C8779BD35D19743CBE33D9AC5052A285CEDA5AECCE0C019D6FDAB07C6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 8f141e882ff159a5391306cd30c412559d90a0c8550005d0402dbaac2e0ef97c
MD5 abfe39a639985fd98e27f6444d42e4fe
SHA1 3b9484dfe916b5dc3e8115d9baa75d1d25197246
SHA512 08dba220e01808657b0dee67d56ba392159cfb88a98ab16d80a1c3300c53f3b5e5fb0e937a196d22059bcdbcc8577e862a2a536a002a6d9ae4c13e133d24461d
SSDEEP 384:sxZXfqum17/fjs9kU66s8qMpRiYnazAW8pZS15posJWeT+8nYHbunRM/PrOYUE:sPium17/fmkU4Mnc7WeT+8YHbu4zOYd
TLSH
T122E20846A520C877DBD35D19B83C7E32DAAC1052AA85CED95AECCE0C019D5FD6B07C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d9fdd021399ff910344790afb1a2d46c5f9efd7c8a33d2cbf5963478295c19ce
MD5 4d65dc5963357580e6c60a2f223aeb3f
SHA1 dab57785f74c66db0a3921e92af091aab4dd72d6
SHA512 f78c801aa73ec6121732823a8a9f25c5456956cecbb0507875d2e01e6dd8b3602bcc3d88f3445c7b2a9df3803695c269c8376eef31cf0e4845c8f8bf8be81ab9
SSDEEP 192:sxZSRFyM/jK1Ml8Mk7/fjs9kimhWhIdpyJ8HW6+WNhO9XYwwEUlXIg5Fa8J:sxZSfM7/fjs9k7hWKbHbaXSrag
TLSH
T19352D8166A345977DCDBD20AB941BF53D6FA0572E2940E44AAFCCA0C04E6BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 7ef1315821f60fd2efe843b9f97711b0bf46e39f33bfdc62c0d7d0a9cc4ce433
MD5 5d6233ccb8247554f599853edea94b94
SHA1 00fa0121c5a2266e1ebdf3284dcd879b71d31c64
SHA512 ea43cff244fd5ebeb5ac9e15360fed4e9845e66c9f593cb51a79c4fd708a430afda3a382a6421dedce16fe7e9f4609aaf81da5c7d99a55ac43e6bee3084a8af2
SSDEEP 192:sxZSRFyM/jK1Ml8UQ9k7/fjs9kimYBhIdpoVjeJFHW6+WN+ng/mCqmyJ/YwwWDGT:sxZSfqW7/fjs9k7YBKFHbch/Grag
TLSH
T15C62D65669345977DCEBD21EB940BF53E6F65462E7900E44AAFC8A0C00E6BED2203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 16386c0bde72b627787d56e77d7a7b20e7c507b4dc110419be5585970378d1f4
MD5 bcc3ee2200c45b1e78d777cc40972367
SHA1 9027aed544eab3baa1a0f297d22d01c469a146fa
SHA512 95e97f1c24c62c160bea94b201eea64bb6b543a78205044c0a1357a0c2af3c0fc78636c446483a7c5b1faf1a87a5fd711af46a7466ef5d192d5673e8a6c3cd94
SSDEEP 768:6n4TaXWWvyaZy8F1+UoAYDCx9Tuqh0VfUC9xbog/OVvhLlJX65lro3yiTCsB:6n4TaXWWvyaZyu1jaihLHq5eqsB
TLSH
T1E9D20B3B684CC77E4F840E6DEC2A6F966ED801CB96984D5447FA484C02C77EF512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 34KB
SHA256 642f8213f5156d2f03ce6a1c3057e4470d986fd1c3b62c8eff1a4aa10bad6cfb
MD5 be4ddbba24178401ccadf45e13879fde
SHA1 1bcfbba138c3ab533dbc08d9bf01df197e410cd9
SHA512 fb520b0d3263e27f7062a7d2beecd40c2449d04664f759e15d77e0fedc3241b0b00d403e5cf265d27d7415c28749f0bbed65263bf84993288505096a6e25130a
SSDEEP 768:Ab490sMjuXn4TaXWWvya/y8F1+UoAYDCx9Tuqh0VfUC9xbog/OVvhLlJX65lrobi:fnn4TaXWWvya/yu1jaihLHq5e/sR
TLSH
T10BF22C3B684CCB7E4F840E5DDC26AF866ED8018BA6984D544BFA984C02C77EE51274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\temp-index
Size 2KB
SHA256 d10d5699f83795410c8227d272768b22aaf98389b4a83d7a5f9ffe115244c6f7
MD5 844b0d8de43fe8535dee33da4489f2e7
SHA1 4d2679755ad384946568137195b493c21c2c8e72
SHA512 0ef6edc77cb59dc5f7c744452da61342fb2bd0e476d69a3ba59e5e9c59f2d14f74194a5bafbe6cd5c2514460e1f6e09e46f2b33efd2c449232d8746c9b3480ba
TLSH
T1B441E68E4D84856FED9448B304B264A83378CCCC1B4193835CBC2237BC9336A0D5B1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d6014.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\the-real-index~RFe5d6014.TMP
Size 2KB
SHA256 c3477a72e4677e0081c8405886db4c54a0743842167004522694c8d2d34888d2
MD5 6b9fae085c90ed0b0e6e49635381ee17
SHA1 ffffa7d4e502039ee4abeef44880069eddaf5b61
SHA512 a1d8e1ab776d7c985213cac3acb45063b8f266a66dae85585a7d559ed070d8642e02790652d33d8bc6aae092354dc8dddb194e4e121cff603458249be0df2409
TLSH
T1174186DA4E41451FE8D044720993B4A43379D50087127B47A4BC563A78A57BD2D5E1D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 689fe3e7db3657b2057e6bd622e8012ede483987a77c80f101be1d4f662c4c01
MD5 c964ffa3e3ec9fc659ad2f8aea150e18
SHA1 bb34e74ded1b72175d624227bda2ffb48d010f7f
SHA512 4f84c48930b9bdc935cce98901355740b428a06e8495427387303947467ea64a07a4bfa94071aeaf8dff14def71167a0f72366eda4bdfd973d4927f45aba976c
TLSH
T1EEE0207B9EE70C60FD7FD7D66072486805457844D585FE4F942A75C3A0613053896C62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6a9c2bf256c0d93453e25a76284989e6d2273723\1b25dde7-ab87-4fe2-a434-48dc02ca3720\index-dir\the-real-index
Size 72B
SHA256 dcf9233b1635e3604f722e15912ad5f87af9b4b8ab242f420b619e725e9e578e
MD5 0c481446a7cbe29ac08a4e362f8c723f
SHA1 f2bc1160c9f2bb36e1743e2d37af5cd0819e1021
SHA512 51a8056844bcb99855dd268461079b2bd05c7ad35a8fd6e12833f04c7e3f91c9ba7dae04dc1f3394f18d6947bd871d1ca2b3ae754aa4bb78c2b7a7ee8a0039f8
TLSH
T181A002185350A447C0001A745B562151773DCD933101570B74D04596AF54F80A94F8C1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e5189.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6a9c2bf256c0d93453e25a76284989e6d2273723\1b25dde7-ab87-4fe2-a434-48dc02ca3720\index-dir\the-real-index~RFe5e5189.TMP
Size 48B
SHA256 6ae0b25801f68d6398896f5d535b98888f2d7c9206f4d0deaa4516436d54610a
MD5 444eacaa414078ed613ae852432dee0d
SHA1 312fa1661fa0ea35eb25943379d0f0512fbef1ec
SHA512 4389b32a494bb185168dba7cdbd62ce96fd4f1138eed2c74500ee2cf387b778b8e42c2728237b6fe8ae1d08f84d394e5acf11dbcc179c48c1b355aa3ba7a0fa4
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6a9c2bf256c0d93453e25a76284989e6d2273723\index.txt
Size 186B
SHA256 f0e16b92f7364ec6e8f8b8c405016d294e49dffa95b66b284bbbcd0c0406389a
MD5 da65f6d53ab28932b0418146e632e14d
SHA1 ddf505e297d8540c04c00fc2755f5742ccaa3405
SHA512 963ced508f8b961fed261095ca758e726852270b62875209ffdb253f27b38db5d3f0b356f49790d8a81c9f37d0b15e56606869c574f4eb369f11dd80fc1e0be1
TLSH
T1E8C0125A1F826814BB50859A30726A55CC1A2580D8D3CFDDAA18E0BA44009E10E50CA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5e51b8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6a9c2bf256c0d93453e25a76284989e6d2273723\index.txt~RFe5e51b8.TMP
Size 191B
SHA256 ff2910f22ff3d299c32090361e6ad35398c463ba40d8a4a66bc4424bfe044aec
MD5 4883994e899786f04dc76a8f8a745443
SHA1 acf69153c1c776a35106e2ddf63f9970b39040a4
SHA512 07ac4dc724ae98eeae74296ca08f35477c9fa352cd734d7590819782b50d55457879781c8a0e61595915b9b356ddfd324e592e9c5222e1ff4267b924a36137e3
TLSH
T127C0125A1B926914BB10849B30326E45CC2A2D80D883CBEDAA19F0AA50309E24E54CA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba6cfc24cbd73ed5324bd44a339b2c41e3bfe3aa\index.txt
Size 169B
SHA256 307be908e0636c40b225cfa752d234e7710b24e9a093b3372bd8598592732b62
MD5 fff96c76e6a727dc33aec6f2c70645af
SHA1 41c473469eeb86ee4d7506da82bd67501619f2a3
SHA512 ad0a48fb2ecbccaf6d0a8058647a391297381ecb03c37888570137a45102af00629f043997f3e695d6b7bb42030165fa4256613b6b7695bad29d6a61797bae7a
TLSH
T1B8C08CA3289283206FB37ED204782029DB163D5E28BC781940511008EC01E37E9BBA44
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5dc9da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba6cfc24cbd73ed5324bd44a339b2c41e3bfe3aa\index.txt~RFe5dc9da.TMP
Size 176B
SHA256 68243ace55315ebd18833ac7bff179eb530bab1df932f5ca4ab6742b3bae281c
MD5 defbf0a1c4ce2e237ca63b5b9428cc0e
SHA1 2b5090fa5b526c815e37c7873b2806e667c3bab0
SHA512 63b5c539a32d9a664b5b6003606c36dc6b467c916dadce71ae0208dc3a6b8c716f3bde9b4f4148f7c40d4a44cdb67023534f8ef0eb77de5986dccf70c4c46ed9
TLSH
T12EC08CA328924330AEB23AD344782019DA263D5E28AC791540123048F830E37EABBB94
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 c27e00411107e9f92337c55096eba9c96b84d4ddd5e1446b44e63bd325508c17
MD5 8bf33563723830d7ef5099864e220eeb
SHA1 8ec9f8ccc45fe3e1c131acf79c7aec1ff7a5dfe3
SHA512 714533401aaa87e27b07e8d7e36d4f91c9b6a3308b3cc12bd5656e053d0893dc4674cd8dc133138e420f3949daf6fa3846898f78413e8a458a5f2ba00d71a626
TLSH
T138C01217D2C42324C4306333251B84D833201DB9436D33ED90F8240BBDF62378116215
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 8513cff830a4125c42f67d63f568c35a09f4ccefc265a2d153833fad8dccb951
MD5 690bbbc5f27864ab1a1a75db55befbb6
SHA1 f5e419ad7e8083cff3a9875347038b0148e2924f
SHA512 7ab69d9df147b08cb963cdf9caf5b924f835ed672fb55b56d377547556dc845fd2fc3d86a805bfa4fc757331ab97f804c80eb4fb058c1f517d651e3ce847c4dd
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5ddd34.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ddd34.TMP
Size 48B
SHA256 76dd3bbbc0159a8a477aa4d3b64674f5bf95b19d439196c84744fc3344b4a890
MD5 1fb06e2acdcb75fcb157dd27505d21bf
SHA1 c336385e66474166685a69e9a779a12d9494ce82
SHA512 5c1dbdd9194185bf6de605345fb6b937189c455d3a971d3febdb72ef11b5b66dd71cb0e6da416fcb244eb4b5f20c3d651dfc2d796e0bb5d82d288f6234439f87
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 2315962653492fb234b9580966f8f38911b3a4559dbd04444cac8e6de95cf810
MD5 b7d03d31d13d41cd166e17fe804ed6e2
SHA1 76d31864742b943d60e464622b4ff516d3225f1d
SHA512 2880ed9b75c5b56b577655fd38cb3b05b41f5b2a0aadd65937c65bdf851e00b23e2e72115ff1f150291c4e70dc922b19839569c697043ef885fa304e8ddf153d
SSDEEP 96:KsOeOROAOkOeOQOwOx7OEOrOsJOsOxKhO4JO+OxtOGOOOzOsOwOSOLGKQsS2ZmK1:mJIrXJ7bc36rvF4Qpih5yvbS5lFZb/4
TLSH
T148E14552327B02413CBE294C93A587378E4231B33154F56F7BA841A6595BE121EFEBCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595a1c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595a1c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 25778d08d8c21d278a846374871986c0b8e826497245cbe7a9d2c58a9b569a2d
MD5 0d21588e8f2a96036449e80bf9777f41
SHA1 4bebd752a16010da5cf3204c6733311734c1720b
SHA512 9166f8150286a3ee7722ccbe1726a8d3625ae974cde8b3fd635eefa8da84b094aa42a9e50228aaac32329e5e9a181b3b3fd8dba6a26781b84fab3914c87ae044
SSDEEP 192:ufLsN3k0QaAZU0AQtQmiU10Tj4UiX1X36hPwoDbKoqKU8:4sN3k0aJBrAMUiX1HyYoCoU8
TLSH
T144323C3A68789C3A5DE3A151F04736039EB5506BDB893FD0DAEC5B0C06CF698530BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0d08181e18fb1a6eb1ef3f257c4da8c2127c79c9010b615425e1e7d24abdabe0
MD5 840d1b297dbbb8236ea369f95a2178f4
SHA1 6632e7e9080c61ff45885e8e1d499f3c5a4b3d7e
SHA512 775e3836c681ef4d05aa47cda365fce502e11a7882e6bb573840807c322c1c88565632c3275a0b6eb337ab34640e6a951a22072634d5cc85e09dc5619a74c446
SSDEEP 192:uVLsN3kSQaAZU0AQtQmiU15Td8BUiX1X36hPwoDbKoqKCR6htroe:6sN3kSaJBrvd2UiX1HyYoColhtke
TLSH
T194425D3A68789C365DF3A152F14636035EB44067DBC92FD0DAEC6B0D02DF698430BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 841bd67d5aac38120e6c3f6e0861a0780f85fc704ab783fd4af7b45b4efdb53c
MD5 f5bfed4ee5bfb079830f75a488f2ce33
SHA1 81d140302e6164402e92320aa523f19eb58d2af1
SHA512 88420d26b3a35ca9da72d82b3cd026042e3c7acd2edd8819eafa9d32aa197d1820eec66010fb7a73239526b40957b0f9beec736870b3e6900da9c5a1e72708a3
SSDEEP 192:mQJONC6zZU77QmiUyBezmaU9X1XzwEEiU6:m2ONC6t2tTzmaU9X1l/U6
TLSH
T102021A39A8696C7B8EE3AD45B48B3B136FD1102BEA956F94DAE81B0C01C764C1303D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 aa76ba3c2ddd3d9deb3c32f68441cd2d1d3281a630020b548b9758a16da7ad3d
MD5 a6740a587a1a39b08caf31a7647270a4
SHA1 843d717b4d53698ff4138d6e85ee7126065e934c
SHA512 07016447b97de311e418b998b6d93b12e86f52eaf43c4e58829856a88673ee98b4f3dd9cff8c779efee74381382f1295320f1ac9e46824c0367b749a2b9b5ca8
SSDEEP 192:ufLsN3kZQaAZU0AQtQmiU15Td8BUiX1X36hPwoDbKoqKCR6htroe:4sN3kZaJBrvd2UiX1HyYoColhtke
TLSH
T184424D3AA8789C365DF3A152F44636035EB44167DBC92FD4DAEC6B0C02DF298430BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b94bc506523e8e8dd08900cba998004c30b2d15051557749624eecd178f77c5f
MD5 ff95db0b0e76fae6c5e27706c0b24cd8
SHA1 b664a3629ad3409f644ae838c932ee95915bfd46
SHA512 c78bfe57a3065012eca94448ea46d40f0e75e1d497f0b27f2419f04437a33efdae9e433bf4f4f07de34aa209bf8f075de209ab815ad9d01ed65adae845aacb20
SSDEEP 192:kONy6zZU97QmiUyTezcU9X1X36hPwo+s/oqKU6:kONy6t4t5zcU9X1HyYotoU6
TLSH
T159122C3AA868AC3B5DD3A551F08736035EA15127EB897FD0D9EC2B0C02DF558530BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 a21e9d1811958210559378ac0d762f113866334fe809c68c1b3c1d3d69c2592f
MD5 f97e7ad0b5242238121cfa4823f251ee
SHA1 3266ae96fa72e2e21ffca8f4bbf2a14d16ab46b1
SHA512 d3af9ccf7c7432ebc5507247ebd623a48909d54a9714abd5268eaf3d59496b360263ec2e5cb10f5b7ee6499d5389c106fcf1e0a92bc6b86a769014f72c841fef
SSDEEP 384:PZcIhsN3kIaJBrvd2UiX1HyYoCoOObjI9G6w7s:HhFzd6gKo29Ms
TLSH
T1FF928E35A878993659F7E112F4863A035EF4907BE7D82FC4D5ECAB0D06DA5A84307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 eca3ffe5c7a7ec83cda50399876fe506d14200c45045cfd01fcbc16c2b577e21
MD5 da860911387336df224af0463cdcecb2
SHA1 ab8abd2f6521e1b2836d5517eac72326d225b0fa
SHA512 c72b09fe467f6c7065d0e7743182cf32a9651f89e3d250a84e6cf5f945cc6b8742f57cef96a426f0e5be260d5588371640a159b4ec56fff0832fbc6cc2de55ec
SSDEEP 384:FiFiZcITIzsNJ8TUNTUlIlkIaJBrXzII+Fd2UiX1HyYocoOObjI9G6w7s:MFQIgwgkzzII+Fd6gEo29Ms
TLSH
T1A9D228F658D7853AE9AE9703B77D2D024DBCC067F6846A80B7D85A0CCD960BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e6fa619ef29526970e173566b209839ec8ff19833a99858e7cf54382119f7007
MD5 e38551e97d8942cf0b42be5bdf897ba7
SHA1 5441b35a17342edcf45bf81ffe986dbb7bbe7b6b
SHA512 27dbf9034092b9c1e8bda3dfc751c013edbdd6d0e325ce287c5b03ed5edc19dd00711f5a5ae812093612334525e7ff9a0be0003c4f6250b2badb99f428609519
TLSH
T1CDE0005A924415BBD168567184936F207EB281318BA222868B3116BCACB27043F68A90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 132dec3579059b3bb2819bfc7daf64dc7d3643b2edf3055b126b9413ffe2cb9f
MD5 b8d1911c3a6ad1fa13c288eda4537085
SHA1 4316396596bcb22ad85608b35c1a1a8051c81138
SHA512 f5be2f878e9f3cecd3ceb99b1bc00a3f8537b9a913a4122f9a5a693dca38f25956153d540da9a0d8553c10588c8b260746ecd2fc5026d8d7a7bfb4eff788d447
TLSH
T10EE0045B930415BFC028577180936F207EB281310BA222C78B3106BC6C723003F60AD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7ab51278035de261259b06b9312e4c063ca77a58056752e0ee2f2a52db966abb
MD5 536171443432a4305e577498e560189b
SHA1 f05786e6aff675ae056f87678f47ae28cd0d3dc9
SHA512 acadda5d4fa3382a2b79381d0f3f1a5571ee353a9f9542c9f6070f4ea87150802d96a1529f5b87ba3543b681307083132557f62dbb8b46b9aae07ebbc279a3a4
TLSH
T19FE00157924415BBD168567144976F207EB281354BE112868B21597CAD627043F74E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 832db33b98edc2692f19ca8db29f9671b476d26652534a4f44146257b021c05f
MD5 df1150310f66196470522132b6b71046
SHA1 a2aad33d1965da730676247905806faf45feb8ba
SHA512 27fd84292ba5498dc02a8018e4518ef0a5a3f945dfb2f723d194d8e77009d16bc416ec245cdbc74cb365d07ae33f248b1a9f3bf6ab75b2c62c648bf87b816409
TLSH
T105E0EC22A34024BFC0A8033041832B343AF281261BE212968B3009787C323083B64ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6f76525f3782072d0dc09013a51ba557bfdd60f31613698663e2b110a2ed4fe1
MD5 3724ae4cf6a7c8ef7e629cfe5bce9a0a
SHA1 69ca7e7fe5e45b64492749022efd85f05de13295
SHA512 a7cda95eaedd8d21570b429225881881c24fe74191bdabe8214f0461de7ceffadfbcf886117388973f58469aa3eae32cdcd288749d4020291ff33b2f8f3f7b0e
TLSH
T11BE00207530414DEC03406300013673017A3C121057113078D1006542C122001F506C4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b29e7c929bcfc62d1b5aac8c7a956fa8d493561a38d5874913b3532fd01f265b
MD5 cb1c77144cf761fe357b2e9d4c48d708
SHA1 13836f8ee9166ad3f72e63d43b0b745a0e1c354d
SHA512 7e71df85f09741966685efca6d4016876cd20fc606bd438bd8ef5c8fa40401d1bf439f1338ba092d0ba97eff210ce8c2180e2b06c7245d315ab8be5f3f9b108c
TLSH
T10EE00106930414BFC038073000936B303BB2C1210BB313078B2006783C323002F70EC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2f3fc196120ca99eaa8662f737cdf5dd0b6b0d1ed03fed48d459cee42bd371eb
MD5 dddef6fa1d10f35f28e6ba392fa87b4d
SHA1 c905cfe1658023b4ddf8ca3fd7de9046a34ca1c9
SHA512 bae908fbb83279084c1d4a38d09bbd9b7e28030b9c0912a141d776c149346dc66dacdf57f341d27b31224acd71cd07953ac774d5e44e9e3fd51ff675f19b9fd9
TLSH
T1FCE00957D30414BFC038577100936F306EB281310BA222878B3106AC7C323003F60AD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e70a33d8dbacad3ff7a0b4e075d8ef6502bddceb8009da68f81552f93294b7e0
MD5 c6f708e09177258fd4b905bb66b0febb
SHA1 86244d96c1170b2c2d73549728beda2c7fd1eb8c
SHA512 a32f9132f211eed1dd858af735df340471546366c65606bf6a4d0abea6ff9582b0bff38dff5614e6d42af0bdaf7692abefb73b6cefdfd113908bbca21a7655ed
TLSH
T1A4E0EC22934014BFC0A8033040832A303AB281251BE212868A3009787C723043B60ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c4f50a4529147413796591954b4e8b82ef298989529dcc90fddb2afac7460852
MD5 2add4f2703dda67dc70377d5ef98569d
SHA1 e775fc0365431570c7da59e9e665da71f3a25650
SHA512 0ba8b4d522aa380e7fd3d546f312a8ec39bb14505a64f1e8075f1e4d3010a6fee3f1af6edfedbc8a8a2451f6f0e4b9a21da671c625c9cda5a482866e638ca68e
TLSH
T122E00127934415BFD16C577145976A307EF281354BE212868A21597CBDB27043F74ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b33397f0e7032be2ab402c2b5cad06a497bc61d82d8a03d896a3882f462c449f
MD5 d8f02d518b268fa16142db9eca6849d2
SHA1 edeb7ef631e38d8765f188afa27642d25d0869da
SHA512 ca0a009517bfe506121603ced09df4b7c8e92d30f266b0f0fabd1363aecc6dd4999c91790c49d06ac529227cf8e21387b0506fbac7b1c642471d75f35b2710d2
TLSH
T107E0EC22AB4824BFD0AC073042872B383EF281661BE2129B8B3459787C337483F74EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3ce0c4435002468a5938747bcb7730667cba46e0a70d55e819fe415ea9f438c1
MD5 ad62eb0f5ae96237fb427aa6fe5fc5d3
SHA1 100934fa52ec67df2385490a809fa3bc3dc6f0fa
SHA512 3e70269c1b27d3ec3fc89ec50d8331cbfcb97e06211b36879899e8f48e9bd49080484adb605e80c72447cb209e653d84501bdacb6736d4b2a4e6f251f712ac32
TLSH
T1BCE00106930414AEC02807300053672026A281210AB212078A1006643C222001F60AC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5901db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5901db.TMP
Size 392B
SHA256 47201fa78288fabba248a3ea855c5468b07bf7bf3169c2dd966acc5cbe367db4
MD5 c8e2dfe17d19d3f68c77d81d9a7735d1
SHA1 816dd7d5505a596149c2dcac17845ce608f881c0
SHA512 6f90be0376e952c67452a68ab22b52662e526480e9a048ad60b83ac19c145be913e7e8481a16e9743933a07213075eafc625fa2ce414ef219afae807174b2b71
MD5 SHA1 SHA512

Submit Download

f71b213d-7043-4d8b-b5bf-5461707a2f7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f71b213d-7043-4d8b-b5bf-5461707a2f7c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 703ec7e409dd96f9d214fd688d2386ce33e49c9bb5549a57706cae2fb61bebb0
MD5 0ca4bfcf9f5d96762c1e1b9347c11951
SHA1 985b70e2a48f1736efd1b856ffd54ef8fbc3ab70
SHA512 6630a92b344e07d1772be8d155b91049cf9c10bd06b2c444a77c3f3fc5ac7a96b87301bd7a92770cf0feb2031ac9b66900b31552099571d75e4e6e4b47c3c09b
TLSH
T13641395CA6F91148B3B7BF5A9BF7A86D887BB9372F06C45E10110D4F0622B00D8A2737
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4180_108982592\CRX_INSTALL\_locales\ar\messages.json
Size 292B
SHA256 69a73d0b65abe25b2c6860a1b61df004c2e4a62d4f598e1d092aaa684f5ab5b6
MD5 8bbfc6ae3c11a324dca7df7226998de0
SHA1 65513dac37bf3a547b93ae5309c40c945db6008e
SHA512 e1f5d06cafe86072d61bbd97745464a3d2c16e5acb23ef4f33f92aa4f30e2a9a7145a32446a413eaa4126f46acc747ef3702a206d3d65dfe07a7d780390598a9
TLSH
T11CE02755C1702D5F477205BF751D31D4F1C589740001E2CDBA2C800C5FFDD4142B5E48
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4180_108982592\CRX_INSTALL\_locales\iw\messages.json
Size 334B
SHA256 f579296700eeedc1f2c67ec4078a904dfc957fcaff8b56291b95ac996d1daa91
MD5 ce3a134c995d6b11ac028c690f7c8a3f
SHA1 199f09bd374dbbd75449f806ba026f2170eb5f84
SHA512 515e6152b69cc8e59b892e586153098d03ccbe66c3a844ac0c33e4d5ebb67980a8d76ccc4240462221c2c7aba292f57367f3d03abf69c5b4d9c50fdb9dd92325
TLSH
T19EE026D0F1F62D87530607BB3E1DB0615F918EA510213D979B46015C7F0ACC0516FB80
MD5 SHA1 SHA512 TLSH

Submit Download

common-react.css

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4180_108982592\CRX_INSTALL\assets\styles\common-react.css
Size 52KB
SHA256 729207a17f201e4e2762f2927fb8726666d6f851e8f53529e0e21197fb18bfc3
MD5 d9c94a7fe93bc5a2f31f7723f54549e0
SHA1 ec4044411931d7874efbf0cd25f62c90ad12964d
SHA512 3f543ebe9a989cad1802e11b47f9095cc196854ec38b080ee596c88a00b599b38a27554d0b06856f8df3233134241d62ac36973d4ab9895b8bcb80c77799fad7
SSDEEP 1536:MuIKycWtGbSXQlqvR0zFmxxPLhYQCfY/UAhjrdBD8TZOhzzwwb0jBtU3RHjSomdB:iKyFtGbSvv1mdPqsa2l
TLSH
T1EC337492FBA56211752F817D3B83DB5A23B9A003950ADE7C7FD1201C4E893EB51F2B49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content-all-sites.css

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4180_108982592\CRX_INSTALL\assets\styles\content-all-sites.css
Size 3KB
SHA256 7ef2d87b12e41fe88834cfff0f8e4fc2d1dc38e6c70633c72efa7153b856d947
MD5 640ab3f908a58bef2b2a776e19950d98
SHA1 6dbbe5f6b3ac1f6f6ff21f5edf0845a08648690b
SHA512 6b652686f1b5db1c6d7fc83b725278a9eaf077ab5cf1f548985765163972d27bb23165e6e98196a0a1d499a52331577f66db0ddfe6bff17da8c3f0cd44fe1e6f
TLSH
T1BA61DD83AAF90405B617D04C1BC39B5A226CC043A209DE3DBFD6214D9FCE2DD6976BD5
MD5 SHA1 SHA512 TLSH

Submit Download

fonts.css

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4180_108982592\CRX_INSTALL\assets\styles\fonts.css
Size 4KB
SHA256 5a63f3ff5e415ea6b50c2b4d4f317f07a2a019e144d87115ba3b6fd0528fe980
MD5 698daa0f4346e9a806fbe117391d3f71
SHA1 a83dc835597db872dc8a5c21df73c003b10cd6dd
SHA512 9c4901ef20739bede9fa01d694245fb4e813888f926b789d77b701c8b87577a5e0ea36ce6ac603f1e2167841aab420a15bf955267b2f252c054293ba417d468d
SSDEEP 96:QOLjAOL0Z+OxTRAOxTGZ+OCUAOCPZtOLhoHOL1NjOxTXoHOxT7NjOCmoHOCIN3:NjdmRjDUY6htUXzNmoI
TLSH
T1FFA19F4108EF2428975B5C82BF5E2A31CD2D5A19300EF6AB6BFD19109CD6A1E23B475F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

common-react.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4180_108982592\CRX_INSTALL\common-react.js
Size 766KB
SHA256 2b4aa4376c2d7dce0c686c74e664f96a68981ea550e8c6adc5bfbbcac64558e6
MD5 68b8cf6b256737305f378b044fdd7632
SHA1 f1576c4c13e58d182a36b7e8d2e93e2922dcff8e
SHA512 51923b83636bc001d3604d9348a6d425cdacc771ceea467c3bd627506a3b9d07be029b2d4e5b9def6bdad7c40e16fd56ba0a7c20b0764dbffcd9ccaea22a186c
SSDEEP 12288:VM0eILPu9rwEBV2J1USQg7sWYFWHJxLuPoa60wV4HBNe0wDdN:V5eIETQJ2SQYsWYFWHJxLuPoa60w6BN6
TLSH
T1E2F46D84B2D17CA857D790A6F42F3507F1AD0959385DA551F2A9D8DC38E2C8EA333B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content-all-sites.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4180_108982592\CRX_INSTALL\content-all-sites.js
Size 137KB
SHA256 b83f43828c06bcfe3387b2cac7408d50ee5dfad3192e0851dfb6355553e5125b
MD5 c14f16814339b7b12442108d978f5c0d
SHA1 acbdcf199ddb7e87e1b61e763f7deee722e0160d
SHA512 2021900793ba9dc04aacd4cdf64cca39223efed38d3fa355b82b233d6db84c650b466b2ed2c9a4dd860fc8f3322aa0062c5dfa3286de9b89e128e30d289dccca
SSDEEP 1536:HeujQ0BVhzh2iL5hv3hEMl2cb8Ft78tbFU1fHfP2bNbj14OXGI4BuJ/xcbZ:+MVL2i1h/hEMwkkiNeO54BuJ/xcbZ
TLSH
T104D319D93952F9615BF301B710AF1803733D161F280D8950A212EEDAB4FD45AB12BFAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 f2a7f1b145cefccfbb4e7fdd2124c63a8cbf4bb722b1a8dd793b75cadb772f93
MD5 fa2590532bd761cf81f2f49d311549ec
SHA1 31a74d3e696b4bb6882f068f24bce5da5e3c3cf4
SHA512 4005a4293892c57b6b7a0cae287b619d7a6aa42c4435530f77015f1b1150c8887ce982edb8b341f80ac21767b3a0c9dd99649c0cb9de11aa55f18b90fcc39d24
SSDEEP 96:YpkmJPix+FHLZccHPlKSoQwOIaoJTpkmJSVYwrVNRTekmJhxFu2MfkmJruCnTQkj:AkmJrxZtvWkmMUkm3Pukm5ckmBIj
TLSH
T1123210146BEA2226F2F79E72A5F26711EF36BD016D148E0E0084460D0C62F45ED6EF6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 a6c6f3a86abbcf23bd5f19863b74a53c3ba21adc6bcc643306c90982d35a8fdd
MD5 bbe35596c52d1deaaf95ac47a77a485a
SHA1 b0a27faa7897846bd7399bfb31cb7a8390463b23
SHA512 8e0f86cac2a38366e5c67dba4365328526f20bb70e4557cac0ec4bbae99c5c6dfc6b9f8cde5d167c8fb83f4ebdb722c724bed8b510ef4e54446d1588a4144096
SSDEEP 96:VekmJVucapkmJPix+FHLZccHPlKSoQwOIaoJapkmJSVYwrVNRxfkmJruCnaQkmJk:kkmfskmJrxZtvJkmMfkm5/kmBIj
TLSH
T1A9321F1467E92666F2F79972A5F27711EF36BD016D148E0E0088460D0C62F06EE6EF6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 fc0c8301bf61a0575104ba6a479cb05aa3afe2e456668a4c2e7913651cbf5d35
MD5 46a0fcd380506c2fd7a2bb5b883981e7
SHA1 cdea366e66a7db77c2926d1427b4dfe9fc49d375
SHA512 0d5da2ece929b6b1cead3694ddd0e347a9806058046d343bf09de0c66c75c3001961031c564e6843cf5d15865e7cf9d2f6cefa27d431be403611e9ad4962b1c9
SSDEEP 96:xehZJhxFu2TpkmJPPw2zMfkmJruCnTQkmJnIumL:ohZ3PlkmIkm5ckmBIj
TLSH
T10802110467D51666F2F3ED7265F67720BF37BE015D148B0E108846090C62B05ED6EF6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 e0523aea3d3edcabe61b7e5ea2493a52ee23787a684b0a6577745886d31fab6f
MD5 e1da169aa9f8d0f6460423cccb29df14
SHA1 12fa92823a7a18c44cd1de7bd846ca355a255219
SHA512 5291ced1d4b17a616242d4c297b05a993840c6e709d6589cf2245df7946604f60ca598fecf548519205b056a4733c89594902da59e3153f7f218647786517b06
SSDEEP 96:vpkmJSVYwrVNREekmJhxFu2EpkmJPPw2zrfkmJruCnEQkmJnIumL:hkmMFkm3PckmVkm5FkmBIj
TLSH
T182220F0467DA1666F2F7DD7265F66721BF36BD016D148B0E008846090C62F05ED6EF6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download