hxxp://roblox[.]com

Analysis

user interaction
yes
max time kernel
328s
max time network
331s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 00:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://roblox.com
Sample260804-afwepszblh

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 8 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
182	whoer.net
183	whoer.net
184	whoer.net
186	whoer.net
378	api.ipify.org
379	api.ipify.org
380	api.ipify.org
181	whoer.net

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5576	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302759583134569"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{1A73F89C-E4A9-4AAE-92B4-A14F749BC600}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2088	msedge.exe
2088	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5744	OptionalFeatures.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 45 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of FindShellTrayWindow 57 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of SendNotifyMessage 56 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe
5876	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5876 wrote to memory of 5988	5876	msedge.exe	85
PID 5876 wrote to memory of 5576	5876	msedge.exe	86
PID 5876 wrote to memory of 5652	5876	msedge.exe	87
PID 5876 wrote to memory of 5652	5876	msedge.exe	87
PID 5876 wrote to memory of 5652	5876	msedge.exe	87
PID 5876 wrote to memory of 5668	5876	msedge.exe	88
PID 5876 wrote to memory of 5668	5876	msedge.exe	88
PID 5876 wrote to memory of 6064	5876	msedge.exe	89
PID 5876 wrote to memory of 6064	5876	msedge.exe	89
PID 5876 wrote to memory of 6064	5876	msedge.exe	89
PID 5876 wrote to memory of 6088	5876	msedge.exe	90
PID 5876 wrote to memory of 6088	5876	msedge.exe	90
PID 5876 wrote to memory of 6088	5876	msedge.exe	90
PID 5876 wrote to memory of 1596	5876	msedge.exe	97
PID 5876 wrote to memory of 1596	5876	msedge.exe	97
PID 5876 wrote to memory of 1596	5876	msedge.exe	97
PID 5876 wrote to memory of 2164	5876	msedge.exe	115
PID 5876 wrote to memory of 2256	5876	msedge.exe	116
PID 5876 wrote to memory of 6088	5876	msedge.exe	117
PID 5876 wrote to memory of 1236	5876	msedge.exe	119
PID 5876 wrote to memory of 1236	5876	msedge.exe	119
PID 5876 wrote to memory of 1236	5876	msedge.exe	119
PID 5876 wrote to memory of 3800	5876	msedge.exe	120
PID 5876 wrote to memory of 3800	5876	msedge.exe	120
PID 5876 wrote to memory of 3800	5876	msedge.exe	120
PID 5876 wrote to memory of 3004	5876	msedge.exe	121
PID 5876 wrote to memory of 3004	5876	msedge.exe	121
PID 5876 wrote to memory of 3004	5876	msedge.exe	121
PID 5876 wrote to memory of 1856	5876	msedge.exe	123
PID 5876 wrote to memory of 1856	5876	msedge.exe	123
PID 5876 wrote to memory of 5556	5876	msedge.exe	124
PID 5876 wrote to memory of 5556	5876	msedge.exe	124
PID 5876 wrote to memory of 5408	5876	msedge.exe	122
PID 5876 wrote to memory of 5408	5876	msedge.exe	122
PID 5876 wrote to memory of 1612	5876	msedge.exe	126
PID 5876 wrote to memory of 1088	5876	msedge.exe	129
PID 5876 wrote to memory of 1088	5876	msedge.exe	129
PID 5876 wrote to memory of 4376	5876	msedge.exe	130
PID 5876 wrote to memory of 4376	5876	msedge.exe	130
PID 5876 wrote to memory of 4376	5876	msedge.exe	130
PID 5876 wrote to memory of 4840	5876	msedge.exe	131
PID 5876 wrote to memory of 4840	5876	msedge.exe	131
PID 5876 wrote to memory of 4840	5876	msedge.exe	131
PID 5876 wrote to memory of 3940	5876	msedge.exe	132
PID 5876 wrote to memory of 3940	5876	msedge.exe	132
PID 5876 wrote to memory of 3940	5876	msedge.exe	132
PID 5876 wrote to memory of 4816	5876	msedge.exe	133
PID 5876 wrote to memory of 4816	5876	msedge.exe	133
PID 5876 wrote to memory of 4816	5876	msedge.exe	133
PID 5876 wrote to memory of 2192	5876	msedge.exe	134
PID 5876 wrote to memory of 2192	5876	msedge.exe	134
PID 5876 wrote to memory of 2192	5876	msedge.exe	134
PID 5876 wrote to memory of 5344	5876	msedge.exe	135
PID 5876 wrote to memory of 5344	5876	msedge.exe	135
PID 5876 wrote to memory of 5344	5876	msedge.exe	135
PID 5876 wrote to memory of 5444	5876	msedge.exe	136
PID 5876 wrote to memory of 5444	5876	msedge.exe	136
PID 5876 wrote to memory of 5444	5876	msedge.exe	136
PID 5876 wrote to memory of 3248	5876	msedge.exe	137
PID 5876 wrote to memory of 3248	5876	msedge.exe	137
PID 5876 wrote to memory of 3248	5876	msedge.exe	137
PID 5876 wrote to memory of 5108	5876	msedge.exe	138
PID 5876 wrote to memory of 5108	5876	msedge.exe	138
PID 5876 wrote to memory of 5108	5876	msedge.exe	138

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://roblox.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb2131c188,0x7ffb2131c194,0x7ffb2131c1a0
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,14927166757171358805,6043807134875120292,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,12166652538802474133,9275119358182055899,262144 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,16949580452823253401,18016631541997464548,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,13277226560513021685,6312869438903505383,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,7523876630202459474,12480240546789774784,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4844,i,1507053863441850724,16559761832438266018,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,16224614702617987623,16578898694808724751,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,3457383007434206212,10095325352788637239,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,6854981544737175324,8165634987903780596,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5756,i,3228317984536171205,14743624349272651677,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5600,i,6569691924427985456,17513685681756698811,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5796,i,14166137652831989095,3332758874912104428,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,12679758876518200262,17553988471165993867,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,13866016634818423993,4257383204810612420,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,3460685320521664066,6036714770346415353,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6996,i,17825234577027461401,12513887938765734245,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6996,i,17825234577027461401,12513887938765734245,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15428747071821213480,2504433351560438118,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6188,i,14332427533762906300,10682754765026643888,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7416 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5380,i,11289234851599671541,14307385430022174146,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6052,i,17737658293951351859,102583689432542226,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6756,i,15703979203578079925,7577229643159154508,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7648,i,6435500698947007504,11886934620659951893,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7628,i,10263571205520328423,5055566684486477066,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6112,i,4028785587134524466,17385723139862982779,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7816 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6088,i,4958930602281458064,10614503684676624557,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8176,i,5642249616434024395,9025048141929867432,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8248,i,3976738412785463071,10199041981051080730,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=8276 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8420,i,1511619588991824599,11447153360080932539,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=8432 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8556,i,7713915104494523459,10560421141179700624,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8716,i,10055917383096812534,7721024831599277497,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=8724 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8852,i,14371151535065194461,16988042223122329420,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=8876 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=9020,i,17759240447012440440,15185899021105579673,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9032 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9144,i,16059426373091436504,11050355127750534489,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9160 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9296,i,972573033143686349,7012015435696865982,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9316 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9472,i,10734172621765978026,5184297978057503332,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9320 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9596,i,790731846300099881,11641831276685790867,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9604 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9780,i,825442184526919600,5494727568717995499,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9608 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9900,i,13701815845991537486,11830272163792622282,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9908 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8860,i,4840534858140066156,2017432906886812330,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=8436 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=10420,i,11046335141238165608,9206726990703110764,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10404 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8320,i,2482915890151782816,11862553160085935193,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10524 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=10684,i,6692015475694264709,5012608809185009043,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10680 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10756,i,5830451258705917716,17505513420518978236,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10260 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10772,i,5610081879854109104,8620203131685910198,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10880 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8868,i,6649835232573573015,520312422344578998,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9192 /prefetch:1
  2⤵
  PID:6332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7872,i,2830937935929536483,8884872738723218774,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9048 /prefetch:1
  2⤵
  PID:6340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7816,i,6953991585801777388,13621858716784170404,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=8972 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8804,i,18074518823146620336,9253636893625967429,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:1
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=10896,i,4439485666120488427,15386219448303359352,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10836 /prefetch:1
  2⤵
  PID:7012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=5932,i,10193586393733026370,7191824992875276452,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:7160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=10872,i,14704219464229431129,17586239518369030290,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:1
  2⤵
  PID:6256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=10852,i,11964456007734740349,2049645639888886655,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,11129194268952695886,4572182458573677750,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10896 /prefetch:8
  2⤵
  PID:6472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5828,i,9257267530608315984,18193496785872173743,262144 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10684,i,13971689425435290912,879161459424930324,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10756 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8424,i,6312116568673853527,14514962494313243001,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=11036 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=8256,i,17847473599531714746,6724803702215078385,2097152 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10684,i,5320833621235375765,2305429900697271851,524288 --field-trial-handle=2308,i,13459908556449909245,17842381422545031426,262144 --variations-seed-version --mojo-platform-channel-handle=10420 /prefetch:8
  2⤵
  PID:4328

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6044

C:\Windows\system32\OptionalFeatures.exe
"C:\Windows\system32\OptionalFeatures.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:5744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 dceca28c17a7232433e9c2f3be34eded60e78d12e50704a3f6a9c68b99eb6d23
MD5 e1316db8209cad793d3ad60ac98f5cea
SHA1 9d4c711908d624377490b2782487211694b69952
SHA512 c1dcd8c979b27760c33b8a2eb94a1af28ef7fcebfbedebd5473497a6fdd99bbba1d538965b0b45be6bc1207df56dfc958b7f8f61085ad286c26e4d4e8ec717cf
TLSH
T164E02B79C926FC2B09FD0758A04D464AE701131726405D6F3A3D92098FB063B56C5C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 205KB
SHA256 e87d3952be2d6bb8970feaf10c2e5aaf215ac60dea1cda94c3ba8f57819297a0
MD5 0ff143a4d70b3871ac5150178d95f2d5
SHA1 a20bbbebdcdb08b8893ee4f1bc488874d1c751a8
SHA512 2d24856201c290df03f9404154d2a6047ff56f1bd3206e36fef58e6902719ba222bbd48e615ac9ac1af404492eb534d256958dea096250cdb40b4217f451c2e6
SSDEEP 6144:7N0hhZkNLf7VAi/FLkOeZpxxo4AGdf47/X/S+AKqfn6Iex6y:Crif7R/Vtyg41f47/PVY6Iexd
TLSH
T19A2423F7B25D478821918A96149CE2B0E5CC2A50C19F743879EED71F4598F7908B32FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
Size 256KB
SHA256 e3e4268545e49178c95c3ce577f482d929b4d3d2529002d227e1e4a4a4179020
MD5 9016673ada3309136cb419910553b486
SHA1 d3699bf16abe8771e94bbf5562babee9a3146e42
SHA512 6c590fb10b73d27e6fbf1367d969a6367f71574fd3bd1c2858ffd03711c16b508b2488cebc2234413534cc883ce09f9028fb2687100d92b26c6eb3e515fce367
SSDEEP 3072:ya9c1xq7uKCqFGJGXkg4RrgrBGryyzDFfQdJhz8WzJcjfV:yec1xq7uMecQWrGH/FAJxxzJcT
TLSH
T1E444F1A5FB41E283CF537FF1F06C2EB30B6956C535D61E0B0EA25C10A099A15E72F52A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 256KB
SHA256 1a51a39a0181abb211af41600112378aa74b3c924fcb662ebd001a647233107d
MD5 455327b5819e32b79e98198399ec7a18
SHA1 43a90a3d3a2d989910edbf818393af1dcba2fe01
SHA512 f49ff3cce466d2e8a38cde077a149d342839f9531c9b4e801725e06bfe0cc01ba56d2c807cb14f584fa53b905616952a2029945bf808d110cdde5f3ffde80645
SSDEEP 3072:XUEGjRWiiI7+mJEpXj2xJZwVvWqRUXRf2QT3ScwuA63NonSznC3V:kvRb/6p2xJBmUXp2a3fztC3
TLSH
T1AF440250EF046AA2CE124BF4DC692F3359B551DB20D0AD0A8BB9DA107EC6193F70779B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
Size 256KB
SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
MD5 be569398e0e595dd2f72e1bc4cb2e4c7
SHA1 a7a59eddb0ea2dacb98ff03113480327c1805c9c
SHA512 475d255ae27e373971a32efb3c28faaa9aba5e3b6790329c211e038d1258f84b826b88aed8c7451749a608dad9aa433b9454520314c20339fe6527872bb15f61
SSDEEP 6144:oxQsrSL1TgnPaBehiQ0tlOw49YjoCrT3:eQESLNMaBeGyS7
TLSH
T14644BDB4FBC3D782CB132BBDA43D3D374BA852C561D05A0744639D26A598B26E30727E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
Size 17KB
SHA256 a1ff932c520015ccbce5ada0e6585cae669861883eb1cbfcc3bad4a9730fc69a
MD5 180d9da9926b84f04622af0cfaed3675
SHA1 fdf2a78a38ef70de54734d3603f65292e9dc9171
SHA512 10a5615c26b4d500f0b0cab8aea0f6e1a37c79f276a8f567d76b258d84f946af0d4a23789b348bf4194ddba657f41e1bca7f398a1f1d7f4068d98b52c30aa1d0
SSDEEP 384:vSdZe10pC8GYeKAPHPW0bknZQ4I07VF8HqbW5O0:vB1A12nPbIZxGK+O0
TLSH
T18582D1E62841F8870C94EBF8D1D7A5D6318C17414E35F82B5D41F3A8D827ABD91A6AC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e1
Size 17KB
SHA256 ce83192a06afab5ecb50741023496477f6242c24201d8f25dffb4e52117f6abc
MD5 cd21fc6dc77cabbda4f5ace875b147e6
SHA1 daace7b6604408c87c51e0b35009694e27348e11
SHA512 37a70397be01e6b45d58124ba1a996422b3843ce3ebf40a1340889189b22af9404a970ccc5655b0f5ac0fd97e206a093c175e452bcb21ea6e991f5d9df6cafd5
SSDEEP 384:979cSNMOuvoEAvky8nmH5+XByEi7k1du32ovQ1:BiSmOuv+l8mH5+Xseru32ovq
TLSH
T13382E1AC730552ED1A829801355B28D0E517D7B50B6C562E6768312E8324F3D6FC6F7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e2
Size 17KB
SHA256 17bd64c4f43d604309e87d916f9233115180c0dc0cb5a94cdda36a2add279da6
MD5 64c1bca1e5194269bb0d451eab354a00
SHA1 42a610220f8d89348e0b21e928521bdb681e7431
SHA512 fe3615a09e7e83f01412f62e2b9d6c446d238efe59cc48edde5d50729f1ff700d9772fdaf0e64ef180c068dace00abcd2e284a2effd14db90b44a18fda9a870d
SSDEEP 384:T7ua+M7O7xk0Ib68GKHk6hZ/IwuXClM3lz0EXw8OHI2D7PwwjmTT:T7uxkZb3k3elM3p0Er2PIwmTT
TLSH
T16582C0C04F7AA46E28DB99B9C436CAFC716B8553721E19A1C07B0EDCCB050B29F975C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e3
Size 19KB
SHA256 27b38334127d248f760ded14a3441b6ce3972eb110f73e50e1ae76dd16b73861
MD5 6a63dd3b4bdd8e27df920cbb7df0142b
SHA1 888febdc97e6e27e637e14b0017ce8c3c1b2ea09
SHA512 d691a06e50557c66496178460c13628b215b0616759788a8386c2bbec15d6be681104db6616a0840aa4941bfbb297d6cc345724957cba12752e1c2db675a8603
SSDEEP 384:dWANsy+GeX7PyAJGEXH5K5ldwQ88WAtM99LrUIra4dPTPxfNcUpxvRKY:dLNsdGeXbjJGEXH5K7di89tMXLrjaaLD
TLSH
T12192D128BC2F1F4A57A2B2A1EB2C51825CDB9853A9D5502CCD8E25C3706F1A46B47DF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
Size 22KB
SHA256 deee03b883e06fcbcfe81dcb5d8fd225bda7a80598f81d6584983a1cf1a35807
MD5 2c74ecec17d0b3d5857e6fd4419b540e
SHA1 6cfd382daad80de873d05f341ce1c61411ff0f11
SHA512 caaaf694953607ac8d65d738ccc262e5631e54556e867766f163bc0cf6014d191e826442f20e1e12ef65e78e433c65030605dccba3db0e8190992963d710c124
SSDEEP 384:bUHFcxYR4j+Y6voNEitCNqKO6n7/lY6ZRpYt/80eJ0PS2B/4VBf3mUkcm+oyF7Ie:bUHaxYuj+Y6voNEitSjn7u6kUqS2B/4l
TLSH
T196A2E170DC9B27FD61299FE4E8B68FEB323AD06495A5E1960F4DD861343C1E00D28E69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013c
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013d
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013f
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000140

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000140
Size 65KB
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
SSDEEP 1536:654NcGosP0w+UcGoanS2RR/QwNdIvEsgXn:6iRsw+UkC5QdEfXn
TLSH
T1055302E4123CA75C49FC43EA5434D635BA4B31ADABD4102FB69BC4258F6EA824447CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000141

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000141
Size 37KB
SHA256 84186c94c202c6eaa8cdde14e8bcb82ae95f13413df2852b46bd013535425f4b
MD5 8abcb03d6ce0af82f0e2048c440e6cae
SHA1 b35be41ea1f9cf3fe270d01ce78b4b121f851ab0
SHA512 b6ea20bd67cd7fab5703a0e980ff2e338f195fb851cb6eb511c1e750e193d2887580fc998e5c7dad92839bf2ee6209498ac6f9a6aae81fa1f168784bc2085067
SSDEEP 768:frn6Vqe28sAmi/PwOzwOqHgPrzb0JW1bZwcP5TnHak8yIpxTkHDVChA28g:fOVidcwovb0JW1ySnBEHywhJ8g
TLSH
T1E703E173136772151FE5533BFA9B820D4208A78AC06F438D384965F96E7EDA9003FD68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000147

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000147
Size 74KB
SHA256 b38ed34fa62e7c143e92865d10ceb7f30651a104ebe72587d3ecc43ac9aaef9d
MD5 a237cd8ab98a29d2fccc34f96607337c
SHA1 1a796c61601223e2cb9174dd426214d60adaf32d
SHA512 1c46b123da91b8579e9f38b00db49d98e46a5d23625de53061898adce6e5843634f993f6e9cb3520f5f591c7183e82d4804723c4f612c8c98ec4e2591adcb5e1
SSDEEP 1536:1Q1KPT86bxXCpyXy7qfigcceWUhnudSiOt6kskDvIWJ0UoRA4zCZfgQO3E:1Q1KP5VTkMlcfWUhulOTv/2klZfglU
TLSH
T1ED7312EA2E1EE3B0E6AD5D793C0A7131899C173C3ED0F72D505A483A76A9163E441C7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000148

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000148
Size 47KB
SHA256 c24d3f07e9a4dc5a2a988ebdba10ed762aaf30ab78e197f0fb1012e701d990a4
MD5 81dd12e911f789f95021061a29b179f7
SHA1 768c5ec0aa42c536936ba8a8de9bf94628590c71
SHA512 99d2017409c289aa461ab8ce0eeffa535d2934ae6992c23a654aec7e25501f970883086e36372df370dd280d3646dc54e0d2cf062c820eb7c6f24510e874e863
SSDEEP 768:KE+Yruhj6+T091bHjb8le5Vx31IZBdJy96fToWO4qi1QvyEo5Z75a0wckh9EjbiN:K9Th2h1biePArkEfToSQqJ5ockha/9BK
TLSH
T1EC23F14FC6D361D18671EA3B97A1C319CA50A6C34CD5CE7901DE1BD5B072BDB8E71A08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000151

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000151
Size 219KB
SHA256 1d189c26c38b8575f6f09d7d5293c5041d2d628daf60ff0d40ec5aaa3a7e3d4f
MD5 01aea5951eaaaccb470a940a374df16c
SHA1 0f5de097774f498d11384cf9e9c9ca3a35afb3cd
SHA512 23f988f26b05d626118da0b7319bcf42eafd0a40dead8b4b7837851c9ac22cda7de4db0d40c0bb3e05aea106e0eebbe2da74100609a360d841e34ed5f8551e57
SSDEEP 6144:dYhIf15L6eSI4XX+D0YhUe7m8LWADna1PkeeFlUz:dgIf15L63I42hW8LWyyreFlUz
TLSH
T159242366123DF4A521BF1532D82848098D0C36F1E3F62A4F4FF1B23B1B65C6B3AC5A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 ed5b5daaf0391f26a2cc0017c13e64a0b742f1f9b0f5231bca7642398ba73577
MD5 d2d50b2d9dcda1d02087c298415b6feb
SHA1 7e98bd748f70177a3691b19e0dcca6d2440bedd7
SHA512 05646110d3b32dcd6344d3f3b60606e590156b154bc63d27e7e775f943f38476ed7f231e2841ac38fe66f09a65cb5a608e007c2f285e357625b216edac4374c8
SSDEEP 192:KJEjbJrdpMc9tOCYUV7G7OvL1PEDVm9sdbbGt:KyrpMCtNCOvxPEasd6
TLSH
T12F3209B4A5D25340DFA449324EE14C313A3A50E9F8175FEF9A4E92F1783FBC85A9B024
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 9b6ed2d08844011b5395bf11c17322149010c822ceda4c80b7e081bc429811a0
MD5 7688dce1fb1f28c2d99be9dbd43de607
SHA1 984fbb6f19985d72fa55632f12a82201ecbca427
SHA512 a34bf19be3e87d3dfe28add27ada1b72f0bd7923e0f5eac65643613b950b04402dacb97c1cd0819e665d073b4baa217f8a209446a1619d99484bbc3553eea2d5
SSDEEP 192:EJEWgN8siMZWtmBzZ5Yl7H7h9a15E+VmOkF4ULO:EmXiMAtgsbh9u5EukFE
TLSH
T1B8422CB4A5E25350DFA445324EE10C313B3A50D9F8175FEF5A4D92F17C3BB885A9B424
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 a8d4c8350bba58ceb63865af3c2f50f3e8a7f6c783130a6edd008e05aa24cce6
MD5 5b800f20a6bfb8e2b63df955503cc55b
SHA1 8ee43d599780e68f4c4b1e41753f26e53506b8a8
SHA512 de03b49ec4a38902fad60ff5f08cf623471d606caf258db1bd4fa3c444edb18be7d5ac91dcfcca3ed843bbdcb5f98b2d897f2a9c9d95ddecbed36d30ceaf609c
SSDEEP 192:Xc6zlN8KHMjPtjpEP05Jo7H7/DnpEFnmILdCm4W:X3dHM7to3b/Dp+Ldl
TLSH
T15D324DB4A5E24360EFA415714EE00C313B3A10E9F8175FEF994D96F27C3BB945A9B424
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5aa912.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5aa912.TMP
Size 3KB
SHA256 77e49ff17fa34a72df62382ac4daea25bbac14e799d94cbd72a0552d45262a42
MD5 da2a1b84062e44ce9ec925bde4be2657
SHA1 7d4b30e6c5b0de75863da316c215733fee501430
SHA512 feef39d7c53de2d670ba47fb99b64bcb668127f12a2b8db50138a543225c3d336c6d687dda3b3c036ed0ec1c53d1272a8f21e04735f6c21ea73c396208f49b66
TLSH
T18F7162FD86024894EBF55531D1E00041753A86DEFE0BAFDE05CC84F5BD35BD1E858508
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 30KB
SHA256 28f15d275868b1f9743bdd93ac9ae3897aaf4424d37dbdb296e77a90476db92b
MD5 41a87e654a745f7025071c5539d26f49
SHA1 ea1d3a57ca244e4286adeea863b6b194275a7cac
SHA512 5f4ffacd6490c69d33d52d16c8a7bf6fd65adab90981384812019b9063079a5c708bcfd02b4d021db603a6a4e8dbd39062bd624ca939cf5e34e03343e9e2d58a
SSDEEP 768:JuCpIAP/ya9ao4NUNy2QeJpxpMViLKKl8+0Fm7727kMRILoE:KADy7/KC+sQoE
TLSH
T18CD28956B5F9060AF2BB5EBBE8B617A14C7ABE562D04DC1E5860620D4C31F40CD73B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 345B
SHA256 1d24293530cbfdf8e0820004f48e90d33b6aebf2280316ff432cd4162867f6ae
MD5 f2b1600f90018bbea3fd5d5c12e4df59
SHA1 00f94a56d19d2f5b101d150b0308db41c9811894
SHA512 0faf9f6ea52c07783c13345d1705401dfa3fb92e5d241107023087842de78f73d122a725bf887b38658c4d06f595a2fc1df662cc15aca6d809062741afd962af
TLSH
T1A3E0D8B8CCCAC11F525454D75535BB0D96A3660FDB8DBD850E5CC808B442044F97E265
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 f2e5d3f9c229489c52d0c3a9553deb95e7d00b9da42656d0d8b0a7de2a0d8454
MD5 6d8367990c499ef0fd324d16de5e9c8c
SHA1 90ce15b17ac3e2759f6c93d540f06c51fb690d7a
SHA512 88cbf9299764f9ebb73392ac4b785d12c9e635f4d68b918dbc802e142b0b7264fc5ce12b375264d9f0a1e2ecb5e7e2f78b98151b2f43b57b96b2a26504b9b254
SSDEEP 192:D1kH+tI+lKIAaaij6P1hHAGMnq8Hu9cQAxySctcQcD/d2e65/FHx6Gk1:D1keK+lKIAaaiGP1hHAGMnq8Hu9cNxyO
TLSH
T1E4F1ABF787E5C66D991692F0AA18AD1BCE5C0520431C39BAC4E0BE57A3E35B1F201B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d919240fd908e4a21244845c9495585f2da6ba8ef394730702be3c3f1c2447e2
MD5 e73f7272538c74a438d719d244f67d89
SHA1 6e5197e3ec1a76f7c99c234c04a84fa20cc24b73
SHA512 a344dfd2fcc771b98562ae41e1c05bc1040d639ff4949cf98d2ac112d01a331cbfcd23891df4b6a3e4642ab66c3056ddd19bb6d550610d9a84d95ce30f9e9d0b
TLSH
T18A31C0F383E8856ECA1095F0BA18AE2FDE1D0510432C3D9AC5E4AF1B93E2471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 30KB
SHA256 027b01b89860700eed06c0f4e4238e72ee53ad856966376f8105189d83b09f40
MD5 771a8d39d501ed9eb7b83f66ac18fcb5
SHA1 13233fe79e104e229d4314b6554a3b69fb8cad0c
SHA512 136c6d6c774630174fb583de4a0c7eed8ca0b35e6d659971fdf48a3ead5adcbaa607c557bae90a97ec514dd1d3a14d14ab7f10ea8f7ce6e83eb8476a050e2bf7
SSDEEP 384:D1keK+lKIUS9+R6h4o2feWlb5wZOeS3BeA8igzEvpt6aaiGP1hHAGMnq8Hu9cNxG:2GZ2fZcdE1Pcl0e
TLSH
T1FCE27CF787E5C66DAD2192F09A15EE2BCE990825431C3DB585E4BE0793E2872E20174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 5b8d958616b64d477363a553825dc5f5cf918939a231333018c220921ac4cb52
MD5 3b3bfad27c91fd15fde0756813a505b4
SHA1 f186aea172f69d566d6a4781a900d72a90f289c1
SHA512 881e399bfd367de9a85c5fb6ca832703257f1e28f2b543151a45284692fee22398a5b706c746135bbd001bf7a0aede2e9a6dd3c7ccc9ea61752f432a68840c44
TLSH
T1DDD02313171830B95D9C7E918059AC4FCB7710510801DFD520D078581535E5C0617241
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 9148517507983a03bc6c4f32f535bee414c9524cc87a4a0b94d46db352971c6b
MD5 4d352cb6baa7e5c6cae80a69ca114ddd
SHA1 f7688795ae74b10097794215fe4fe58a2794b7ae
SHA512 2af45aa69c14c16ea2d9b03656f0b53dd7585ff0d89ca7cfa0d6a8b6fd47b4813734e334f7311e5bf795ae59e40a69a332a6270acf89df1fde20377e1a7e8962
TLSH
T190D023A3170470B45D9C3E91C05EAC4ECB3610901801DED530D078991536F5C0B17684
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 ed62f698d5ef7be7a7fe84734b30940761a2c2fee5691f6066940c6a66cdd195
MD5 bbc4c3f4108a3aa90cbb574ff033433e
SHA1 f288832e48a249d81aefacf74ca7c75df09436d6
SHA512 dc41e130e837d3400dd0abd27b2e0cc0c86dfc9fa056b1b499b467ce88e645a9fe33cf7ae24a3666d5ff2b5da9da1d8f64ac3640a2af192797ca5deba582b189
SSDEEP 384:sxZHiluOJ/fBsQHzmURDHbCQUNx18/v8Fc9Fn4F:s6nJ/fpHzmgHbXkWn4F
TLSH
T12FA20806662099BBCCD7C219FA257F56D6F80023DD904E5C6AFCDD1C04EAAFD220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 7f50500a8f449c55d1a9de9cdddc9bdac3d5023440320f8d7580c6d1bd54fd99
MD5 a735cd599f36e288e0c7de2a5ebc860d
SHA1 da8a175e8baab3f3dc5b1433f99eaf03d5ad0db4
SHA512 2367672de1b20fd749a9879cc9e084b2936b550996880007ee2e6e4a0c32af8afdb6eec2d20c56ddffea5955f67236d1752e2b9d61716fa5e122b304bcf2305d
SSDEEP 384:sxZZlMJ/fBsQHz2UHbCQDNx18/s8Fc9Fc:sRCJ/fpHzZHb6hWc
TLSH
T16C720906A6346ABB8CD7C219FA45BB53D2F8016792905E446AFCDE1C01E7FEC620381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0d1465fa471ce819150ff454f031ac449eebebea40565cbba9fe15dc8677a2e2
MD5 c4bbb2d5e58c7dcbb2a021a173a89aca
SHA1 3466206787ce64b1856b571cadf4aff891d4cc02
SHA512 b039a369f45d4951056f4ba4df1756a7bcd3f853e3cb8954f85a9a71664ec5298d73883055fbb2b6a497dcd5faaa8b2b0fbe5f97b83e58bc6c5949ce314fffb3
SSDEEP 192:sxZZRAyMqZjK1Ml8MWOJ/fBsQ+kZdJcodp4w7HW6+WNBBNDeb/YvU+FD8Ig5LCMc:sxZZluOJ/fBsQHzD5Hb98/QFc9Fc
TLSH
T16F62FA16A634A97B8CD7D219FA45BB53D6F80177A2905E445AFCDA0C05E7FEC220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7d59487b1f6cca8d97feee5df226d59cd5925631fe40438521bc13ad71e7368b
MD5 ffaeb9132df67b1cd9b51c633eff1b2c
SHA1 3c3e7c1a4009027bae3fb9fbc9ef42e4e99cebc8
SHA512 8ec0b8fb99be39964b1322af3affa9c18bccdbcb2495c78a1c945f9d918ecd895db1d6b726ce72d1647827edb7f393827e2fb1ff4a92683cc433eda852f32cf9
SSDEEP 192:sxZZRAyMqZjK1Ml8MyJ/fBss9+2aZdszodpU7Hhz6+WNyeb/YvW13+FD8IgjCM4J:sxZZraJ/fBss9DazveHqz/h0FcjFc
TLSH
T11E62E916AA34997BCCD7D219F645BB53D6F81173A2904E449AFCDE1C01E7AEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 25KB
SHA256 cc51ada36a9a8a6ee1ebcac9339eb324192ea952c7eac6ecba939b9f6f6319c0
MD5 55af67f4e22e1401b7603446266a3047
SHA1 7df965a8c9b2f6ecf8b61ab4e6425e3bdc0e352c
SHA512 01b65d80a9c0cfaa4cca67f4c0875a4b11e9d81f31d826398a146d375c0bd3834ff715fe9b332f92515f43bbf0a545e549eccf95602a2be98ba923011cca9864
SSDEEP 384:sxZaROlqe2m1J/fBsQHzCTRvabCQOPVjjE/oFc9Fn4JMp4i:sMO0Vm1J/fpHzC9abIsoWn4Js4i
TLSH
T162C2F7065620C9BBCCD7C619F935BF56D6A90463CD918E9C6AFCCD1C00DA6FD260282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 26KB
SHA256 dc9206af7c67459c81b2860888a9c07900302ee6e8c4287e1c9d48117af9233b
MD5 f0391db71407d8e8081c5dfdadf6643a
SHA1 41a114b408ae93c6cd1c924badd0deb5ad9c660a
SHA512 51d515be7395f3882b74e46431d1a968a50a5db47686d175be21173bec7883981171326156471c0aa2705d0cbb3ffd123169a37e32d1e7572860305976395b5d
SSDEEP 384:sxZaRHlq8m1J/fBsQHzTTRtabCQOVAqjjZ8/nFc9Fn4JMp4i:sMH08m1J/fpHzT/abIa9nWn4Js4i
TLSH
T1B1C208065620C9BBCCD7C619F935BF56D7E91423DE918E9C6AECCD1C00DA6FD260282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2f96f914-e360-4582-b771-518a4b22d3f7\index-dir\the-real-index
Size 96B
SHA256 df25a11a545f50bd48447812b78d59020a5c7dcabe305458a45b486139eedf0d
MD5 c3233745d31dd03373a7c15dcc715013
SHA1 ba83108b4113ccfdc34bb6d98769b945ed14cb0f
SHA512 29a5da11b8885f217ebb0499c28fce368f98a69d48de574ac55c530428da34dca3f0084243a098bb281e8ed358166529348c737d128d4bacbf032b2af3c8bf2d
TLSH
T157B022300280302AC2083FB020C000803BF0ACE8BB0FC2CCB8A0CC8F8A00AA3E323000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2f96f914-e360-4582-b771-518a4b22d3f7\index-dir\the-real-index
Size 96B
SHA256 58b4c380b2cd66518f20dc813a076aaf5d2306c549894e9f3068548ef75b0ae8
MD5 965c8a76a4d843d24e0140a45ac137a8
SHA1 34cf2c509cc63f6963e528f0313716383e20f788
SHA512 b86ae214577ff99afae11959889c5d4030a978c852d4c762d5da1a4ef87ed0981fbd43f45c44c73fecea468c109b1c45e7450dba203c92281a60276b2253a890
TLSH
T116B0247C07F31105C144073350C000C073F00C70750FD7544CC04D55C040341D713005
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0f05.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2f96f914-e360-4582-b771-518a4b22d3f7\index-dir\the-real-index~RFe5a0f05.TMP
Size 48B
SHA256 a9661bd3c915482d78171c5ffe90ddbeef37be335b0ece6b28b4a0c029eb812f
MD5 b609384fa725029a63409bf8ae7049e8
SHA1 e97b6d32ea80a5c9705f2f1cb537138f514a6916
SHA512 aa4af3eedea7b59fa6bf7a991d06a367f86364876bf5e6455e2761a89b762cf844a0629fbb56f322ab81755a6534cfe4cbb5ea29501a39cd4874a3077b6992b4
MD5 SHA1 SHA512

Submit Download

4f2277ea2139c475_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bc34455a-c0c0-4ad5-9d7c-df0e9e63825f\4f2277ea2139c475_0
Size 60KB
SHA256 14612237dbd074beb1ab8e874a16faea38828e3c2c5668d5838669f956043d78
MD5 bbb61f9a539eb49df85e5847052a4c9c
SHA1 1116711da6746314a02aeb6d9e49ced39c0cb937
SHA512 a606ed242c1bb92ebbee3998fe34aa66a45535a924baf3e91c4c479446824a39a4303b92cec6f443582a19043bfc29bc9fea6446d808ffbf430d223d5edc5762
SSDEEP 1536:ciSB8Ss4JfCS+ksYyiApR+M0DpbarcqY/Hevm5HPwqpzGX/a:c9BO48bC6Rx0DNDVG/a
TLSH
T1CE5319A7B262A03687AD21D5A49A7F00F11B17561444CDECF0AC66913F18ECB57B3BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f2277ea2139c475_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bc34455a-c0c0-4ad5-9d7c-df0e9e63825f\4f2277ea2139c475_0
Size 60KB
SHA256 75a4a82c83460c0da8714073fab977021f9f47106db6d6bdbc8a9087ab254eac
MD5 0d4f8915ae832cf9f93e2482684db5d0
SHA1 1b59c40750de14522cb64df821fea3dc6a74a3e0
SHA512 4b20ed46fcc0bc92833f2d61f19bcca8538eb7a11a9e135f96be17d3d4f824a186416a7ff332aac8524c3d1852d2f5e39b68e02599dc03116a3ec9a88b6997b7
SSDEEP 1536:cA4ryo4JfCS+ksYyiApR+M0Dpbarce87zKDW5HPwqpzGr/w:cNx48bC6Rx0DNDR2/w
TLSH
T1615319A7B26260358BAD21D1A49A7F01F11B17561504C9FCF0BC6A913B18E8B57B3BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bc34455a-c0c0-4ad5-9d7c-df0e9e63825f\index-dir\the-real-index
Size 72B
SHA256 79fd75822e86d6a9b710de174256e4d5391cf089b5248d6e584b3bccd38442f3
MD5 28d2091e3bf49f5e82124fd87b998244
SHA1 3ce71c58a19aebee1617e74258d11a75266116f5
SHA512 9f938ccc4062d2245ec1ec9a70b13ff02e69e4fa03b2054c81a512f960086b0003d23d2da18f4bb6b84d0106a10543f8158093a4db1c5d7a0546874bb8aa42ed
TLSH
T123A0023065F59082C12906F1D54611683356ECD58951535B66B26469989E3984605848
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bc34455a-c0c0-4ad5-9d7c-df0e9e63825f\index-dir\the-real-index
Size 72B
SHA256 6e9fd7ecb3c14bd021a0f8805f94d3e3b522e8d884876f715c5c048124ef3e2c
MD5 8772204ab0a6aea8aac6c26f3058432a
SHA1 f32df3745d62593f7b4703578bd360096cfbba5d
SHA512 0d428f1be7df4c2f55161980a29e0c49d734e02623a9f25c1dba096bd7eba4a54e35b6b35848ab0418abdec6819ac60b5826ab0ec02986622aeb2f02625b00f0
TLSH
T1E1A0023522D81086C86646F0514242582756FC59C511A797E196249A8C591585601849
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index
Size 3KB
SHA256 4c25090a0a5ee9790a6d4fb362bebf02ed4dfe41c7be05403db1aa2532b10c7c
MD5 9ce0d45ba823e35b0ef59551f8b3201a
SHA1 d5359cf437ce7fafa9ae4b7f7b70d2fb1e6541fb
SHA512 5b23222900a94e4b85a18c75c6d188ea5fc28eca2318b93e8a00e61b3f5f594a37ccbf699f63757d63084d7a72355fd927a526346f3007dfc194e186c9b54fa4
TLSH
T1C151E70F4D821B26DEAD05B32CFB009437B654DC5248DE17A4DCA030BCCB72A3DAA226
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a19d3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index~RFe5a19d3.TMP
Size 2KB
SHA256 2a23a6bc3772e122e8484b5a53436b65736068c1b7c658ffda0698ea40ea3454
MD5 7fe727bd9a02eaa5c35ca055ec3b1287
SHA1 60e6c8549acc0686c87e4485ec7622e27efcb1bd
SHA512 5e2206251e28d4b4b8ef9a127ce6ffd188009a527bd9b853008d47190b465343042b7340a25e1cfd68a3488441c98b4f194edbb392489d1a69b2dde5de21ac22
TLSH
T1EE51A48E4D42463AD8D441B309D3A4A437396900971ABF4374FC9636BCD23AE3D0E2C5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e6392b72-b563-46a0-851d-26cde0dbbb59\index-dir\the-real-index
Size 72B
SHA256 fafbd3ba3a633ebf3bfbfb5928cac425a2d46c48705f3a5e15f6f285852ddae9
MD5 a325d5553d48b6ffbd2050fad0290b7c
SHA1 cd059df78ccb034c3fc8cd0b698cf278d131a65c
SHA512 ecce226c0d5faf842b1e3baa6a408476a2e14643e1551ff4e78140b6b37fc2344cda6b01c78487f7fbbf57218cfb7d35cb57098b9db2dfc7856146ec2dadea0a
TLSH
T13CA002E806804241C013D2F07996554277104820024222A542A17054CD70B40434600C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e6392b72-b563-46a0-851d-26cde0dbbb59\index-dir\the-real-index
Size 72B
SHA256 fefda7c225bd060bd5efb07a33956938186856aeebbcda39cd7f44a1dfefd312
MD5 ae04cac00f712a68caf97d718a7d5d3c
SHA1 4d82b17c318fd666653609d34a4a8550032a089f
SHA512 20c0a73f862f8ca510a7dd63719a8d2b0d620287cd6484ea73ee4cde18c108b0f84dd7c6b575ba798ff69637d1d2f3f358c4ab9aab86f0c7f3c94c3f55045680
TLSH
T12AA002A842A0A591D00BE2B12BD20571A2194811C21B525ECDD202C4C8515404276A1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a011a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e6392b72-b563-46a0-851d-26cde0dbbb59\index-dir\the-real-index~RFe5a011a.TMP
Size 72B
SHA256 5e3f43c6e80b0cb932488788948ebb8d5827bcd677e192d804721c0a5f04c25f
MD5 55cdd958d0aa55d57bc7c2a9f7b9ac3d
SHA1 3755f234a2baa464ac42b62d79a94d5ebee4ef73
SHA512 fd7d2c27e93d5f283bbe82f06102c9f107792fe0999dafe45f863861deb85eddd56a184b8e16044dfc74a630fd161aaac481a2703c379a8317d49656ce000c90
TLSH
T1C2A002704380C006E35651FD9E5A02453300D8A02311170B449A4085CC605508EC100F
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 4b479774ddd14e2f90fc220fae146dae425c7cab6903c347b161ce7184ae33f9
MD5 2b993a7c3b7d9bc6afffcac4a40695bc
SHA1 51b522a3de928c40f8d2d0471cde881c4f8b95f2
SHA512 6ac15e01728396db11034d96f35f9a4d5e416055ca0922523006c42c321e392965835981f8f6ee62ca2f72ec34a8bfbd40dcf24c8e071e1af0b9c8802df7b0ef
TLSH
T1D0F05CB33FFB1814FCBBD3D62532587005057950D850ED5F2826B39395B131C246ECA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 b273aba4234ed6733df0c00025a906af9928660502f9962984eadadb5d82cecf
MD5 4077cec6f3ef17d7b43f16a267b6aefe
SHA1 819c5796ceb9576b95681bf53137ce8b49e249be
SHA512 fdd150d5659e9a5316f071f10253f8e837394ec289eb8cb3cd93987b6fbb51c003e0c9f8ae18ef835e74688da37048285bc303778367b4a85caa1448cfddb88f
TLSH
T103F05CB33FF72C10FC7BD3D62131586105097860C850ED5F2826B39395B131C205ECA6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 f2b71bec6181dd90696da74707e6f31602c787e5f5a1a918f52154255691d096
MD5 11c569ea4b26dfca2e9f79b1418d0f62
SHA1 046977e990ce56bc2d2b151f97a78f242ef27888
SHA512 d43c9806e151a316dd1f6f34a8d6e75bfdb0908c9baf962b0cd3ffba7329a3dcd0c9cbff889b4af97e570ffbea39db40d6c367956f4bdd5b3d4318bab7c4adf1
TLSH
T128F027733FF71810FD7BE3C6603208A10405BD50C8519D1F2826B29395B131D245ECA6
MD5 SHA1 SHA512 TLSH

Submit Download

e616b5cad11fbf98_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a1511d2e0ad248971cd24f7b5e17e1b396722df3\448ec1e6-62b3-4fba-9feb-053787bcf04a\e616b5cad11fbf98_0
Size 306B
SHA256 e5ba9207d0a27989305344e127e0be230ece583bb68dfe1b7d21791033b977cd
MD5 88305227b59103b51155d331e91c1059
SHA1 190fa1fc16ed8ec131702f2af16f64ce8e24fec5
SHA512 9a379a821c47e574d6b602ab7b1b3c96d0b6b44f12a294c3e20d2391ec1c8169030ccba98876a67fb52d0b2f2150c9b75490f415cb078de429b2a1301ed20bd3
TLSH
T1C4E027C33C00C9D0EE47E4BBEE6EC38CA061C59DC4754265D5C5192455E557937C7205
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a1511d2e0ad248971cd24f7b5e17e1b396722df3\448ec1e6-62b3-4fba-9feb-053787bcf04a\index-dir\the-real-index
Size 96B
SHA256 974d5a97fb9215f4c753f37f82bd4d8b24d94c8488b2f6696852f5e201b9060b
MD5 38dc6e2cd0502c873bd4679670f1fe08
SHA1 670cb75d2d17c0880e4fea2ecffb5df7af5c2939
SHA512 e1934e454817bfbd7b322f72ca927b7373870f3e3d5550215ef652f0fea7c293adaa5a00a1f79f3b1c74e8644c6d0c05d132106f279f255fbe5861d022beb532
TLSH
T169B00274B1824047D05073F261C79762723B4F2547E3524241E894FDA89636552E2435
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1dbb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a1511d2e0ad248971cd24f7b5e17e1b396722df3\448ec1e6-62b3-4fba-9feb-053787bcf04a\index-dir\the-real-index~RFe5a1dbb.TMP
Size 48B
SHA256 08169fa01ce6fd1ae7b7a224251a0fc7d3437d867d38be357a8807f717b50898
MD5 472384cabe693291bb2f707a7900cb88
SHA1 fbd19bc3616d1d89ded768ed9bcf8ad657af0f89
SHA512 4562c4c9475ad31477745ce4ae8075d20d053ec0ebdc68b8b1c024a18d6fb68dcc51948081d4d220f0e7fdfaa142f2ca79a761c41f5f076d044ffec294575d0d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a1511d2e0ad248971cd24f7b5e17e1b396722df3\index.txt
Size 101B
SHA256 08f3d90aedc141cf5a072188e36245c1623aaecbd2782f0dad3f7f8b4d963243
MD5 6318c061eb5a81f56813125842bb379b
SHA1 6cef8591acb8f565e3c8a79259b53b9e73194c05
SHA512 c9f108ca11b9919fc32531fcacdb8be15fc638931ed94a74e923194ab20bc68e79425308aeed648cd2926d6ea47542a60706a947219ba0538fcb88b9b315ec51
TLSH
T155B012B37E36C8C12B50EAC9C33024584512446DEB81EA70A2343E41D0A037055C2670
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a5e0f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a1511d2e0ad248971cd24f7b5e17e1b396722df3\index.txt~RFe5a5e0f.TMP
Size 107B
SHA256 1879cc757e3fb11bf9cf87df31ba08d30845ab16258aa9c946239107b422dd63
MD5 d8dd6eebd65c672b6843ec6a1bcac5da
SHA1 3930b718c7d31d2d81923292f2825f7efe11f2d8
SHA512 47cccd03105a6bcb7bf1c91364ad9af361b73e00e12d3bc736322783c99e012e4522e992039f7fed84cdc96135e77b5aad1e27e3e01487f93044b18fa3fc7bcc
TLSH
T119B012735E3AC4C027A0E6C6C231244842628CADEF41CA7061253E01E0B037197C1670
MD5 SHA1 SHA512 TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 127KB
SHA256 18fa9476b98b1f3692a6b861b8f68f1d7b040019f7289e67e093b0e89308d0b5
MD5 63bdefbe01c62be3ccf72e9f3fa70e47
SHA1 520a0b34de029429e12c9ea327e597b921ed558c
SHA512 580a454ab1321a7bb45382ea45bf78a5e9a9093e8a4d166b66cd4a24fc574eaee1004af04a66d0fb3a319cf2b9dfa772beec1ddc570973d7c05d2ea48c13fefb
SSDEEP 3072:8Hw59B4xPCx1C4Ue3ThL/Al5UAx0gL/tL/dL/wL/yL/nbe8qn:8HwtthL/4iAx0gL/tL/dL/wL/yL/nfs
TLSH
T14CD3AA32769D50AB0E8EBAA45116B50392BD7467B8449038F244A7FC15DBFB013FBEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 098fb7cb665ffe9ee136b3abb400caa7f15c3e3a985a502478fbf8139a04c5fb
MD5 8712e4bcb4238ceb89ec4fbde59a4725
SHA1 0bd86dbc6d78184307dd1049a3e80c764371a3e2
SHA512 da2c76ba534fbe1634d87b7f82e9f30e0f953aee24b1f9b8ec623e5ecba65233cfcba93418e464f05a7270792174aeadac9a8d1e7ae493ca7177248541c20956
TLSH
T1D7B02233CC2C20EFCC000BF0C08AA080B2380C2C830F332000AF83BA882E20000EB28A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 655d0e7076e809902efef7929937945f2ad49cf255c161a3d11eeea7ef86c0f7
MD5 fd414ae9fa690253eb075a6c01855198
SHA1 712bb03d50a3fc2385f2554bb3585a62a4ff7741
SHA512 a446a2cd1d24ffebbaec0c06365045088265aff034d1701ee43d6feff466b4446a439fdb2c8199e06e2ec9131c79a06f68602eae8df19b6c23e44f574a5883a3
TLSH
T1C7A00231C95C84C9C00043B59171419467648D9D6F85236144AF0354896928145EE109
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c71f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59c71f.TMP
Size 72B
SHA256 a2b45c4e84339ae1e9c026647d3b22b83a8a6610f9509864e885570c9fce69af
MD5 976afff0a467c75d2a99403dca81373b
SHA1 bdfb3dc1d5ba8c47e3f4cb712e9d0f048451459e
SHA512 6fdc8127e3b18a143a7cb88072a524883f43c55e3f9791f13643bed95e15f36fa2908d6ced6edd8bdb812fb999026743997346c012e1653f3d2f069f7ea6cbcd
TLSH
T16BA00216A24B544CC54005B1101733B51741C86D1201130B469490ECEC950C2E97110E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 cee294f5209098588841d0bb3c2b0248c41bc4480994817ad7a01020bc2da4af
MD5 5aec7ebb9ed202ef03d31043eaf8f06a
SHA1 67e9f876468858726270a6a3cdac4ff13124cee0
SHA512 87195e9f93306ef3ea11dcea232e76bd2088bad13df87e90b3ea0d1faa8c7296b2b6f2ad5e25238e0c97991b6e6707f7df890f8f5b738a770ea9b7f6c2e5fadf
TLSH
T163A002BA16600063C40552B431D553757F36D8A55302225D819008A4F861B60CB52840
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 708f9f2d8d6cb0b4d1392ed53e5a7080c0a6acaa3bc6e71b7c21d075780a8714
MD5 314a6274a885abf9406c6fed6e4c282a
SHA1 996bb6d66f87f361323d532d930deb8c49c9aab5
SHA512 e103e6a9f829259042ad848c013d97039737f143b3c48b86df22ddb376911a875e74939f62f9e2e35913b8b084b52b7736c7aa332bd8c19b22d137735f43a39b
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGf:05ppxnY753RNBvRJJdt7p5J9pRvz
TLSH
T166B27B5A703E0212397E294CB39696364F4235A33058E4AF7FB814A14F67E225DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 5bc9310368efc0092dd8de8afd83374d0b4a415af279112de71fd8263f64369d
MD5 6332665df23e7bee57a5b9c7ff9c1baf
SHA1 69fa740ec1372a07bae9ae405441b95212cfc3d0
SHA512 326b6806eed845e8a454bb8a5c9db78bd2dd09b808a17be5338199552c633492e6f2ff63411ab67d57021fd28e4281a1466f3b65eb528d0aa166db002b87a177
SSDEEP 384:nRiFPZcIig3sNU8TUNTUlI4xTYckCrcaEu2pv4fmGsaiiFWI7mBlXK9Li6Uq58b9:4FHn3xwgAkNuobGsUWcmBlwLwVhBuy
TLSH
T103D25B76D8A4E9BBADEB87C9BB0A3607DEF44253858C9AD0D9DC1D0D00975AD030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 7b1913c74886cf5e1b43b9ffe9e5067041a778022bc873d9bc4105bce75c6230
MD5 b6974c8e7dcde067985cba62b8af3837
SHA1 fca681e059c0ee847b8cb1354181b56634a00a10
SHA512 eb2c2dcdb47dd5c1ad98147bc6705317bf8bfbce9bf0cadf2b1a8d57b6884228dd9479cd0d4e1401ec441b7348cf005af743ca55f4e2118225729c322bb7b591
SSDEEP 384:npZiFDCcmyWCk3sNU8TUNTUlI4QQckCrX/Fpv4fmGsaiiFWIimBl08ty/7IgsZ3:pwFWcpk3xwgDk2rbGsUW5mBl0S
TLSH
T18EB23932EC98DA6BEDE74BC9E74A3603DEE44267858C5AE4D9D82D0D018B2DD430B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b89ef95587c88a5df594fabb4ca4cbcaae9c8f299ff34b45df9517567494bb3d
MD5 f9c751b01e9b60652a10605fcb3dd486
SHA1 8e510127d28267f4245cc25290bfc15a251bab8a
SHA512 cc81caa9b270197512bcf742a1946a2c24e109e4622424e083e9153267a420571dc78fb611fc958c534648c59436c291becf9fe73482d46e13d65044a6e4b939
SSDEEP 384:nIiFDCcmyWCk3sNU8TUNTUlI4QQckCrX/Fpv4fmGsaiiFWIimBl08ty/7IgsZ3:TFWcpk3xwgDk2rbGsUW5mBl0S
TLSH
T11DB23932EC98DA6BEDE74BC9F74A3603DEE44267858C5AE4D9DC2D0D018B2DD430B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 28df615890c429ac589e559e1d603dee8db51534cade14b841ba5af5e245be60
MD5 94f2d3c74e0dd70f9833c3ef4c5c49e9
SHA1 25cb2db4f26b1f25e6bd2aec505c5a6acd411d46
SHA512 a16dec9ac6e5e0cc222a8f0f343be2a538ea25477b5432a7bbd6646dcfffb27eb1dc442f468814f8e7b6cee694f16c68003f8cc9aed90ed0c950c9bad00b8c67
SSDEEP 384:nIiF0CcmyWCI3sNU8TUNTUlI4QTYckCrcaEu2pv4fmGsaiiFWI7mBl08ty/7IgsZ:TF/cpI3xwgLkNuobGsUWcmBl0S
TLSH
T11EB23932EC94DAABEDE74BC9F74A3603DEE44267858C5AE4D9D82D0D008B2DD430B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 9ca3c55660d01bfa015f1402ea1ffe8629ad1fad806a1af753e6a43eec82e030
MD5 99dd82497ae01f75183be21b5becc301
SHA1 ec6866f5987d7e6d008fc166e4c6af78417f6229
SHA512 4a16289ecc2d21113e71eeab114ef3b1f041dc8808851e53a15db1931f5458f709de4424c1d00dfc848c7978574b6280db549f462e5763329ae08b13caf4b886
SSDEEP 384:npjiF9CcmyWCs3sNY8TUNTUlIm2QckCr9uPmpv4fmGsaiiFWINmBle4KV8p0ZLAk:pOFccps3BwgbkUEYbGsUW4mBlI8p0ZLv
TLSH
T1FBC25B32EC98D96BEDD34BC9F74A3607DEE04267858C9AE0DACC2D0D109B1AC430B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b6ac2e69c6a7b298d2160427707bd0b080ef995c4d358d862f4e332d90250914
MD5 fa17b67c7f2c9bd0ba0c736d94401023
SHA1 2c292926ebd03c1b7f913a8c3b4b8adfe0e9fdb8
SHA512 bb3092dfd164a6fbf9286dabb73a8530ae538f1a94e0dfee9f649ac8c4ce53500d942460e648d681eaadc49aba5ba294541db95037042c7ed03ca806a65cfa2d
SSDEEP 384:np1iF9CcmyWCs3sNI8TUNTUlIm2QckCr9llKpv4fmGsaiiFqm3pge4KV8p0ZLAtK:p8Fccps35wgbkUzkbGsUqmiI8p0ZLv
TLSH
T15CB26C36EC68D9BBEDE74F89B74E7A07DEE0026785D859E4DAD81D0D108719C030BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 943e994ef852274761530a304ef29187444608e0b98deafd75279c9369804c2e
MD5 70d656969822468b8a473ccae7e5ff1d
SHA1 9dd0041bb314a61be360b3811dfec70380188941
SHA512 b6be277449af92e3c79c85c48a41d1cf271d7079027b325eec91e2ac6c009ae91958f3be37402b2edf0686f5d70c73314fc7ef2768b54efbe59bb076eb57b60d
TLSH
T1C1E001229300017DD838073810831F302FE2C05021B626475B79055D2D337007F70FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0e10c3010c05f4fc36fb5a73aa6ec0ebfd160e1f400d8e6c59c5365d5cbb999d
MD5 ae3ca00e173c48239c93330a5df031a2
SHA1 170623979784a67e59767c08ed236e887d452b46
SHA512 35781b94fdeac0e1df590fbec3e2899a3043b542627d94f96e02262dbb357d1044de95652debc35209baf52c8b690308c69db0a1e3a5f61e19c0015a63c1ae51
TLSH
T1FAE00462A30105BED9380BB811832B353BF2C06013B62BA75A6915796D23B006E60BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0c593b615c562b989aeb0c9916bf64569af3d91b9d1c5c01a28692607c8664e5
MD5 e0c4e9321955cdf49aa20b22105b58c9
SHA1 3697564f1710cae99e5ac3134ac6e44cef6177f9
SHA512 44ffebc762515fb5cbdb2f10521c6ccf4f1a0f8fd64bf5234f7ed6ddc62e9b76e279acdba6e77e353a9e4b2620e7e3357a61a4006fc6e87816a19b96df697490
TLSH
T148E04822930001BEC8380B3400832B303BF2C16003B227970A2804397C237203F60BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7346aeaa5e41ca74acc4eacf0e331ad08e419170a73a2b4c24e7c12f16758e37
MD5 7625fd3115b860c4eaab8f5111681c54
SHA1 698b50f558f1d81733da6104c49346a2f62a463b
SHA512 0ea4e4d7fa3d2a0f39f621b1c2629c64883e6dcce3399bc5e7afd4803d98c59ffff6d2995c3cc77dbed10a2b6ce6d8a54bb8afe2d7e116cb2b7cc866a5811427
TLSH
T154E00962A30005BDD938077810831B352FE2806022B626465E6915696D23B007F60BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 59265dee152505a963b84365d0432ce1c18945d4b3e1c97b15434ed7abee8024
MD5 541bab530cb0e7feaa3e0f946ca64366
SHA1 a4ffec213490a9fcb2d9b1a9281bdbd7465fcb43
SHA512 68adc6efc2db5fe8231c7e5af712b7ed878daeec62b97fad56ec3cf0f35d2ef3f59740eed95ac50274ceb1c5c06516dfa9c8c71123f8b4a2fdb0eab88adf7111
TLSH
T18BE00962A30105BED93807B811832B352BE2C06012B62BC75A6915696D23B007F70FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a4fb7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a4fb7.TMP
Size 392B
SHA256 7c3260de78cfe2fb0cf23b2df7bcb7a209978ee12341d210e928ce51620db899
MD5 8087d301f54138dcb2f403f791516120
SHA1 f0423a8a5f94f6edc06e14726dd1537ba2d9656a
SHA512 c6042b12a174424fb5f00181912ad2227d7caba87eb51b65ebe5eebd1f7656a395eaf7a8c6b765577e390a588689f0cf18525b6c8ab91768b2cf126efe29e79d
TLSH
T19FE001219200017DC838073810831F302FE1805021B622465B6905592C237003B30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4995c7c0f03dc1ec61857f6ec7a030ee38ad843d23fb56adb3401f76e1cb7d7c
MD5 1fc550a044b3dff1968dcd5a2bf24ddd
SHA1 fbfeb9aa09eb4811dbc640a76e9d4139aa3f97ef
SHA512 a85a2e588d97777361dce2bc27719f524db48aa48b79673307e57efbadb174afbb597995b9f4af143025f645be29546eb5cbeab297bd79b7a7c9c23efd6fe563
TLSH
T16A41D559A6E91148B3B7AE1AAFF6A86E487F7D372F16C45D00010D4E0A62E44D861B37
MD5 SHA1 SHA512 TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 24ef26de48b55da09e43be100827657fbfd85604970dc7d477a421aa72e6228d
MD5 793c978b990843a3160fd6020e37939a
SHA1 7f39fb6a6e764cb113195e0700c7b31a6a5f3ed1
SHA512 139782f65ca74d2cd0a175279873e2a8a844bf6fa0dd0bbb8111c93e6a6717f2a799eb597a1dc36fccdf44264456ee2256a901689ca1eafb020acf6963304ec8
SSDEEP 96:H56JaLLoSJzLH9GQKEmwqEtHTX56JaDwGMHjInu56JlewMk1Hiz6JruEHBba6Jn9:Z6M8WzT6vInk6A165O6BIC
TLSH
T1153200486BEA1555F2F7DE72A6B32614EF3AF9065D185A0D018082090C32F15EE3DF7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 c02e5b006432a1bf6ea5dc5b196850b37371dad666c1978c91d2fba50d0c6359
MD5 07ab6e6b2d9de7713ef1386e9e3886dc
SHA1 ba8545afad4e8f3f1f61da1267b82a27af345f79
SHA512 b892e4e96bc8419776f741b09d394d48602597379074a2eaa87af645f46d5132021921e9ec6ca741949d99905e355ef0c31cf02bc9f2a07f81ed5bff9632bf1b
SSDEEP 96:Lk/9YJaDwGMHjIn/k/56JlewMk1H7k/z6JruEHByk/a6JnIuEHs:Q1YvInsh6AVL653i6BIC
TLSH
T15E022F48ABEA1651F2F7DD72A5B22710EF3AB9065D188E0E418481091C32F15EE3DF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1612-858-0x000001D100000000-0x000001D101000000-memory.dmp

Download