3d9978d34937bd7828fcdb5825e7368de1d0eddc4da8847f3505c6c3ad27b374

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
72s
max time network
72s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/08/2026, 03:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
modlist.html
Size 454B
Sample260802-ege7bssyax
SHA256 3d9978d34937bd7828fcdb5825e7368de1d0eddc4da8847f3505c6c3ad27b374
MD5 47f9e6b4fbaacb2b54913f5564032781
SHA1 bfeb28b23cb440f8ac3070d3e194a5e0dd5aebbb
SHA512 2e41aafd1c0ac1abed0a8094e6680d00a6fba785b2508d4fa81c61f137e47775702694308dbeb8dbc7f23ecefa1dad4bfa5033108dba5ddb8e37a9d71df3418c
TLSH
T1BBF082B7DD6F7812672D927CD021760DE02391B78A0D8DF7A5B308437F80182081587A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5996	msedge.exe
4948	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301165609002527"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{1E0791DC-BD49-4286-9820-3C9B14652C1B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{78425F22-4A1D-4CD2-8A7A-30A12E338A36}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs

pid	Process
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe
1492	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1492 wrote to memory of 5332	1492	msedge.exe	80
PID 1492 wrote to memory of 2644	1492	msedge.exe	81
PID 1492 wrote to memory of 5996	1492	msedge.exe	82
PID 1492 wrote to memory of 2644	1492	msedge.exe	81
PID 1492 wrote to memory of 2644	1492	msedge.exe	81
PID 1492 wrote to memory of 988	1492	msedge.exe	83
PID 1492 wrote to memory of 988	1492	msedge.exe	83
PID 1492 wrote to memory of 3852	1492	msedge.exe	85
PID 1492 wrote to memory of 3852	1492	msedge.exe	85
PID 1492 wrote to memory of 3852	1492	msedge.exe	85
PID 1492 wrote to memory of 3496	1492	msedge.exe	86
PID 1492 wrote to memory of 3496	1492	msedge.exe	86
PID 1492 wrote to memory of 3496	1492	msedge.exe	86
PID 1492 wrote to memory of 992	1492	msedge.exe	88
PID 1492 wrote to memory of 992	1492	msedge.exe	88
PID 1492 wrote to memory of 1388	1492	msedge.exe	89
PID 1492 wrote to memory of 1388	1492	msedge.exe	89
PID 1492 wrote to memory of 4860	1492	msedge.exe	91
PID 1492 wrote to memory of 4936	1492	msedge.exe	92
PID 4936 wrote to memory of 2408	4936	msedge.exe	93
PID 1492 wrote to memory of 1756	1492	msedge.exe	96
PID 1492 wrote to memory of 1972	1492	msedge.exe	97
PID 1492 wrote to memory of 1684	1492	msedge.exe	98
PID 1492 wrote to memory of 3860	1492	msedge.exe	99
PID 1492 wrote to memory of 3860	1492	msedge.exe	99
PID 1492 wrote to memory of 3860	1492	msedge.exe	99
PID 1492 wrote to memory of 5428	1492	msedge.exe	100
PID 1492 wrote to memory of 5428	1492	msedge.exe	100
PID 1492 wrote to memory of 5428	1492	msedge.exe	100
PID 1492 wrote to memory of 2168	1492	msedge.exe	101
PID 1492 wrote to memory of 2168	1492	msedge.exe	101
PID 1492 wrote to memory of 2168	1492	msedge.exe	101
PID 1492 wrote to memory of 400	1492	msedge.exe	102
PID 1492 wrote to memory of 400	1492	msedge.exe	102
PID 1492 wrote to memory of 400	1492	msedge.exe	102
PID 1492 wrote to memory of 4436	1492	msedge.exe	103
PID 1492 wrote to memory of 4436	1492	msedge.exe	103
PID 1492 wrote to memory of 4436	1492	msedge.exe	103
PID 1492 wrote to memory of 3512	1492	msedge.exe	104
PID 1492 wrote to memory of 3512	1492	msedge.exe	104
PID 1492 wrote to memory of 3512	1492	msedge.exe	104
PID 1492 wrote to memory of 2280	1492	msedge.exe	105
PID 1492 wrote to memory of 2280	1492	msedge.exe	105
PID 1492 wrote to memory of 2280	1492	msedge.exe	105
PID 1492 wrote to memory of 5648	1492	msedge.exe	106
PID 1492 wrote to memory of 5648	1492	msedge.exe	106
PID 1492 wrote to memory of 5648	1492	msedge.exe	106
PID 1492 wrote to memory of 5292	1492	msedge.exe	107
PID 1492 wrote to memory of 5292	1492	msedge.exe	107
PID 1492 wrote to memory of 5292	1492	msedge.exe	107
PID 1492 wrote to memory of 5208	1492	msedge.exe	108
PID 1492 wrote to memory of 5208	1492	msedge.exe	108
PID 1492 wrote to memory of 5208	1492	msedge.exe	108
PID 1492 wrote to memory of 996	1492	msedge.exe	109
PID 1492 wrote to memory of 996	1492	msedge.exe	109
PID 1492 wrote to memory of 996	1492	msedge.exe	109
PID 1492 wrote to memory of 2084	1492	msedge.exe	110
PID 1492 wrote to memory of 2084	1492	msedge.exe	110
PID 1492 wrote to memory of 2084	1492	msedge.exe	110
PID 1492 wrote to memory of 4316	1492	msedge.exe	111
PID 1492 wrote to memory of 4316	1492	msedge.exe	111
PID 1492 wrote to memory of 4316	1492	msedge.exe	111
PID 1492 wrote to memory of 5268	1492	msedge.exe	112
PID 1492 wrote to memory of 5268	1492	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\modlist.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ffe1657c188,0x7ffe1657c194,0x7ffe1657c1a0
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,9258528798255426446,6349007533489040962,262144 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,14034347927682535154,3508597130826705204,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,2938639579555704540,8125801026410233429,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=3116 /prefetch:13
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,2858917788459474293,17853192004699035021,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,815293944345727283,14924049084441350360,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,5910468778029542431,17179839254071563224,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,16479038775212144846,758364112066139745,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,7265779898494991542,1929232160962244657,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:14
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,7265779898494991542,1929232160962244657,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:14
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,4835298726871752009,11221871191618542798,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4936
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,14445501803771661539,16285476281449751038,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,12146056574079504711,12704777553686034275,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:14
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,8196155252078175244,4247252305676802990,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:14
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4972,i,18006541395715943631,15436478432851974939,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5972,i,15995933311617486935,8604199173840753752,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5984,i,18305465944775129436,10546432890431629718,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3748,i,9320067172129684960,18086754031802044165,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6696,i,14234767606631748153,17968174912208613501,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6744,i,1019877153195448929,8400295366301354644,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6684,i,6995173281846014445,9088997554689692260,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7048,i,16871097701692289988,16745229998115874983,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7200,i,8963452969652862797,7874879973186057073,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7428,i,662613641536635528,10372621882828618037,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7456 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7696,i,14099878778055999443,4685415310641474990,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7676,i,11164020001336225853,18287663419530355355,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7796,i,16917778349374731639,1049991399110971268,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7820,i,16641128559452812,7156534825236817537,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7964 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7860,i,7750611120038332259,17437337817383196092,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7840,i,2325484550369828680,11975763759656607178,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7876,i,9579186146809955793,3159957970035313494,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7992 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8124,i,13059527407198849599,18218601859915208053,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8608 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8224,i,2252628208126944552,10870191581922885207,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8612 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8332,i,18011659536707288530,11104560010996912375,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8420,i,13671215017107764525,16649362864843466434,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8540 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8924,i,10224953446344284938,9825577091190545363,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8984 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8888,i,16571889789918754648,13816982303384333251,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8916 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8924,i,2192945245494801483,16777092854448074924,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:12
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9040,i,4695416497464568749,2815153073718344846,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8920,i,1351780865256982680,1506006895645612484,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=9100 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9008,i,23784158065172924,4593930156056361936,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=9152 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9000,i,2935050774452958364,12237623189797514875,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9036,i,9810652561714311406,14176343628437542786,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8448 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8988,i,6443965554169645040,18106130711374848694,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=8532 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7968,i,17256588042165436153,4022027186985321107,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=9168 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9004,i,4865269278300094573,2544542570229569339,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=9128 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8524,i,5600849960749946589,13034057361533550349,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8528,i,4731259267598859481,16213869755911223669,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=9188 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9504,i,5426360755926386693,13286003046004248597,2097152 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7532,i,10494148354062646652,4469810747542471252,524288 --field-trial-handle=2136,i,1589472574749139059,5464421930861217013,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:14
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  PID:6044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffe1657c188,0x7ffe1657c194,0x7ffe1657c1a0
    3⤵
    PID:3680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4686697816046742529,1195078749540896521,262144 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:2
    3⤵
    PID:2424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,5960738357396387819,13830130835615411983,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=1648 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,6636608805017164688,4512973480904997935,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:13
    3⤵
    PID:2620
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,7757641977122284951,8690255489627245634,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
    3⤵
    PID:1092
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,7757641977122284951,8690255489627245634,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
    3⤵
    PID:5616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,7402800058881518438,1652392568309939417,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:14
    3⤵
    PID:896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,6670199428114080667,16655225909062401543,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:14
    3⤵
    PID:5796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,16907672322169668651,2003590416814730674,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:14
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,15379245401198545551,13609620799320714426,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
    3⤵
    PID:3992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,3853858762423700077,4750493050712992048,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
    3⤵
    PID:4744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,15495856655630773007,13763164476616360519,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:14
    3⤵
    PID:5780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,16132788432026813197,3731218284826478781,524288 --field-trial-handle=2136,i,1841739882629339659,8233480446279878497,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:14
    3⤵
    PID:4028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c17dc8315075bb661bddf6b1efa879b9a3c39af13982f986bd287f5bc861cbdf
MD5 9573474710d1de6302a0d98890d2faae
SHA1 618b9f2079a97625be399f6137e46655659ecff9
SHA512 a345b915a4191d30d0da665ea4f78297c0cd671a5767e05c415403efb649110868fb279d22dc496792452c325e19b00f5e579f6e014a4488c9a4d6fac83d1c46
TLSH
T118D012273B0DB054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b9dac8593d827b7b825086ba5eeec776b808b8429eb90a6b645c319ec8f1435
MD5 c16a98ebe36bda7f5aece00f9ac1d0d0
SHA1 ef2e2a8775d1ebc0124f0ba983b6f20777919000
SHA512 148affd9dbe6aaee9070c22e41bc916df527cec5741753ca2733855f500e4eef0a257445d281d79c2449f8265c41b54dd53ffe57650802594b1211b0db611349
TLSH
T1ADD012273B0DA054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 21cf713a58dc3c51be0f947499129458cde07a984f276d439ddc4eecfe80a18a
MD5 4e9013fbd519b6eff741290774e2bbfc
SHA1 fd15f6d51068b7c2f373b8fc84b7b769acf70030
SHA512 9378bff62f2420949780c1b6bfdc1fab990703fe771b370c7bc39cbba3a871601af3e9d03c1253ce2eb1189b55668453818a8b80659f19f6c1142df53d8f29c1
TLSH
T135D023B8334EB020E77C8036192053C2237388113097C301C0178C0DCB7401003EB0D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ff339efcbe04de19232cf124c16086311a9f234d21e7cb4a7ea0d613fa544cde
MD5 0c6d63ab80b964cd5f78743d161c5985
SHA1 663218a5408b64508357e1606bc0d73e0bfdd858
SHA512 eddf58ec50c70ed478b0ea46b22c8acbbdcfcb8f35f449ffea21222ffeed54dea098ddf4403b87cea3bf23dce1e24444a87506b454be82a995cd10def75788e1
TLSH
T135D02379BB0EE004C66C4031051452D127731A6030C793014395CC0E9DB240052EA0EA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ed48edb7fbe2f630b372b832796a23cbf24d28191dda653c22c4b60d4077b46c
MD5 67854c07467b88e7cb54e8c60d9cb969
SHA1 0c1e5c665cc415145a1fefefe0301a33492e9aaf
SHA512 2b09a97ce39fd2b028eefc66974d95e8c045d386d9ef874ddc1619b8eddb28cd991d32de534ea0125d9d79d6129faf89f08df9b1ce387606daba881caf49334d
TLSH
T1B2E02BA5CC61AC3B0CFD671890515786F75513571B52491F3A3CD0088FF163E464989C
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
Size 21KB
SHA256 2a0b7c30f0977fb1625451633b6b398f1f2c69d01c655bba3918c961b66a0583
MD5 8a2c36b90c9c621271b5b157ed86e56b
SHA1 f542f96bdc7ea0f2acfd8cd9353ad01d722256a2
SHA512 10ab9e8180698c4f5570b516c20c7282c50755a33c9215c9bb97d58990004f614a95c06fcf5dd2fbb844e24a5d81332ebdffa5c89cd4b22ee46828d5deab1bd4
SSDEEP 384:3YCbDPjmywD3fwAJ2ZmSMqcHbjgog9rfaPkiTOi/dkewSpcE5uW:3sv0YUmSMnHgogxfadFkewc75uW
TLSH
T164A2E17711DD711BF84E9DE82DCE8ED5C8A9A0DE6C618C4047E014A8D0DEA760FFB4A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7ec64ea3e65618a0480f377fffcdc5557765d8ead0403ade25ca9d77ad3b33ea
MD5 d552ec60ec88005e4f2c6e8858e68119
SHA1 178c5ad3322f028987e65f2d168b6912080e4235
SHA512 16e31ca36c8dfc1d8c81422b5026c1a5116b36df28eb95fe4d0af948764785597128765f3a91a7cba17908d3538baecdc0749c6cdb1ac9f9e91b2dc87ae116d9
SSDEEP 48:phr0FOMjEjiWU7U2tRJhiUezO4U0N/gi7Ff8e9mB32+fxtwasIv+6D+/Z:phIFOM4+7HRLCzO4UG/g4R9wBnwEGZ
TLSH
T181A195908AB07AF3FBC51B307EF46A1271310454D9172FB6E1E3447F6E3AAB8B140459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58c4d2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c4d2.TMP
Size 2KB
SHA256 48bb032e9524530bd7da541978c1782854e048f4386504937446a14f966da5cb
MD5 c08d77c29bca3a379508182bc3cc4fd8
SHA1 418eedaa2d2d361c45d47b55ce5a8cd283fd397a
SHA512 f2f9813d28a4899a75026f2f2a62c7eebf84de2d0086b53ae54d96003cafc2f26c70c16a735230b1401f9b5af7ff3a787bc541b7366e3d73c7fbb3faba4e1419
TLSH
T1024181208B9274F6F3D20B30BEC28715B07194A849139EB242E309BFAD3676C36A052C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 5f93d4cc04747efb05c6d3e9530b4fd1b25618fd59d4fe0ea4b59cc9a88e5d45
MD5 623affb36d2c4620a0edcb16cebe0136
SHA1 740c3abbbb4936e33085bf1c78fbd2fb25bde930
SHA512 3f0c8d1950b5eb15128c5d7493d8c5fff9e8a5a4daf8c5b1f9d4e561b8a9f81ca099e5349f2ddd4a118543a33e34d5e7071bdfcc9585f80134719c3bc489f322
TLSH
T1E9E07D8414CCC329F414A8D39379D74ED3D2348BFA8C3D063F4EA8447249689B2C6AA5
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 935f1d2c34bddf1932a0b54de655da5721e2ca11e9c63015d12c9666d8c5e0b9
MD5 9611226fd3e459655501fd40c93ea6e9
SHA1 9d9ccd36f587647f618b2bbc178730d0d9ada6ba
SHA512 9b3c02ba388276d13b9565c96940285213bc35fa004cbe7524d512b469261f9f7ec4c4c7009a0a0764f405907f37bed58d974825415e090e48d15795ee2f2d9e
SSDEEP 48:uzBmw6QU1Pzlg1GbZJycseBl30IYuHFFDHVyzL7/d1JbZ0:6BCxy1GbZJ9X3uQFYzLzd1JbZ0
TLSH
T1839297979E387817EB560E3E222E1C39C83BE26D9FB98C98307444220CF4186903D5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 09a5c31c4dc7536ab6ff51a856de638b3ba617e5f97b2bf3ad9a36b53658f523
MD5 cc480dddd31d883e7febd23dfd497c95
SHA1 1c71ec84e7caf17d690c2722f51e7b71abaad845
SHA512 09bbaae17b66e2bdd9b08d6045825bc426af91da4cf3feb9b58fa3cafc16a4ff25ed809362b6f75d16883d4b2940c8941f5ec2b56d1edee9dee802e377e751bf
SSDEEP 192:o74/0+G83uxXBBK31GkSJ3FYlEJH7DNspUC:Pa83uFBBQ1GkSxv7DNspUC
TLSH
T13814560E5F313212CDBD403669E755A75DBDF43F87526ACA78601460CEE3B52A06C8BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 40KB
SHA256 2c02066573edeb22613b11bf192670bc920847b4e3f10548918cff5e2a5febac
MD5 d465b4bfbe3fc3bae3a2188ea0405fa7
SHA1 f9c18ae88be5bee87d0231d4cb07fc0d500f6470
SHA512 b9186fd2d4afa2d8b755fe897218e4da8f9ea24990445236389f9f8d172a3a3dce53657685ff4099b53cbe199b35963ec42711cf498f2fe0e335219e81469f86
SSDEEP 384:D1Gvs9deZ9K5Ne1MVeoxnBeOX54XsJID99eyO5UC7HBeOYOmJlOJzVet0eSJ1sb7:pvjIa7Z4TF8/CX3OK/MLMoCTdvz
TLSH
T10D031BE647E4C67DCA2161F0A7142E1BCE290824166C3C2FD5D8EEA7E3E64B3E14175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d78e565ffbf25edc09387a1b1d60d949894d277be2017b02150cfc6db31a7b8d
MD5 4558aa53049f1d97e4fd72145e67dbc0
SHA1 343baddb884d91adfc914d43b37d4d4cb9babfdc
SHA512 45219e79241d64ebe88d1c78a7ed050cf9223cc9ca46fd2ab21df7da59a1ccf0885df389f3a4fff4aacea6ab232b1c9200399dea9d130596b4d066dfb57bb14b
SSDEEP 192:sxZ9ReyMqZjK1Ml8MFJH/f4srY6KTGDwIKzodpEw/W6+WNGY0hf5HDrHkIgj+pJ:sxZ9Hd5/f4srY6UkZ/bG5XHHIj+T
TLSH
T17A62E6016A34597BCCDBD219FA457F63D6F91573E2904E44AAFCDA1C01E6AEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 289edc0bb2397bdf9ab1d764a36d64c9ea17c8e25ee3c072d07bba71ae489e06
MD5 c67fa7bc9728a401af5860adfb55d1bc
SHA1 f16d3d423a9ec8f98a6a1f27c83cd08a4e40515d
SHA512 c1079b036d0a0f618439734f62ad50620b421e0a1d0556960760373603cf12bdbe78c660d0cf8de7a4289d9035d29664f372274d462c8db7bb093ed8553fbecd
SSDEEP 192:sxZ9ReyMqZjK1Ml8oFJH/f4sFqWpVolKTG+wI0odpE2y3/W6+WNPcFtPY0FfgHjp:sxZ9HT5/f4sFqWvolU/I/bm50VHIz+T
TLSH
T13E72E7156A34597BCCDBD219FA557F63E2F91523A1904E44AAFC9E1C01E6BEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 19c7e716cb0009962ae437fff947c8aed437f3beaf899fa59e721e19988d77d9
MD5 debf8c89ca73e7e9cd2582842403230d
SHA1 2ef3083db752ca30644cd60aa24cc67a2701b0e8
SHA512 708593427446f5716ee1ae4797c759678e48152eb01ecc8e012c77e093fb52c2a605062f219d25166c3ef6d8bd88fbdb75ffc7d293b9dbbfcb8c1c01fafd7a78
SSDEEP 768:wQAKq8y028bWRmj1QIT8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3L4Ll/f10EMEroS7:wQAKq8y028bWRmj1QITu1jaKL4LpfiE/
TLSH
T1E1E21B3B280CCB7E4FC44E9DED276E8769D802CBA7588D5447FA494C03CA3EE511A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 bb38d2843fac1676545fd1dbf46602eafc3617f0c3745aa49a1031db89ab22d5
MD5 c258ab0ffae4e902108528daa451bbb7
SHA1 94e44101cf4854bc8266cb0bf62310392e8e9398
SHA512 3ec692d2f7ea16ccdd85ca60febe9a9af8d14ee54e97dc94bcb3cae8992bb419a44865ee591a8d960ffbbb2f42a725ba3cb82349855708e5bfdcf7a2377fc549
SSDEEP 768:wQAKq8y028bWRmj1QWT8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3L4Ll/f10EMEroSO:wQAKq8y028bWRmj1QWTu1jaKL4LpfiEC
TLSH
T1FFE21B3B284CCB7E4FC44E9CED276E8769D802CBA7588D5447FA494C03CA3EE511A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 3e1efa74d9dee5307a7a3bc534bba7ee9606baf98c4ee93440faa70acab340e8
MD5 83aaecee4b76c30eb2db87a9994899f7
SHA1 a2ec88630b6339ae9c4cf831dec6af5410ffd443
SHA512 c4ff5a71411886c638a4217747ecf82fa9e9f01d420cd795ade52195c082e73771d1121c747181fa722fde845d7f3f9470ca423b845adb2c6f0517ab7b0c4589
TLSH
T171E0269409CCC3BDB11560831239834CC3EA7867DBC83D0B7FC1D8487642588B1D69A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 17908ab5533daba548701052928007c97727e2a2e288cb54bd425d260edf6f3d
MD5 a20718262db34765f38bf60816fbd0e7
SHA1 6d0c6b8d11027e195e4ebd33e08be9ddb1d05f8d
SHA512 243ebf3de7ce6207356341816a522ad628cc7723a4609fe2fc6ef095958d96656526a25b1a9e46409423a78541fc6fc06c1dbbdf19327078cf4f5fd18800e929
TLSH
T178A002A051A52655C04662715E95058863118865D611030145D000569E5C0428112705
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 100B
SHA256 2af7458c6cc434b275632c7c3eceec592920f52359694cb2f8550f92f68f6232
MD5 4e80a442cf0e0bd402f278eb85b9f715
SHA1 04508bae9c307b54b85f6b4096010f80cfd65f19
SHA512 a7f3904a2dfeae9b3ddc2083ea29f05c358bd13cafbd23789d4e91933dc1a80c9ab1c36b5779e2fb414aae266b1034007d5f4b9b8bb2ddbd3a44d104ce66ef68
TLSH
T19FB012407304E007C2441D3214708B822286F001428445034C48FF384D463D4BC000C8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 cf0ef1006b47e2e3578508fb5abe496e0ce44486d6eed2956ca86dd221696669
MD5 ccc471c8376f996142f87551c7214eba
SHA1 6d76053a58d64f20610effbf8b5ae70d4bf1aa47
SHA512 4f951485bd19081a00c0e63758a045a99f498a1cce08ca198081365f369e9faab21f308a4f4300730289296a70d544d9ff3a9059c1e5c6e1e04d49d23cd6ab4a
TLSH
T16BE0D8681DDDC33A7145A0C76335E34DC2E37443DAC86D253F0DA44863071807293960
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 5ac7c12a37be706661cd1a08104497982f58eccd3accdf6f1c5c3252bbab60cd
MD5 d88dfa78fd83e056d10c1317a0552231
SHA1 1584c2120a9ee707905188b76619cb3eea5746d4
SHA512 567cd7243d883eef5e11c9bb70b4c6a9f7f6c3f6d3987172d37be203792f37bafc6cddf715e695d890725cd3c13d2c96fbe0c55ad79017565ef94924811a5fba
TLSH
T1DDE026B449C8C37D6512A0C352789B4DC3F27C479FC83A0A6F08944CB601180B2E6DA0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 22KB
SHA256 e5b2c9331740c0c183da4c421a9fc1090d9c0f34400fcf5c7623ce626ebd604b
MD5 66c21405f097cd0f97db167890cdcebd
SHA1 9bcb825d94f696f0e932b5cfca8b3c7426d581a6
SHA512 d1f2748d58f8078aed8ec27f634d9c0a4fffa93ac5b8bbb205e7ce18e05cf1221dc264d356e124e51674e6ad9461186aa457760ff58be103b35d1476efbdd8a4
SSDEEP 192:GD9R5VJhn/iVJnZFGVApBPisTE/3oNloNPSF53pVWFQ5xfSsD0PnY9JFlPtv0F5T:GZLVDJjEDPV0/Zds5q
TLSH
T182B2491232BA02023C7D390C93968B674A42F1633469EC7F7BA940B64E67E125DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 e7a672f9c7b261fec7d71df58a3cfd41aede00cb8da2e0f1a218fe4e0a548f21
MD5 40cea02189b64c9940a27c3158165cfc
SHA1 94242ff3a24ba949bbf0a38f94a64f2cc10c801e
SHA512 9d445fd31ca33c84cfc6e42a088d5433b1f69fd2bca95d074695fb2ab0d37f9d42be4ecd90dfb321232a7e92e8fd037a97587e7297434ef7b33b5b1b88de10a8
SSDEEP 3:MsEllllkEthXllkl2zEb+l:/M/xT02zF
TLSH
T12D440204EB900609C6101830506193500360D8120552574B68510427BCC55700C10050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2cae8ced089177898460ba929d2a0e41364da70988b9e2e58bae7ac271e09f9e
MD5 7fe903d03577db43f992f1d66bf26bd7
SHA1 fc2e94c2c25a18caf4d0b304ec182cfbf6c8c940
SHA512 ff7e88f683b050dbc0e1cd86f00ee4e6b56947f07e09f2152b13b09c1b483ccee12091bf04df258177cb9cc62e9f965fe61e939c21f481783373efbfdf75ae0e
SSDEEP 768:dFZaAwgrZKekmHEG2DCrvY/J9eWwLwtQ4Bul:1aWLk8rg/qWwLwtNBo
TLSH
T1FCF2297DDC2489BF98EEAF89A70D66168DE40237C5B889D8E7D50F4D807609DF307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 543dba5b0be40a19c4bb8f53ed4c266cd53412279f1e6d5556a7c5518dfe5972
MD5 92fe21fcf428c4c052bd53d0b48dcecf
SHA1 f951157db90041f6df1c032670e9742e9109ae8d
SHA512 e3f38e6df3520ec3ca915149f9610809eda0e1a9775e8a05c25c8d0d9689a8b132ce2722da700dfc318918847381c008b6c7b1a8a21ccee761d5289c49845fbe
SSDEEP 384:nuiFxZcIJ38N/8TUNTUlIRtBPm3ek32nn9qdk4JfbgG2DT+b1Za62XXK9Li6Uq5f:FFZJ3AwgrZKekmkEG2DCrSXwLwtQ4Bul
TLSH
T1AFD26C72E864D9B7ACEA8E89F70A7607DEF04123D68C9AC4D9DD1D1D009B1ED430BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7692f44c6c3f3a8fbaa7ae4608e49c19da06cdcf15267003af7ffaa6c8af74e1
MD5 f659ee20ceed2f4771c00e49e51b53d4
SHA1 a72740a2909b960a9b898658a9b3ece69aeea4fe
SHA512 2d04826d9c8626360e3e6b93d7fb016cd27df40f804da26163624fa5880a688af63296266c9b2192e19eda8b0e1322ec20f45b2d507099bb6df709fdb76dc542
SSDEEP 384:n1iFxZcIJ38N/8TUNTUlIRtBPm3ek32nn9qdk4JfbgG2DT+b1Za62XXK9Li6Uq5f:8FZJ3AwgrZKekmkEG2DCrSXwLwtQ4Bul
TLSH
T16CD26C72E864D9B7ACEA8E89F70A7607DEF04153DA8C5AD4D9DD1D1D009B1ED030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 8640f7cd0f2807d9f42b9da76ea1b401cbc95b59c42117120d1d47724fca939a
MD5 949b2f1c130bbe2fb3c4d47b154e8385
SHA1 b1ec9d959546933ca5c4cabe11eb9ca92ae84896
SHA512 8984715a76b52304a06fa7fb4ca9bdcdb93380dab0741519c86eeaf14e08a553f5959a1d21b10aa9900803fe0f37ff679d20945e7be3c4ca76612af2f03faeb7
SSDEEP 384:nKiF9CcmyWCs38NL8TUNTUlIxBPm3ek32nn9RVR4JfbgG2DT+b1Za6CXe4KV8p0J:BFccps3QwgPKekm5rG2DCr2XI8p04U
TLSH
T105C25B32EC14C9ABECE64F99F60A7506DEE04227868C9AD4DADD2D1D009B1ED530FC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 ced3ce09924a3ec222a570a619e449ad72a9120f4263ece27e23ebbce74a5be7
MD5 65ca26e00f28a8b857cfee3ebeaa326e
SHA1 e8b02d0a512dde20ba64ca4f6e5cd3168290b604
SHA512 2b211247db6f93732e7c11ee324c691e307eb5c5ffe4bbd05337eec51fa428b9d310fd6faf4cabd6d753a57c5ef8823a7a3999fb9f8f756a9e66a29e92863762
SSDEEP 768:dFZaAwgrZKekmYEG2DCrvY/J9eWwLwtQ4Bul:1aWLkvrg/qWwLwtNBo
TLSH
T138F2397DDC2489BF98EEAF89A70D66168DE40137C5B889D8E7D50F4D807609DF307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 20fc44e24cecf7208c48df80b794605a5c0ffc8f498ef46a6c76950a69c25dd1
MD5 7a9cdedfd658722825249b16ad005848
SHA1 9fa9e55de5af8c5642f13d1367d7039bd27dcbae
SHA512 4633bb9458eb16769d17ea598bae1caba663e0c7e9f47a11fd54dbd387e234e6970c0ac0a30bd2a7bad08ec3797aea09f2220db23b7ceb1a553a4ea575319044
SSDEEP 384:nuiFiZcIT38N/8TUNTUlIR5BPm3ek32nn9Udk4JfbgG2DT+b1Za62XXK9Li6Uq5f:FFQT3AwgrZKekmmEG2DCrSXwLwtQ4Bul
TLSH
T102D25C72E864D9B7ACEA8E89F70A7607DEF04123D68C9AD4D9D91D1D009B1ED030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 5504b6584f05f358b3049f935b1837af3df0aac59ef4f8a30f7fd4b745cf35d2
MD5 47a47e60355b6c58cabc44a3a55516ea
SHA1 ceea4652c943d6c441370ec4649005c9e72db1f1
SHA512 26f1c3ffd0fb5367fa6e085a928bdc595878120ac47ba968668226c2261e60c4d3041bb4373bcd608f8e22081584bcefd7db66a64704ec2280313929f4a2a247
SSDEEP 384:nDiF9CcmyWCs38Ns8TUNTUlIxBPm3ek32nn9B2Qfs4JfbgG2DT+b1ZU4e4KV8p0J:uFccps3fwgPKekmessG2DCrU4I8p04U
TLSH
T11BC25A36EC58CEFBECE64F89B74A6A06DEE01227868C89D4DAD85D1D00971DD130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 626984a9cf204de4bcc61361d555c9135db657a1702c115b7daca565bed5f14b
MD5 dc662eb2b7aad4f0eac8f2f790ff948b
SHA1 0d2cfc12b2ae4ad916252d912fb5f0f38f230ce4
SHA512 ee89689efae1b0f1c210de16a4efa3d4dd94be52da02214cf5174995da5b7f4950bc3f8d4cbdd90d44ee987e69d37a540a782a683066720e99da881e8f34c12e
SSDEEP 384:n1iFPZcIJ38N/8TUNTUlIRtBPm3ek32nn9Adk4JfbgG2DT+b1Za6JXXK9Li6Uq5f:8FHJ3AwgrZKekm+EG2DCrtXwLwtQ4Bul
TLSH
T1C8D26C72E864D9B7ACEA8E89F70A7607DEF04163D68C9AD4D9DD1D1D009B1ED030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7d9a7544914f3de98db09e9faf9d948e7e87a810bdbe09a31a8f64a30ebd49d7
MD5 32334446641172f1bcb232fc0dd43c50
SHA1 890c35cae330e6f6e81a22715522c4a8a6eddd48
SHA512 5eac765fcccdd5374aa8db00772695ded972bbab20a24d33ee98147d0ce5c173a529d7c2c87991d66c3d08ad61450ec5052f8dfa19bc59d24ab5b416c10196df
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe58b36d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58b36d.TMP
Size 392B
SHA256 5362e2cdbf386776d43807ef7b49d0a0583491e07564b1eb1cf41d4be0d16ff5
MD5 abddec0bc51d6ed48e734d720b05022e
SHA1 34941001bc4703b8593f3102b31e067cd8793eaa
SHA512 b9daa205227175e58e7dc033e04a93aa8d7ad8e9c7b0f3bac1f1740868fab25b967df747d3556c7605dc33c873d520a5aa37dfea7200d15d9d6efb879357e63a
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 4a7cebda799e8c5d7adbecf28479caa3f5e35355f557af1208ba947d534f2019
MD5 b14d01831fc3c2ae40c5e4c9a15d14ad
SHA1 58b7461efab1a963032f2baff319daf5966f8b86
SHA512 b7b6846be1d6fa43ec313f26cb0e8b1af31785852d1cd717dce811441221ef667e8939d0af28789bd3f0e63c467963782cf998249fc596244991d30c5b20bc8d
SSDEEP 3:MsEllllkEthXllkl2zEzOa:/M/xT02zV
TLSH
T10F4404057FF40705C5001034D071D3D00370D4131751574F74535417FCC55704C50010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

cf3c0960-47d1-4f8a-a256-82fb7b448b6b.tmp

Path C:\Users\Admin\AppData\Local\Temp\cf3c0960-47d1-4f8a-a256-82fb7b448b6b.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8be7d9e-ac50-4348-ac9c-28a386e4a03e.tmp

Path C:\Users\Admin\AppData\Local\Temp\d8be7d9e-ac50-4348-ac9c-28a386e4a03e.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_1145252671\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3e9830d-a55c-4f70-a346-39a896765c56.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_2125017578\e3e9830d-a55c-4f70-a346-39a896765c56.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4860-191-0x000002BD28730000-0x000002BD29730000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads