hxxp://bit[.]ly/notasmh

Analysis

user interaction
yes
max time kernel
1050s
max time network
1027s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://bit.ly/notasmh
Sample260804-thm1wshr5v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4272	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303330293741825"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{31F7C1EF-F425-49DE-99DF-B7F17A11F9BA}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 60 IoCs

pid	Process
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 768 wrote to memory of 4748	768	msedge.exe	85
PID 768 wrote to memory of 3584	768	msedge.exe	86
PID 768 wrote to memory of 4272	768	msedge.exe	87
PID 768 wrote to memory of 3584	768	msedge.exe	86
PID 768 wrote to memory of 3584	768	msedge.exe	86
PID 768 wrote to memory of 3736	768	msedge.exe	88
PID 768 wrote to memory of 3736	768	msedge.exe	88
PID 768 wrote to memory of 3800	768	msedge.exe	90
PID 768 wrote to memory of 3800	768	msedge.exe	90
PID 768 wrote to memory of 3800	768	msedge.exe	90
PID 768 wrote to memory of 3988	768	msedge.exe	91
PID 768 wrote to memory of 3988	768	msedge.exe	91
PID 768 wrote to memory of 3988	768	msedge.exe	91
PID 768 wrote to memory of 5088	768	msedge.exe	92
PID 768 wrote to memory of 4568	768	msedge.exe	93
PID 768 wrote to memory of 5088	768	msedge.exe	92
PID 768 wrote to memory of 5088	768	msedge.exe	92
PID 768 wrote to memory of 4568	768	msedge.exe	93
PID 768 wrote to memory of 4568	768	msedge.exe	93
PID 768 wrote to memory of 1752	768	msedge.exe	97
PID 768 wrote to memory of 1752	768	msedge.exe	97
PID 768 wrote to memory of 1752	768	msedge.exe	97
PID 768 wrote to memory of 1292	768	msedge.exe	98
PID 768 wrote to memory of 1292	768	msedge.exe	98
PID 768 wrote to memory of 1264	768	msedge.exe	99
PID 768 wrote to memory of 1264	768	msedge.exe	99
PID 768 wrote to memory of 3964	768	msedge.exe	101
PID 768 wrote to memory of 964	768	msedge.exe	113
PID 768 wrote to memory of 964	768	msedge.exe	113
PID 768 wrote to memory of 964	768	msedge.exe	113
PID 768 wrote to memory of 1056	768	msedge.exe	114
PID 768 wrote to memory of 1056	768	msedge.exe	114
PID 768 wrote to memory of 1056	768	msedge.exe	114
PID 768 wrote to memory of 540	768	msedge.exe	117
PID 768 wrote to memory of 1136	768	msedge.exe	118
PID 768 wrote to memory of 3244	768	msedge.exe	119
PID 768 wrote to memory of 4360	768	msedge.exe	121
PID 768 wrote to memory of 4360	768	msedge.exe	121
PID 768 wrote to memory of 4360	768	msedge.exe	121
PID 768 wrote to memory of 4204	768	msedge.exe	122
PID 768 wrote to memory of 4204	768	msedge.exe	122
PID 768 wrote to memory of 4568	768	msedge.exe	123
PID 768 wrote to memory of 4568	768	msedge.exe	123
PID 768 wrote to memory of 4076	768	msedge.exe	124
PID 768 wrote to memory of 4544	768	msedge.exe	125
PID 768 wrote to memory of 4544	768	msedge.exe	125
PID 768 wrote to memory of 972	768	msedge.exe	126
PID 768 wrote to memory of 972	768	msedge.exe	126
PID 768 wrote to memory of 1760	768	msedge.exe	127
PID 768 wrote to memory of 1760	768	msedge.exe	127
PID 768 wrote to memory of 5696	768	msedge.exe	128
PID 768 wrote to memory of 5696	768	msedge.exe	128
PID 768 wrote to memory of 5696	768	msedge.exe	128
PID 768 wrote to memory of 5812	768	msedge.exe	129
PID 768 wrote to memory of 5812	768	msedge.exe	129
PID 768 wrote to memory of 5812	768	msedge.exe	129
PID 768 wrote to memory of 5876	768	msedge.exe	130
PID 768 wrote to memory of 5876	768	msedge.exe	130
PID 768 wrote to memory of 5876	768	msedge.exe	130
PID 768 wrote to memory of 3268	768	msedge.exe	131
PID 768 wrote to memory of 3268	768	msedge.exe	131
PID 768 wrote to memory of 4928	768	msedge.exe	132
PID 768 wrote to memory of 4928	768	msedge.exe	132
PID 768 wrote to memory of 4928	768	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bit.ly/notasmh
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe6e2bc188,0x7ffe6e2bc194,0x7ffe6e2bc1a0
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,11481744639220605934,12803307839062914782,262144 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,8897849567267862167,163629099304881396,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,14696232120261444573,7261272755128011914,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,11689280027141596464,17954260654220437757,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,1211737675461324254,843263655137520877,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,6812294053242678391,2740999630789176746,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,18238161581918430850,5429410803373829002,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3624,i,17299379852330216577,7500370170030668268,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,12985550178970799345,8763612971591444833,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,8952031795883691491,3221622380681726997,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,12653896740557897206,3163589787863303278,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,12653896740557897206,3163589787863303278,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6172,i,15470234441603944113,11762233154310481710,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4276,i,13631850306049524473,7796121828023484733,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,4242693994294589784,5034561342573514083,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,15258647192897647894,7088553326991319932,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,5454798047649554886,9773526899359757461,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6356,i,12202889742450792571,4672876057726655297,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3016,i,15236930387915593687,15154495276897023262,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,4870646956166344698,10317724313506034256,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6800,i,2022624418645396526,12980219821134349058,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6880,i,7237322056458671294,10805538834188852157,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,1787825142713067203,6088675493965272399,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:8
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,3263409029584810948,12481006234402241326,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6548,i,6581069353042330064,12381793619813503385,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:2
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6576,i,6515174658238624584,2818125835694175504,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=4732,i,2990892709577824110,7876434636936625475,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,651327962526272138,15316958428102983706,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5568,i,11196984117406743171,1150137816076961574,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5444,i,16732157362306566964,9284063985203353643,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:2
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,6150772056060047341,11698975604660974762,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5332,i,12925932953010016295,7074233077657902210,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6680,i,7259303387676856544,3225303593563292216,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6768,i,8574772284941771947,5644051244210530276,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=5356,i,7812382349113601484,627833236517867412,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=4444,i,12706172357320936719,8447394477723341768,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7192,i,5329749834082428748,17308476402663429602,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7252,i,4212155773959893703,15340087329998149005,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7492,i,7367788423297179326,12052521143932201410,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7572,i,15633107509416666557,9404287591852824194,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7728,i,12880585360478546268,12769486572486462754,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7840 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7964,i,5099672636644612205,16493002111628416081,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8128,i,14001692788666543185,2268221569155213219,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8288,i,13413151817463355598,12969402180639891031,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8444,i,9588091927662875154,13465556265275566556,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8456 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8500,i,484837705811483481,12741844386772365539,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8608 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8764,i,12675117275448190647,13456590746268090196,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8772 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8928,i,5599358002017883637,14243915592481496061,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:1
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9044,i,15703537099252298456,7792730272026769832,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9088 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9252,i,11465724864288934699,8459361018755108493,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9248 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9404,i,17216018811503475719,4550636331813324649,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9416 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9552,i,970281937427263205,1939514607304373152,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9568 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9616,i,11319861060393854352,661264892288225031,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9604 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=10740,i,13661435609841757975,7953024872844808811,262144 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=10736 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10728,i,16092392914942338585,8364424640475430790,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=10752 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9212,i,13295386489370253346,945849663886849901,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9200 /prefetch:1
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=7488,i,14069857670065915317,10900061815432345313,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8000,i,3169626980697735947,14311248133085276025,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=10648 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=7728,i,5162910713055842044,13041606905149176944,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=7008,i,8135553969890582634,2255663023458927989,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=10472 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10548,i,8766725713292733259,3332227349216497880,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=11164 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=11188,i,5641053318424410808,17206533080248070998,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=11200 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=9748,i,17829218955307127293,13952558501392670899,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=11020 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=4596,i,5905909395458980626,10031164211659674259,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=10168,i,13960525751561178126,15560075066958168157,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=10192 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=6712,i,16128546748673169260,13776137266150432796,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=11368 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=7364,i,15474542880480144665,12782499207970758177,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=5312,i,6515604877710361552,15986616978688642902,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9056 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=8784,i,1621137528081936394,12749839666696461970,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7464 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=6608,i,9714241233846776998,7314887953645192783,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9712,i,6803135982293622861,8572834123245619017,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9700 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=3636,i,12055494048393071330,5505633914755230192,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=9632 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9352,i,1688853838582674823,15007899017706709479,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=5464,i,118301543369964241,15796392042961765410,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=9360,i,3050627959905821144,11968203152744882011,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8344 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=4632,i,6845368447482036124,4588907633690129641,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=7072,i,1071581965225508410,11180770056935419201,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=8368 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=5588,i,6268691544592728012,6351702254941103148,2097152 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=3960 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,2637885008254425984,11803799261215597904,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,17353304414100223927,7214597365912896281,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,18060909961228604370,6216856576289879745,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,1015257385763794033,11076365498991388708,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,16704700507145920691,7306908628420860479,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,11338033414122822472,8138547454217868275,524288 --field-trial-handle=2328,i,6885667089731169632,9767918832211968452,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:5308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

53377ae8-d688-4344-b3b8-df73adfd83ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\53377ae8-d688-4344-b3b8-df73adfd83ba.tmp
Size 32KB
SHA256 8d110ae0adae4614639baa44fe4fa23ec8ed036d79c8ec89692f3fbe87ce4dcd
MD5 f19bce7b55d476d15fbb06a71cdbd770
SHA1 258d563388902f9c7e6c69ba398938b8a9260dd4
SHA512 fee158077b6284fd2c42e4cc741ec8e3cba4b08369913a3be2a66870965198ad3bc85ec28be104a396f7a4d304e3ac37d38529ff66bab3b6a362af00f8bfc1cd
SSDEEP 768:g88W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPggY0G5LlWYSj8CroItlz:g88W7kf0Wvqidau1jaS65LA3j8ZPG
TLSH
T1EEE2FB3B684CCB7E4F844E5CEC266F976DD801CB66988D548BFA884C03CB2EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 c05eab715f92289255d3df26d6851260f8fe83c6e9dbb0573eaebd878d6ae7fc
MD5 4c01dc4ed1ce5f8aa26209634727a9f5
SHA1 7f7473d26909591a0212863fafa6b8a988e600a7
SHA512 68461cd2419cdfa3f4ad8d30b7b17b6a008effe26967df2abaccfca1d1531ced79d7e7023c975d2268d64c1297929eaeac931b17a92a77e70a838d5442146468
TLSH
T100E0209553C4C5F519099487A1C97335C1D0F34FDF4CC4F97214668934408119775CB8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 9975805eb53cb94c61cafce91f644d96fc1b6e8fa6dbe7a897d04579eb59f955
MD5 2ca0729c1d2cd956579cc0a19d3a4c08
SHA1 0a1c14c98c0596d480da8a94e98009de90659a04
SHA512 1b0745d93efb3a4009ed55541c54d21ad594a9d57d63e6499ca9cea3caf47eaeb2041ae3c212d7f14b3e426ddd5fea707617678ef6bcb5fcea008ea85ba823c3
TLSH
T1EAE0209407C4C3FD960664879168634CC1C0370F9FC4AA9557208948F001444A7C9D74
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e373ed9c202e6291b3686aefd77cba8e22f881c84a7d38ee1db76b7f854aeec6
MD5 8bcd451b0c73f8b0c9a7a32d245735b0
SHA1 30d09a8345915c38bd766728bd7bbefe9cc5450d
SHA512 3c7fdfc66c8a0861a207d925e876cafd9cc5ead083da08700395c54ed12f1a643965548c3e6b5f9e419361a2bbbcf43ad201af5057c61d10df189875596e7d87
TLSH
T177E026840ACAC2FE9619A987D174E30E92C0371EDFC8AD9A6B1496C53401940A6A2DBC
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
Size 39KB
SHA256 15aa84e0a850ae9167b380a8bab45cd0d9e63c2a38bf6c3934c9ecd65f9ee9b8
MD5 dcfc9a4ece98169072bbd76ce65cf0de
SHA1 4672c62fe7d68e91c51a23a89e29c42d28f81a8e
SHA512 6d964d35379e1b6bd204302b4e8130b1bdbeee37d659c5900e38b31bbd86a579ae13bec36f742811b07f16b5e2155c1dfa458c205dbc8d56bef9189f1431f990
SSDEEP 768:cGSIdc3+XQ7md79qZ4K1W7r67l7K0fUFa/M10EqhJq1UQ1/g0VRppO+nyj5abjoP:tSD3+XQ7mp9O6rmlWPD0Eim1/fVNOJ8Y
TLSH
T1EB03E1587725A8830DDC16CC1CE0EAA41B5DFB4A40AA93F452CE5290EA53B46ECD9F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 a9899ed0e439fe2224784585d3035adbe411521ce65d238b2908d4f358c73c70
MD5 6eae10822391467fc95572871dd507d6
SHA1 cd0ced545b4cd6fb0d998c9e4fc6e4ae587c6d6c
SHA512 b05da2941cf3a9274d94278bf844b8319a9b16581f248844f15241eae5d3c22c3d868c01321088cbd4b15dc3b9dc3661d4529ef07205e6d3271904e18ccc4fb2
SSDEEP 96:78cO5H8mGVCHQzyOfwJA11aBqPrc8VrPeQJXHDh:7R6c3cwdwJAysz/VhJXjh
TLSH
T127B12DF586C19491DBD9C370A2D24500F73773EAF40FBEB249426BF4A907769A6C8502
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 bbda1ba7d163a9c9775d02f1d155d6e2a4de613b9b9aec68a81b0928c9472d4c
MD5 9635d6923816fd84dbb1b59739e032f1
SHA1 0242092ff56de9fb3158b6d141daa9fb9167898b
SHA512 72db1c6011f8e6bd7b8c29d6d41ccfc788a1ebcdddbe1ae58d22efed628827a91ba5e0f448897b2c094cecd5eef85da7a8f381c7b5b90afccbf3962b84b3db2a
SSDEEP 96:0/HTFBDid21y/Xwrw68dOCZD0mF3cH+v3BqPRoFeM2Ke:mzFBDm2cXwsltgYWWsS72Ke
TLSH
T10FC11DF582C19C91DBE9C370A2F64500FB37B3DAF40F6EF249465BF4AA0B759A689101
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 4a288f30f4d451000a9de66845b493e3033c5eecfe8876e93780e10232524766
MD5 f624ca82760bf820c038094e1b42214a
SHA1 92634831b62eeecff0701a73d00543c1c8da7989
SHA512 4f6366a2a088ec32deea361c845eac2ed9f6c6f474fd2ef89184e6ed1b4ea266a36f157c82667dbf468ded1db140b8364813b0da48eba0966797c153e94a033f
SSDEEP 96:c8cO5H8mxVCHQzyOfwJA11aBqPrc8VrPeQJXHDL:cR6c8cwdwJAysz/VhJXjL
TLSH
T1A4A12DF5D6C19481DBD9C370A2D24500F73773EAF40FBEB249466BF4A907769A6C8502
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 93d73af29708b1e1ae684a6c9b845686d3ea360e7acba66acdfceeedec5749aa
MD5 e48a605fd2839167de3723bead8e4f93
SHA1 00abbee6e6486c8eeee0f85ca1f9f00fbd729ce1
SHA512 657484d54042d52df5964bacb62afdcd207e41de2da580268e1c98f9d6048bc89f1a2c1ea17c36ca158d1a9082729d42ef8f3576e25f44c381a4f773cc084aa7
SSDEEP 96:50UAS3VCHvzHOfw81AHBqPKhtVrURQJXHDg:WNacPAw8qsiLVBJXjg
TLSH
T19C910EF5D6D19490CFE9C370A1D24400F73772EAF90FBDB28954ABF45907BA5AAC8142
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58ad71.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ad71.TMP
Size 3KB
SHA256 d481647181dac4d8d36c1843a1c806452a7e4fc691f98b12c360f2202aa74e08
MD5 4a1ea92c5821994f85b5b140105be593
SHA1 b0c843bb574074ca64ae3b0e0f34d9480e560e08
SHA512 f6a3101a2393877ec693c46fa61dc37d1482bfc8b98f4be193a9e74bb55bf5f431321e253bf56cd09512ab889d315ea6ac2b13541799a36b272cf226b4806042
TLSH
T1DE71C7F5A6C10894DFCAD370E2D21100FB3B71E9F90F7ED28C941AF85A07319A9D9206
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\am\messages.json
Size 4KB
SHA256 6bc6e4db59b9b7c037e774567f2310bcfe56fa2bcc86c5fb4149c396e8b61fc6
MD5 e6f575db0ed7c84b66a90a483a4ccd2e
SHA1 21dbb9d4db382f694a06e78029b4dee37a426eae
SHA512 4d40e40682489c5378940292cbcede657987cd3e8de9f5b679ccc940db3c2e36b6174e6be46471239f9f42b9ede7c8b5b84d2341ab87f2a695bf3c444d11bf33
SSDEEP 96:cgA8G0BxXDoR0XSeVv8y/Z/72SES3LhgTGBfNozr0lrEI5geZJjJc:cgAGoRuBxVN7YcfNozQlrEI5C
TLSH
T10EA112352EEEF3134E8E0B52E4790D9B5508AD9659906D3CD24AA7FC1B2EF079CE9204
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ar\messages.json
Size 3KB
SHA256 b330d5b6cf00ee7432536b1c158918302b1113f610914f36eb7eb86f5d1b5410
MD5 6cbd327e7f3a704076160e8958acec5f
SHA1 6855213e0c561c34e60836205acc55d713ba6825
SHA512 f9ccf2dc9207288d15f8e03831048d2689c1b95b9fad70be1f1be0853c562cafb633f211fc68f7f7d6f5867d0002f3926ec416d469f9d91b760fda7c855b92d9
TLSH
T1377166F31A26C4724A89CB0ED0E631ACEE327E33A346FD21745749116787897E28D778
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\bg\messages.json
Size 5KB
SHA256 72b91a89cc7bd1dc7353bff23481f06db89b5becd30cc5ea5f2d27242e35e1fe
MD5 0c5f346348ad6a24a54e59e98892e9db
SHA1 2eb80ef13ef89e96278e5386b13c541117ef94db
SHA512 638a41d9ac5a8928dff237fdf308ca534ed2524015eb7eb4a528fff16cc427a5720b1f39d1ee2ed6a07fe86fedd8ba5886c6e7d37411c57c19f02ebf5b939809
SSDEEP 96:RqocAzzX1i03WCAz7V/QinfaMpVZHmK/VZrF1KxeckQjd1uhNK+OuW:wor3WCEV/QiVZT/VZreCyuW
TLSH
T152C102A14B8A74EA4201E59FC80C3E0A3DE751FE3FD7CA8216692C7D79F1074866D64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\bn\messages.json
Size 6KB
SHA256 436dff27f9f83d2093d277b59079fbe9f9121ef642224d6746c5ffac591a4dc5
MD5 bc3c5fe8d1b321af848cf0bd096e825b
SHA1 d2bfc398225f7d9d683e5c1d0f5eddf8f5d063a7
SHA512 dc539334e9b506a9b6448e59736dcbdcfd2c9d5a1c6169682df1e06608d9065dcf2a6e629dd75258f2cf5cc0aa77a351a24c89872e5f97d3a42d6684da38a625
SSDEEP 96:gik15xSYPiIJVsPtypqyrF63R5PiwAEc/abCJqNu0fmtslDpr4HiOfFtDrZtNEvU:41Oth2+WHNY+
TLSH
T17CD1D120CC6D80F6A8D1CDDA430C6330C917AE978762E748DD1B5249BD6DC7C899EDB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ca\messages.json
Size 5KB
SHA256 c5cc571ab387fe95ff00879e37645272f9b7ba9ffd9a7cd81f8a8755361b0b26
MD5 8c224a757380c21c76393e2d249363f8
SHA1 ade14b944757d619e0ff8811e2ba559c3f377796
SHA512 c499e651250727bf7a4ebb492feec5241e09002e9507f80a206ed276d5a015de4a58d6d8dbca1379208a113a7649c932ad4ad202d47a65e3afa6566a4d30a63e
SSDEEP 96:OZqu3tHF4NkBsia3g9rkGGQxdQWR7lWH4v9h4ueUEhuzSk7UOiQXws:OZqMxKkBsiVpkFQxKWR6s92huuinZXN
TLSH
T19AC18273DB80262145E72349EBCDD767E0C891407786A0C4E98C671F668CACC877BE91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\cs\messages.json
Size 5KB
SHA256 6d0ada995d17ba49d2fd4e563cc547e47a2b77f8581dd628bf291d616175ae5e
MD5 bfc25497a99eb4be5c2a64ff6f5b2f1a
SHA1 0ceb8d42984c001a1a69051e60bae72f142eed72
SHA512 a670475f1f792420a3b5cfa6dd49fa23f1d6ead77812329c3645755927bc87a72857a0ecca6672747c46948b05fb29eacf11cf7f0a8ef4cf8a40aab6e54f73d9
SSDEEP 96:F/yAglKGGk4hJFD00my+DOID+Kyg9MUBaZIK8JcpgsX2:F/qHVMF006aa3PPaZI9lK2
TLSH
T1A9C1955BC9F27425D848018573FF17D07DAD03340A19FDE2BC9B5E2418AB269AFE4C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\da\messages.json
Size 4KB
SHA256 f7bc77f003b5a8aa6f7560a7dcab244e051aa7ac4e746be033feda1e53290538
MD5 07ac0fbf8af4237f14f775fd33ea549e
SHA1 30a71da25349a2bdafb4447ae3a110e46808a6e3
SHA512 951f88df8467bb3b4202ddd287d4e41256347f17589e5f1d719e06e8a39073351f6ab4381eb45cc649c8975503b0fadd576fe93018681903cd665e82d75afe0b
SSDEEP 96:GhTstt6ojblvpHUKsmFfoZzKJK6sWwMB1WC0Afp/3xnT47FCn7vs:G1q6Sblvp0bmFfo9Kzc21WpAfp/ZT47z
TLSH
T1BAB1D51294137331CF794753FA3B087AB7BE853EC66019AC6E81D22D05CBC587A3D48A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\de\messages.json
Size 21KB
SHA256 5f680023028c7eda9ec4b4b4b2d34bde02889509922d50a94aec1ca9926ed0b9
MD5 5234bf1f6796101187f9a20ee5ca76b0
SHA1 61863d4ac0be12db9f6f176375c91ee14a86dbfc
SHA512 b677adbaedd43d9589c92ccbfa018d82a6b683765f8b7492fe352f9a6d9b116d915765417678c11504ef916f8d61fed96c4a4b3e68d8ffa3c3427087708da576
SSDEEP 384:EY+Bp0zQnl9dK7C8gWof8yF9yj4mgSo2hpRW:EfmQnl9dK7C8gWof8Y9yj4tSBhpRW
TLSH
T1E1A2A529D0E22DBF46BB132235A8B751F69053BA0101A88F7A3CC15D8FB7D534186F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\el\messages.json
Size 8KB
SHA256 fd237bf3cf2a288b7a387c4db2896641cb84f09e280b8f6715aa149702f7e702
MD5 20d9748b10b2e750f00e19d1324343e8
SHA1 c099e5f81e9b4167993f8eaaf2f4eed6ae992e01
SHA512 e4efd5ec2446ec618dedef855ce15d76b75ce4deb6613c5e43f541aa8a4ab8e5192d12c97077c672ecabb7ffb14b8b45c96ddb752ed9b9bb78b3d17f8fdd9994
SSDEEP 96:TIha8XjoCSpl0rttgWxjX+YVPTaauoylWhmsOqhacb13fpwkT/lcaAzvhroTzT33:j8spqflVUWh7OJOFGkxAzvhSCDA
TLSH
T1DD0217DFB1142EEE8089550B4198A03D77CB6D6CEB09C6D8A639CB247DFD4B19A11D0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\en\messages.json
Size 19KB
SHA256 25ab75359a56563ad2e6323f35536ad9a934ec9e90a12d1a90c7baf6c99cafc6
MD5 722c703235d1af209b6135d08bf1b9c6
SHA1 2417652226ae5eb77a252197fe1e9368c34f7832
SHA512 85992401f3dde7ae2b28d0f39c1558b14c99e915b6138bc65784550f485193916b03af90e5ec8ed5c2ef182983b04527958a01c27787f120c6efc0e6c21274da
SSDEEP 384:CpvvwlCExDwyXkmeMeGmk/amJfXiJ/2x1bGZgzHw1S:CpvwxxDveM1mkCmJfGOQWzQ1S
TLSH
T1E9926819D5A02E7F06F7122278ED37A1F69052BA0201A88F7E7C814C8FB6D5752A3F5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\es\messages.json
Size 21KB
SHA256 27c23002eb228a454d964f2b029d9d89b3734d79f3e2203434e43caca88c5b6a
MD5 d1c85f53bad4173c8e9cb5a0116ff2d3
SHA1 444d8acc6939555ec1c722ad32ed92c1b27fb6da
SHA512 fd6c95db44ff9c9a753a2a9a51013d63e82846654ff9abd974716d5d55c053f50edb87d86117f9e61f6488416daef669974731eca95e8f6f3e9db2e2a87b770b
SSDEEP 384:VioZm2cMDIfiBKG5eHadimAi2sq1jEAFMQ:ViwcMDIKBKGOadLAi2z1yQ
TLSH
T106A27619D4E01E6F06F7122674E9BB52F69052BA2101E99F7E3C824D8FB2D4B8193F5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\es_419\messages.json
Size 5KB
SHA256 066a3c3a1568365db33c2f8426f3212a72eca234fc7d38784efcc56b41b327e1
MD5 e917450745f60ccdd418d3026ddb96b1
SHA1 0d725c68afe0ed2c20d9141c3048265ebe76af1f
SHA512 0156ca4c69781edc49429359f1f907477a76c7ced0c2ce165801704cb3f5a5625809b69042cc00e8bda64ed84452727126e0ccbef65e68eeb7b255a242f6cc07
SSDEEP 96:0eqglio4FQfpUF4l3o4G68uDPCMMroT+yGmMa1heLeBN:0e7xIQDX8iP5MUQbIwLeBN
TLSH
T19EB15363A7C009D152D30348D2C9DB23ECC5D051B540D5FAF95CD72A51C9F0CE66BEA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\et\messages.json
Size 4KB
SHA256 c4ecd681bb93926eeeb18cd99608c51e4bf3e1307a0329c103ba75a854770211
MD5 174ed70c604c5796d8b4e296c3f52c86
SHA1 cbdb12edbe1db3aaa162486df9602df8e963a041
SHA512 f877412e0851e407cdf0e4707da0dfa085e4fbf20ed9180cc19f1340a6660b9ed213f553aeffa8f07c1c6ed2f57753d404cb9e6d224c8d8363c69d7740d64be1
SSDEEP 96:JTaESYKoCvxpbGL0MX6gpTzM2TesTaDwUJJarsGs2:4cC7GQMtzM2TerDwYtGs2
TLSH
T1A0A1C72352A77106832C05F7973B9E708EADC7FA90050CCA9C6F075918EED4C6569BB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\fa\messages.json
Size 7KB
SHA256 744424b59d68b534df8ba9f932e5db883bddaf651496c72cc355b9f400a6d625
MD5 5fb79f3d2a87ed1617b7308767bc7225
SHA1 eeba5fc192311b9cdf05abcc8d20cd07e34c880b
SHA512 6b71f8ef1507a5bbb06f8b45e68f1b17e3ce16fdd90f691f2307490fbe8a53fad407f6514b185377c6dae61ef19977aaa6cf6a8d9ca930e47cebbc3f41ef6870
SSDEEP 192:mU2TmKUMJHDsBWVlWPK50LNB6vHhfoGwiMnY+yPOG:mpTmF+HYI7WPK5CNuRXwiyY+yPOG
TLSH
T111F167865BAD5AB2635AC81300D73834C7B3EE12E148FE80ECA107655DE4617DBDE93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\fi\messages.json
Size 5KB
SHA256 e0e996de1e812afbe0ccce4a97bc610f25d2b6824db503ac29b71a590c455e83
MD5 6a78e94f269486eec229effbb889f818
SHA1 9c9fc278ae4f612e3156e8860cfd0d43be802051
SHA512 f562205d64facbefbbd85ae5dfb29911fb67f3a5f5df908abaf400ec3f4040399ece36dd2e03db32c3b5c0029af5addd43575312609b310e343fc115907a7193
SSDEEP 96:PCYVuS1n1itHfkgHkYlOI9wfqPbUl0ozQqPu51caVoIPsW03Ni/mWE2:f1it3Zl9boCmu51cauIPsWL/p
TLSH
T1CFB1C890C1A1F127B2A4170E896D143A76C8E72514104E46FF2FDFFA0FA8999B97253A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\fil\messages.json
Size 5KB
SHA256 92df670e7d95aa4f15fb171a12b68059ede31d99fd38d960fb9d545d50a23298
MD5 d258c6b4f0e332c4cc204361e1fd3b7e
SHA1 5eb9a2d349314112bf81ce39b78dc36dabd805f8
SHA512 d40c10b84112bb7622ec99e49cf6392b7b6b2f9e3108e809466845ad677e2285ff500e5e08209b1b4c569270ba6cf79806e0f463c7349441e50287bdccde619b
SSDEEP 96:NYqRWPwm7tAdIL0cnWJ2CDJMNjd5c0Uz/haRpKPug97tx5EEWAMglBXc7KtR:Ksswm0FcWJ9DJ4k5/GpKX9HWAM6R
TLSH
T133C14F09A3840388FBC405D22354982F17D938793B852E6E5F7F1AD717BFAD4E2B446A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\fr\messages.json
Size 22KB
SHA256 e87ebe5eccf7e1f43111fe8068b3a05bc7d2c95c0ca7b91c2330f3609cc1c473
MD5 a45416c31f17ae9269bd92b554abf995
SHA1 967be5a9b9eaf006842bde25cf300354f1159116
SHA512 b56a7a00c01d7cf6f4e1a1c7331c438fa6492780905ac9cd090018cbe58a23b86219ce3ee32f9754d8c5bb248f72830b0850c3877f5b50aa47266b1d70f12461
SSDEEP 384:wPUK6j7iWZ6YWvZbO/kwSWrZrDImEVuQqYMSq6kqq:wP4iWYYuyXrZQmss6Lq
TLSH
T1AFA29E1DE4E02E7F06F7126275AA7791F66042B91101E98B7E7C814D8FB2C974283F5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\gu\messages.json
Size 11KB
SHA256 a1a282d77494059aadcc6d2946c352d7f26ec5601dd00834897e6dcb85363f9b
MD5 1bbdc19558aa5a0af91efd1e991a3daf
SHA1 be78236ce27105a0b6f46c120ab2103cd169ada1
SHA512 21eca0a102f1446b2cd303c9c252afe956297b003226370b491cee5080bf832ffb4892e8b490bc4af0ed304bebb6ee6bf0b94a4413d9d90c956207220566d83d
SSDEEP 192:xTm/jLSuSCz8t1syja9HMUIcDwTnd3m0pbbQjm1FV/XCguuiiq4Wp6Jjkx8lmPGW:xTm/jLSuSCz8t1syja9HMUIcDwTnd3Vm
TLSH
T11D32D2D1C3B8F07169CA9E7E419E5120C6695353D52E230052DEDF888811DDA3EFFAAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\he\messages.json
Size 4KB
SHA256 bf7b0f11e2798d26f514509234d39f7171c8f5732fc20aaa19cf04848f8adb5d
MD5 a1ba0eab4d3b9b64d6a1756df071abe5
SHA1 d615741579b65d0b71ebe0f08482e60777b8855e
SHA512 354ad6b5b6e6ee090a0536f70a049b69cd8eab8829ccc8560305de5cc292e5d03c25b33c741a01b4cc05a8eaaf3a6624f654693e23b2679b9f5f05b78a3e0971
SSDEEP 96:NjI1aleWeKsOI4q+AZB3J6UjIcBH2GKOETjIc3LIIrTIN0w7zDTYzqbAOeMkl:cagzX3JjWqG/r47zw2o/l
TLSH
T1F5912DC4A3D5162582326AD3CE9AFA2CDFA24BB12C92B445CB18125C7D778F8FD17474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\hi\messages.json
Size 28KB
SHA256 c7fc16d1ade6a7aba89f650726e1890e858b25c1c506b9b0907d4e227e83196c
MD5 784f3712830df17ba4008a93df2e9cf4
SHA1 e55a2d0688bbb152d16de6f19db6ba3fe08f26d6
SHA512 09cb3a2796a458834fa8932bd4e59d89e97eb9765a5ad4651d84dfbaa3185e7782481d868459daba45e6cb94332f87133238f16f1d00680aae456cb661b68d8d
SSDEEP 384:v6onNqCCDHPrnLNmiC8Coz00CdDqh+24ATCLDd65HshoaErF4YisQuz9WBT5VXB7:sPZUcX5OdB3
TLSH
T158D2660CD3B8BB7F09FD385A71982E32D5A422B41364954B7D7CB28ECFB1C620196B59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\hr\messages.json
Size 5KB
SHA256 4d34a22a31fb7a2388312c5e2fe22ce38837e424847560c40f68789daf564268
MD5 7ced7f542d6069eb5ba3a78932f6b850
SHA1 1ad7316ac32e08e270b1df920773e42211b9010e
SHA512 5988b909cfef1586d52f2ea15fef3eb9449e869c3b96007893c987812c6c3430dd0bb3ee764930031fe312a3972551919f37005f723d945b42eeecaef425c950
SSDEEP 96:4gQtOuA8AwaieImYGybTvNHC/hv48lFjeza0VhAn8aoX54QgC1Q8WkyI5F:rQ4piPnTMZwQNezarn8aoX5WyQ8WkZF
TLSH
T1A6C1B9FCB062ED4948260A41DBEE0359BEFE0DD4851846F8FEAB816B510345C61FD9C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\hu\messages.json
Size 5KB
SHA256 725017a92a41a427eb78c38c359f8429919cf3c95b86fe4a80d194454d3abb7c
MD5 749c3ab5d0969d53087c0763ad8c8ed1
SHA1 bb250dcf6f6520a4036113d31f04e64be5e191e3
SHA512 8a8027e0cdba466f7a18fac5e97e4f9d54446f7f7632cdc36249645436672ae20fb770c6491f8cf878599f7339203f081fab4a42543bcabd6dffb160fb7ae17f
SSDEEP 96:JFhPTcmso6Uq8e9NrTvMTyWlMKwdThuQN+DbRkVvavXMuNmd5HhMAQfRSBHZiDd/:LaaEbvny9w6mYRkovcuN0BLQpSfglrJb
TLSH
T18FC1B577831F48E4AE390B537C385E54A5892572B9110BB629CBC02F68926CE7F73C64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\id\messages.json
Size 5KB
SHA256 b96d8abfad5360e3e89187edd2972fee560c4ea6357bda4468c3d063a544bdfa
MD5 5b8887025f8535d7011cf7710d7a15d1
SHA1 055596cef6e8c339dd4cc3ced3cae1027af1d38f
SHA512 fac6aa9274b5d53e29f0f38fafdf8520bb58fa6fd25f55234142ebbf35db301652fa3e056e770e818f78dffbc7977ac60202bdc6723063068e93ec2a64de2520
SSDEEP 96:+J5CMnp06bPwvm1R+oZgfiYFPBInofmpD5vUPWL/PYiuXwHlQPfbHVGr:+Jcc06z/9aP+z/+6ube
TLSH
T12EB132A69EDC300C5F1603D1B9DE971238EE57329B405BADDF384FF41A663858B0CA61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\it\messages.json
Size 21KB
SHA256 4aa8de5c9d1daa8a583258599fb9116db3de2f0444e87c6489368d2e930042ec
MD5 71832a49e2d1f5b60eb3e1e0fc9adbb7
SHA1 931f06cfd659a931c01637680f8edebe90e0b2d8
SHA512 87c4aacce1cb36a1491d7399eb3624935543f3bb10d6903ddc3fc87a5a5fea5abb23ba99f476d89a6eb2ed86886ab1d1d26ab80196c24ad048aefc576b73ec45
SSDEEP 192:d9sp8vmWK0+bhXF1bwB3XsVOH25fa6cR0s8zsQAsHlaFbCJthMN/x:jspSwVAwNcR0s8zsQAWlaF2JtiN/x
TLSH
T116A2A629D4E12E7F0AF7022275B87751F2A056BA1500A88FBE7C824C8FB6C0761D6F5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ja\messages.json
Size 24KB
SHA256 7a7140dc063666934974512898219372fd7b32d333e78d4e69c05fd8d40d6a84
MD5 dd4e9a6abfa7dab3b02625b265a3d1c7
SHA1 0233fb946adf15bf84e9842aaa03b5181c861887
SHA512 59410a240992b970504094377a5c1676e091448987b3d067bda28cd1bbe55fcfb2229db7b3ef52c3c1da820e91995f60cbe79db3e244c4749b89e7ae0dde916c
SSDEEP 192:CDQmS00Bv1XZ7Y/54bJbNajy68d/rtdmBNCuRKOY8Uy5bRCvcsgLl28WoYyh:42pa/wCjy6MiR7Y8UytLx2Ltyh
TLSH
T1D2B2022CD2D02D3F4A76567238A93381F1445DAAD556B96B393DC01D8FB298ED082FB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\kn\messages.json
Size 11KB
SHA256 6bafd6d631b9db51368b1499b667aff7d5f3203e533a3a1955c0e957796a7f9d
MD5 4076b62e06e8c853416d8e40e5b6d303
SHA1 b76ae7b7e4b47ca2c9a5077a12f40a4cbd864782
SHA512 7aad905a8d17665bc5930afc81ca56d8a0c6ae68ddef484bf48647dc10f81ca523d10f55dd402e0e951fa14acdd1d34148dcdc699c9768e9143b27aaaed1b339
SSDEEP 192:ZXlxZ8Xm1/pI+kWSq0ixXB3X5lqt2to+a8WaxiiaiIK0i3wLZ7UTVvXyRJgXjksD:ZR8kRIJWSq0axPa+a8W+TaiIK0i3wtCj
TLSH
T14D3258581C7AAD306FEA006A24ECA03DDFF16FA2DCA947D2F49CD7447C51C6A91CA48D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ko\messages.json
Size 22KB
SHA256 38f0b774bdeb74c7ebfdec964d1a26ae0c8a21240e48e832360461fc72721721
MD5 3701f423e97ee71ce898c04db7b52824
SHA1 501dfea7d951eee59217e50537e496a6f02d9da5
SHA512 b7616b1c67ea9d26e29e5b7ddea79e0149f623dd3edc8606897aa3c1fc3496ebd0c2f8304391a854c70d73ff6e14dd80f1d6fa06fab5cddf72cb0568f3afbb5c
SSDEEP 384:jtfOA660TRC/t2tvygVwlGllBMgQWKnqJfGlIcD+cCMW/k:jdhb0TRC/t2tvygVwlGllpQWKnqpoIGp
TLSH
T11CA29B58E4E62E6F16F7566279E87740E28052B70312988E7E3C8A4CCF76C434487F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\lt\messages.json
Size 4KB
SHA256 b7e83c34fd88197a2d48d1a99d5f3bdd5020b4d61cfbe082d223828d0083d538
MD5 be5eee50c5d60914d0bb243a3f6c916f
SHA1 759382b765d2a0f656301158df219afbee219376
SHA512 297acbae744f43241614ebccc6a750aaaadc5d31284d4eb15b4afc92dc75b81dea40aef11e9339363d30a2510e7c41d460259df5f9e4b8fd53a5a3ca94f2201a
SSDEEP 96:gnVXYR38eHQBjsqiwzWy15Uxb/W6AfVlzyFVdA2lba7:g25wiqFzIR/PIVlzyFVdbbG
TLSH
T1ADA184602E92AFAA59382AC654DC8870EDC8532487C97CD4FC6EE7D28953F0376D4F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\lv\messages.json
Size 3KB
SHA256 4979670a566ed27caf8e1385bf9874644591a89b98d69361269b94abdff2e4ef
MD5 103ad087bd75d3270bf041cd73a476a1
SHA1 5d830a0dcc93338423776cddbcfbb0915dabc5ba
SHA512 82ba177ca331d1ced7808ab6ab8aeb57ca50f5fce4d09b3b26e50ecd33fe14ff0afea3c7f56d0c6983ca1e6d4aee32bb2eb4de9bcef1816f6728c14d74c883cf
TLSH
T1388197948FC0C5EB4D6909CB0327C5336EED8B46A846A091FFADED3D795B111A0B18A2
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ml\messages.json
Size 8KB
SHA256 4404e78cc4404462337657ded11a8a395e308ea8e495da5ed0173bdd745d14df
MD5 49a45831dca71b2bcc5ef8caf9b476b5
SHA1 0850435889f5fa9dad5bd72806d50d22214f64fb
SHA512 5529d4e27dba264d0976631161c48b13fe7ff89761446b56d8bd25a410c3585b8306574be305e5cde67789cef31994af61a09b09c2fa133089ef09527a3c07d3
SSDEEP 192:m0aPBir208yEA57Y8I84b6z4iJ2Ovufg6:naPBbPA569eJufg6
TLSH
T18702885BA4358C7F4FD002157A9F1FABD96B9FD040AB228B5979F1728C29FAD0C99034
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\mr\messages.json
Size 10KB
SHA256 4fa22cb7cd7351253412de98297dd7ae93ade5b3eabab652ae556ee0da25e05a
MD5 5a7742b8bb05f81ab261272bb05184d3
SHA1 90d0c071076df9a0d2c1acf15fcf069eb84a6dea
SHA512 77bb41500f61da8c6572166b1eaeb6743c9189382920c630d8513e2fa4e5a55af628e2193cb115fcb1db3552cd565fffd12845e7060e8041fad1b6bab10bc23e
SSDEEP 192:foIusogmCSEDSmDP2yr5N8ApU9aa3QSNdC3+KYUKl4ljG73w6b4M:QIZSMHb/5+AbAQeHKYUK6lSTwM
TLSH
T16F225E0DFBBAF3244CEC788D39584D37DDED2171C3A9929B09E4B3A78C84CB001596A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ms\messages.json
Size 5KB
SHA256 39162b6122e9ecc84bf0e233057690a8f85f3f3a96c2487c4f919db856b4781a
MD5 020d9cdd457a0edbe25501c8d45a3fa6
SHA1 7377037afb5c67321a5405714e765c05264e4bbd
SHA512 3ff72b8887c68522a92c1bc06558167a501b4af376a39891d0697d367ae3628b68561bc4b0c3c01e90e86aa5c78b40c2ca893641548fb3c410a85cd3d84bcc0e
SSDEEP 96:kaCMGFXTnZzX1cZFx/Kfw8l8tIsNp7mfYAqPv+fFInZYGqqCHHJP5j:INFXDVe+I8lHsKTvVHh7j
TLSH
T137B111964EED202C6E2C03D560ED4A323CEE3330A7409FF6DE744FB54B676C56648A69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\nl\messages.json
Size 5KB
SHA256 374992c7a64ce05532b7a9e85fbf0c6a1f9e9c8214fdf2759db5c3000a725528
MD5 2ba9e74aa009294314c37928d6b775cd
SHA1 d0d9776b22f5bb08048156d0c2781f095a926f05
SHA512 c9c0582c7c21e9bebfa0fe3f793848936448d1d4de5e3d192410a60f18617074f5733280169e0145fa7b86586cb9d63ca0b1db2d5f75fa4269f51a40385695af
SSDEEP 96:PKK8AvJ9CbjAnK7vkYNJXgC4Fpe4jz3EbRZ6dLvB7FLIad6A+O3QKPu7:C8R6j3vkkJX6u8EbRiLvNFLIad6HO3Qv
TLSH
T185B1C603819E763C89606A83B62D19B7DF64C33C9389A5FEABCAC4B8195BF5C510C9C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\no\messages.json
Size 4KB
SHA256 b845492c8deaae1289360922476393399c4a2528d2530bcfce928d6383478f62
MD5 03f109cc491f56f7d8e254d758b3994f
SHA1 de5a780c6e42c978bb954278b924d57ccdafa18a
SHA512 eedefdbef43dfb1667528849d330a412273fa7f472244fe6d17698d1c1db8fb84feb7ba454a520549254610478618dbd1b12bb1b8690ed1fcfe857e96a9f5751
SSDEEP 96:fJV73OUb8tXXsWFiBdRheAU+RDNyTzkpcjhtW9wbpIvC8vnU533oNJ/m5f:fJB3OU7BZXZP6wpuW2bH8vs3Ww1
TLSH
T1B4B1C727C553BA16F76A0387BC7E049AAB7E8139CD6449D96D8CC51E0CCBD90AE3D1C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\pl\messages.json
Size 5KB
SHA256 adc83c2d37bb5c3934ea945fd5f02c09392650b67ff014fe405bcc9121ef6c1d
MD5 0d285c1b5085fecd4dc3edd55a51bb4b
SHA1 030edd602ee44b5d7cd23c20fe5fe12e05a512a4
SHA512 6bf00f8c6ded8b04c8bb6feab63a8aab22862ecd00e5225e343d791983a58c20e20791df70d3c22075836eeae976bf3e4c5f1804d198fac76765796e29ab1147
SSDEEP 96:N1ryWzO1+E/2fmUfldEL+EsoDGFxEQdRqPQo4aTJ153BskD/FexUCakX4jvNKhmV:Nhyj/MmylCLUoDvZImTvsk7FPu4jVKhE
TLSH
T14DC1B6DE40E11A49EC240CC6F0FA46354CCDA63E51CCF6D6EE1E8034D0AA58DE52DAE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\pt_BR\messages.json
Size 5KB
SHA256 17cc7650d43a03eef0e25f22d9490248cb0c8e855e37daf832e2d91945e5260a
MD5 86f8b74a2fdb38937c8df607b081a540
SHA1 883fa5ae927a6b64f447cc280d32e1bdbe1e5f0f
SHA512 eba5592de1e9e551a23f6aaef684aa3c827845aba53279c7725762b0cee779384e53b96ffe0c45b6a2fa30bc5aa969e66f492c15af636b1e9afe4604c8ae96b5
SSDEEP 96:sO6kvpVkkFTBo3AKl03ROMnf+nEGg4rhC9cFDcW6LrcN6NFh8dWhuJeRoFbVc:jlT23XqR3GnrhacFD/PgXh8dWhnqTc
TLSH
T1B8B174B1A6D2135A923703C2E66D9783E9C5D142B400F9CAF6ED4B0D51CEF88E627F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\pt_PT\messages.json
Size 21KB
SHA256 fe08e42a821bacc6208e94318edb4646b743c7d1b2a3945ce32406293f31fcbe
MD5 81bd2a4452dfbf412f32ded7d4d1de76
SHA1 22f1de4379fe948a7789f8ec309004406db9ffdc
SHA512 98381aa1932f30f3c39cd24657adaa9706270bc5479b1f7615ff9e337ac7f1173125e65a3ea8f842e3aeb0bd7c24efeb47ade4b40486980497813c8a8c3eca46
SSDEEP 384:rmnm0m1w6eqo1SH7HqW5TJBamG213h+2Fll5M+ejThVcl6lY7i:rmBmteqsSH7Ht5TJBa3213hnLl5MZjTz
TLSH
T18DA25258D0A12E6F06B7136275AD7752F6C052BA1102EC8F7E7C824C8FB6D839282F5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ro\messages.json
Size 5KB
SHA256 ca10f64a8a07b6d465cb8c212d5905c50a405328f43c92dde8b863182a8603d7
MD5 bd0420b51acb66e7e3f3bca2d58800ce
SHA1 8d9cf73f75f5b9bc3a42b69fc22f71d5ee7ba11e
SHA512 85fad0b179837bf478ea9c9d00ca80f69c7e82b85b077e632ef79eeefad1a82e7ac003640785a4efaedbdc2a094096ad46461fe15a2cc472a6ea11d1c7923499
SSDEEP 96:1aAN2shVhqQFkFczhHElYK4luzxYYLyfHgBKkqKFqn77V27plkA7lMY17Ydqm:1a697FHElYefy/+KkqAY77SkA7iY17Y5
TLSH
T12AC1833A6ED534429E320153FB7E6457BB47419DBB80C589EB8EC86A41C14CF4B3AEC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ru\messages.json
Size 28KB
SHA256 8a645e0de3fb03164d94228640d40605f1112268f7f1d3c109d4d04f150e0880
MD5 b865e0c6fc5699587117377615e6dc66
SHA1 86749065485c55f13f1f54e91260cee00008d9f9
SHA512 51ad9755c0f51b51f1ec53da6afefbd5d6062abdfd4b91dccf1be3435631f642d48a593f9fe3ce0355cc5e1c3a8a490feb75643d995f409616bbf85c71ea17a4
SSDEEP 192:4gKG3xKZjEl94CVMas4Jp95C9K2IkELrWXJzFlwgzf/oQumyA1zkrY+VFj5fpbbv:4gjejKHafNHlt8AwBN9j6zxZrBvbfGN
TLSH
T1D8D2DE24D19A68BF0277A117F8583B05F49201FE3B55A65B3A3C782E7FF68128169B0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\sk\messages.json
Size 5KB
SHA256 2904b140e64d312c8a5beb5bf9be92b255dc608536710a3618507fc363aa54ae
MD5 af6809bb44c57953f4352506b043feae
SHA1 474e93f63c38f26413147a4071aec1707124d7dd
SHA512 967f846fc94df042741929c5bfb163f7eda438d37adbc8150ad0459df577ca4617f86907e89ff32284c5f2afb9ec536ba69820f306d4d7aa29cce6bf9ce63d9c
SSDEEP 96:kGpiTSNKc8srCvykl6l72eSO6aH6ohXZVXdtsRjZwIrU4Bt:FiTSkJC7klMSEJkj+pot
TLSH
T1E0C1956FCCE61443CA9C028673FEA6907E9D0B75466865E1FD1F086B61C34D8EBB8C49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\sl\messages.json
Size 5KB
SHA256 535fe14fa25cbb3a563faa5d7541f18c2591127a67dbda00e41e17efb8f311a4
MD5 881cf57cd2d07c6dee6fff5986d640af
SHA1 8dc16b3804397f415172783f116558db29be81e9
SHA512 d13c032abe211117692c9d139afdfcfe73b5b672350a679d85f50a7e0dbbb182babb94f5193bab784e60b032651463c850e46cc6555f0cfa359ec039cec6a13e
SSDEEP 96:s2NQLtbY+FxkHgjSe8qWMRb4ar2MBTgq2gyq4j6kfkh5jfmy6uRBI1z:s2NQLtbTxkHgecWmb4BMB8q+B6Ekh57U
TLSH
T1DEB15574C3A7945E4CB45A912FDA1726BFCC0E88840AC5A5FD8F42B471128ECA7BDD2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\sr\messages.json
Size 4KB
SHA256 546e20f2100eef0e4b2e00cb83d8d769d3eabc248eb88b698a27bdbf5c079f5a
MD5 35acf7782dd5e07f9d0a8b06cd56bc4c
SHA1 9e9e4dfc0f487b3018dac1c0fd7cf60d12ac8828
SHA512 e5f77a2231d5762e5b961fdf03af966cead5a09ace87eb7d1628c67087b99c8ed87bac339bb470231aa6004def6f96de742bae34e767ec986da784d6719510ab
SSDEEP 96:ogEgB/18w46Vo5By1uJPqqWk0TtRTVqm1cqlU5Q8n8UOOBS3I5F:ogEgs9eVq0T/V9xm5Dn8UxF
TLSH
T15F91B7A8B072ED8E8C370F41EE9E1254AEFD1E95C91086E8FE5F8499400350D75FD98A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\sv\messages.json
Size 4KB
SHA256 9a15afe317f4b62a6604adcf4023f0ae9af979d2f8428a89706876e0da3baa50
MD5 31c060cc45e517285211305b0234d2f8
SHA1 be6467aa7e53719c8f52d155ef8db995a7716d3c
SHA512 280bf54dac45111ec04faaea308bf28b42599b9c4af8b547ac9fac18b980e2f3f1d4d4ab4981f61e4d142d77d26e6a84830971009de6d6acb598594f1bea391f
SSDEEP 96:4VpKRRDT86bt+Z/EpYCaHrpGkHHyS3Ucv8+a32vsiVrxP0PODETOu3a6vJ:4r8R/dWEpBCrpTJvv8+W2UU6PODYLvJ
TLSH
T193A166138102E438F67706561BED094A8BFD80389BB4A8DCAD99850D885B6D8D8FB74B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\sw\messages.json
Size 4KB
SHA256 26b20ec542c75beb274b106885621dd51dc7141ad2b86754cdc02205c3578546
MD5 9a639759623b63cb29b71e3627a96574
SHA1 88b53664859cfe094cf61373c2aa8d8a7363cbc8
SHA512 8d9d9dc4623493ec484ebfeb120b947d18c25296adf811ba481201e4e9f06c9d983c47a9db29c250b2e38e98f3df472fba56556f87c7ab982ca557839ab6ef37
SSDEEP 96:6TVsV38Vp8tXSIWOKijFQVVQJiR9d4EydSHhzKrQ8v2rW533oYNJ/oOf:6TCV3ciwVQJiBRydSZK08vz3D6u
TLSH
T19D91D827C653BA19E3691782BC7D058A6B7E0238CD5408E92ECCC51E0DC7994EA385C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\ta\messages.json
Size 9KB
SHA256 a193b5028d89b2784f0ad1a47f69f47088f0160f9ad7916719b9471205110492
MD5 2ef0dbc1991bfb48d26ae9dd92d14c58
SHA1 dd7bcca08d40f853523959caf596c34826908290
SHA512 0525616546af72dfb3da868cd458cc2dbdb49811982144cb59e6edf21ebcf82ec3594a4c053797f75d52c854beb734f92377a2d08fcc08b1c044c84abae70cab
SSDEEP 192:KkmWWHVnxI/jrpCg4xlnfzOeIvhUVNlgGV+JzU:Y
TLSH
T10B12F6CE823DEE890E93298F131D43A81394B555C06AE3A27DB52E1198ECC5EDF345BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\te\messages.json
Size 6KB
SHA256 45ebbf5b913d601faf0e68eac005b97ec5671226c6265c22e352128ccd051b80
MD5 32a95b5cac618e4fbacfdddbda7dea0e
SHA1 89ac9f525fc4b055540a6dbc650222a5bf683aed
SHA512 c592cccd4370c92d6204b496bb8b4ced36b3d2d65ff8f9e936e40da7c3d3767c4b6db2cbb458411aec1494534065e328dd5abe1ed90d80d9d7738f800001b160
SSDEEP 192:GeG9kzXI5gREL5lcUvQ1xyCpJEm1rlkN3Ntd:T0
TLSH
T14CE11BCE913DEE890E97298F131D03645394B255C07AE3A2BDB52E1198DCC6ADF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\th\messages.json
Size 6KB
SHA256 03d043976af8868aabdac85929c6a9e6a3db465238edafd852b39c2cb682a879
MD5 0512e0f19edfd85312a0d2e61bde6b71
SHA1 21d4cc6d335d368742aa60ada5048043e74420a3
SHA512 d1f189818d82df64d520dfe05dd671cad0008f0f90023e3a03438ccdb8209efa695f9c03becd7bcd453e8b7bc69dfe696e385b8839ffd88f49f488da933da2d5
SSDEEP 192:6yQceORYTvhc66QL5enGXeRZe3Zd+vwHdOz7R5H+lI9D6YoE5qtWr4Lal/58fFjo:6yQceORkvh0QL5enGXeRZeJd+vqO/R5h
TLSH
T10ED1297371469DB474882A9B2A3E368D6668EFA53F72F8E045C4212EB3F07159411EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\tr\messages.json
Size 4KB
SHA256 90d993cf875932758ed25f54e10c7ffe4f77fc7ee3ebbaa438d88fa0f99e7f08
MD5 f7acca6aba167754c2d6bbddef4f56cf
SHA1 85e9dfc523ecbd466b2e64d0d878afdc7ea620c8
SHA512 fd5f7bb5d5fb54b4afc4ccb955ccaa453b127448ef557d4e868e12fc0743cd25968e0d034dafa182ad72d667c00ecb6ceb968fc22111da8e5018e464f6e9428d
SSDEEP 96:lhYV2EP3mW1l5XfcbCEKxNtzaGxpixZiTs5TYk1utSqcZ56ouns3ZhJ:nMh31nlK2xHmGfixZYc18ZerTZhJ
TLSH
T16CA1764079CA760DDAAD039FC0BE9936F5EF0B626531F185ED5FC5283299E470198607
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\uk\messages.json
Size 7KB
SHA256 be7603e82884bde0f89897dbde1a1d2eda9c96aaf8c46b1c6351e6365e0db34f
MD5 8b24a85e281bf7309509ec6ad590680e
SHA1 5cf310a625121929c5519694fdedbb6c4b9d871c
SHA512 1fcb535ae24e1d3ceac46107270009ff1a551fed75ee3ec540bcf35333087fd3d7827fd1a6dc9509375f212e5694621857cfbc42e2a4a1b9c7c4023a5331d2b5
SSDEEP 192:1tfaoFGUv2kN7wrPVRpx7FCAmf5n/VNHcSNs:1ty+vv2Ew77kAmftN2
TLSH
T13FF189B19A9E68EF0121A56BE8483F4C79E740FE37A6831325A83DBF74F2014893C755
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\vi\messages.json
Size 23KB
SHA256 4625e900aaf45d081b22135113fdbf08813e8eb8217dd7b73a02b36058d4b783
MD5 c5def09330bf71e9660efaaccf2d3314
SHA1 fde27671605115582fa376f119f482836a0703ca
SHA512 847115ece34c8788a0844f2bdb05e030ece21bde94f000a2d2bbf2fcb9b179adf69292986c3854cfba73af614e78e28f26f67c6d7d0892accb9971abd328c9f0
SSDEEP 384:GHsaRuBkdvoWcyDjbSsaQObYWnRLUUIBftAvAXg2XlArRLviIf0:U2BkDcKjxWYQLUUug2GK
TLSH
T13DB2CB05C4A03D2F42FA422AB5EC3706EBD562BE5200ED8B7ABC856D8F72C575582F4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\zh_CN\messages.json
Size 19KB
SHA256 1b0a521ff99450c93e861e9434316b6b1d1de580a3326992d4e06bd03e4e96dd
MD5 bfd1dc492ff3977695d8b4362a825dac
SHA1 8774230b9910a1e74cc86894bebcb7a09af16460
SHA512 200bb70cab37ba13174f303eb854c8fe0d35e1a243f681ce3fd13b846a718944af63189bfb6203ffbd16f2652015d30b423728fb259377bde2c96e215655c971
SSDEEP 384:0bSzeuG0kGt8w5pIzkecmbppisKCaIuYDF:9zXG0kzwUvHp4RC1X
TLSH
T118928519D1A06EBF06BB12A236BD3345F29152BA5015E98F3E3CC18C8FB2C474186F9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_locales\zh_TW\messages.json
Size 18KB
SHA256 aca5e7c54f48ec7b96729b950129a1d0803b24fe4297da3c72fc83dda75e33eb
MD5 d12de633cdc95e62aa4f7556c2b5017d
SHA1 7ceba6d970da65bf749f0b0f1a29a9e7323cb6c9
SHA512 7d3065b762b0ee9518b7613af1688bfd809ea07c70870bc279c5d275823c6c14e95d3d46d67817a16256acaf84b969fcd65e330c2eff579614cde3a912d90933
SSDEEP 192:48J21ss+wFM64IuJE12stC+pX/xlzNy0L7Fv4dsjBRpFyeiOH:VJVTbsTpXl5iOH
TLSH
T17C828519D0A02EBF0AB7126679AD3351F29092BE1515AC9F3E7C814C8FB6C5B41C2F9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\_metadata\verified_contents.json
Size 9KB
SHA256 bdcc986dd640a4937e8c25a359048e0c14d84432d0cadc97ebcc42f3db44d370
MD5 8834e33e5d873a52efe8395d10e88981
SHA1 819081e35ef5acf463e90c30a332341f78ddcb46
SHA512 a54d23accb429bffaede32039ce09d4f82b84b85ebd5339bdc32ab2f87469a1f57f90edca634462d51d648dff4027b16c0c2ad46c56d3506b8bf45f308c3b25c
SSDEEP 192:RVx++0cFFxWLqID7+NM3ktNSWlerErsUcWsw2Nb8VZDkgfJN9CrrGWtLqVC8tUbX:hUcFTWLl+w6IUcyq83CJtLqybX
TLSH
T1361295A8CC5DA44CFC5ABB654B6976769B58C4CEA24D2F1E03D24C5438FAF0888A34DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

constants-5ba9e570.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\assets\constants-5ba9e570.js
Size 697B
SHA256 e6b5fa9d5382c87b3f39f7e44204a2ea10404600f31bd2be7dd670d7248a9a09
MD5 adc96904cee57ad734320892e9acf819
SHA1 b55305aeb0ac94544bab762db7e4e16a27a7b678
SHA512 b8949c2c67595871d6ac57e399ac86b74c035f355c07d2a896dea1cf6a56a022059dba49a67bf725e2efd796645796fd857c9542ca2b0fb16d205a36a09d50e2
TLSH
T17601C05E38CC2C7A579164416CD902A27C449B3561B2F2EAFA193868C791CC18778025
MD5 SHA1 SHA512 TLSH

Submit Download

icons.svg

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\assets\icons.svg
Size 5KB
SHA256 d2cefdbac29b289a57155d3233adc9f8c7a7a39454ccd3311cdd4b53825eec56
MD5 0fdc7da90f400eb3f7ff263dc4294d35
SHA1 e1db67b762e6f9ed6e6ce2a138fc837c64e2144d
SHA512 b17bff8bf1c05c1a9d9506f04e1938f2384bcf052eaf6ef59787d58ecaad2545e37939c3716c60c0e7867072659c739f3680355a72240054577df8805902419a
SSDEEP 96:Tl20ez6irHQItFHwJkLWJnU6rkeAII1qMPD+qVcx/qtReK:Tl2gkS5U63dIMMPd8SWK
TLSH
T134C1425D97AC2D2CE42343A6CF6AB5727D2E22D332498238B41D16365F1A94CEC737E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sidebar-47bdabb6.css

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\assets\sidebar-47bdabb6.css
Size 2KB
SHA256 47bdabb6dfcaa2b2cfa7395b81245dd3f8a9adbbfdb8c8736c0d083e8cc291ec
MD5 4cd6fbda82752950ab519b2e212f5140
SHA1 39dfbea1916560c2cd3f51194ec5ce59b47bf79e
SHA512 729be777e8fde65e7a45cafaf19d390c51a187edd1bc63bf9bfce71c6baaa93e3e6fc1f7931316925dac02ec5c682cb9400a5d4680350d8121ade5d98103138c
TLSH
T1BE51115AC274E23FFD379D3E87ACC90E2212EC11CE626F89B70A522540CB6F50671994
MD5 SHA1 SHA512 TLSH

Submit Download

favicon.svg

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\icons\favicon.svg
Size 1KB
SHA256 d6df9f2fa4fd61fc12bbf19c737dad3b5a89ff013e84e1191f633e1f316a0764
MD5 666a7d75f4340509d002a64368ade06f
SHA1 d70ef3f28cd6793714a63c5d0e658453ac5fed51
SHA512 cabce81da648c10942263ce3d635bfeef5154fa556be0727d9539d3fab875c8a8d02e4a98d090fa4f2fe8719e4af78c187de751c5690b12e05666f940bacf67e
TLSH
T1C7319B6C984194FCC5EC47840E7D9AC4873CE74F11223956BA6D6A920F16F18DBFBA18
MD5 SHA1 SHA512 TLSH

Submit Download

icon-128.png

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\icons\icon-128.png
Size 17KB
SHA256 1b450cd154a930f324f533215a8f947d230e043146d51400863570e97f84b7d7
MD5 a4d27daf132a926ddd7283ae4c3b4c3b
SHA1 7b2cb5253a3f750bb978ba383ddf645e97f85b4e
SHA512 eb62fde9e6a8063363c725a86bb0cb05defd91666f339258acca27c5cfab1efb9053cfbb4d7f4a02f2823630eee798e80ffa2acf82a318971788b09ec8455191
SSDEEP 384:cvVixBeq7qLdx6ZCvMSRk1BITyaABCJvSizPC:cNuQ6qLusMSRkU7JvSiG
TLSH
T1F082D0A139991EE1B4B90CB1B0FB60CC243FE76D4C579AB82ADCFB027A61D3316558C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon-16.png

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\icons\icon-16.png
Size 1KB
SHA256 395c8ae77183970550896559549c475653fdd1326436d6ee7caa6454a209f835
MD5 03ad9a628ed074b727b6d69e359f5b51
SHA1 b0bf83a54ab931b8d14bab0fb148a71294d05568
SHA512 9179c22e05dca8c36d732ef157007b5bc9ce7a29f8a59d0da59a3e54d6b1bf795ef02d7e685e22de407996ea8c7abf8cc1d2a07494ca84a6afffadeedb8ce93d
TLSH
T1EA11D8D3A14B1EB1D4E05137B7354461C1137B49502A27F2F98CAE654896C8CCB697C2
MD5 SHA1 SHA512 TLSH

Submit Download

icon-32.png

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\icons\icon-32.png
Size 2KB
SHA256 302753cf26aa48db906320c4ed8411ac883ffcfd12046c1415a6dc91f0c7d8ab
MD5 5cde3a09f5bd941a9b3e022a8d0083f6
SHA1 d243f3d652af622faa2a5391a04ca23ea00c3920
SHA512 bb32f48cb72aeb49588f1ae030f18728652b982954f1dada618ea65960efaae2c8c0f9184d05b49d8ea5ad35623dbd97f5fe89f5efc5edcebfcea7d977fb459c
TLSH
T10A514B9BC235B5F6E5674B39073E9714E3269092089C50ACC01F7B03F25474390DD6D7
MD5 SHA1 SHA512 TLSH

Submit Download

icon-48.png

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\icons\icon-48.png
Size 4KB
SHA256 a723568435d2508a9ba1ae9e4b99a9df6943354ec352ee9e3f6cd07efacb45c0
MD5 bc924084cfff3541f4c4cf4161bd6abd
SHA1 f921e27685d9a98447b2540e78b5ee267ccfca48
SHA512 f38aaefb5b58c2435bfbea27d5875994695ad620686c60bb5619af1d8507ae476c6ae4589a5ba1b8866de1f1cf00e29d48f67420b896747c2d2182ebca1c0e40
SSDEEP 96:cdj/B/aq3+eaRsRRiFqLft2N5xS9vqzACQcQi/V4dOVt/:cdd/aFebDiFqLoiZ9WlJ
TLSH
T1D9A19E86C07A13BBF44F35F3A7D0A1D60696717B078E32A13A37370275DA51D20B4287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lazyload.html

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\lazyload.html
Size 375B
SHA256 e283d2db2d02eba316b8d40cd5835b197338dbc2b889602960d1f0a601246a6a
MD5 c7cd493c33012c3541c1afc038374ec3
SHA1 d54ff84904065076f5a2aebd1fdeda10c1e34a02
SHA512 f8e34e023acc8c48b5cbddc6d30b736535c51630e602654bca95d43701e13d37d47991a4f950186f9d4eb504be4d929906061f87e481afc2007334ce27b4a95c
TLSH
T17DE0205694D3CC0F21704775BD56F21C4216D1C697445E1176DE74737F517418EE3688
MD5 SHA1 SHA512 TLSH

Submit Download

lazyload.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\lazyload.js
Size 357B
SHA256 3e5971db227c63f0323cdebf9ad048b90dfcc1ca934bcd7799c7799633302c5b
MD5 dd71a53fb10e176a0ef6a7d93d8c5937
SHA1 166a6b8345259bf2c55da3465fb441aa604d63c2
SHA512 5b18b1d6e339fdcdff8f2cfdbdc7d94567b6c8e5d89859d4c7d112b2ce0fcbfd531ac9c3c4deb5c7994a11c19a1f92741816bdcd98abb90aae177d4b8ccbd19e
TLSH
T112E0C0D137061A7307E283827A9C32B12B9121C43083A458603CBCC3FC05C4B75B7C7A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\manifest.json
Size 1KB
SHA256 c925ec094299c4fd155d508cb9dab93f0e97fee4deb1751f2aee76914db98143
MD5 7e45008ea3be75779365807f78f3340e
SHA1 20c33ab09c8eddd266a4125a36c5fae2b9f8a315
SHA512 44913d2a61d56667648974a2620160a2574f646619f8fdb38920f590837b5793fbeeef727a8ad972af42406d59a1898bf8d2bd6a104417f56f19511f1bb1beaa
TLSH
T18231CD2AC8A189BF51B85BBC9D660613F665032F2640B45EBD7DA098CF362628581F1D
MD5 SHA1 SHA512 TLSH

Submit Download

sidebar.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir768_830956197\CRX_INSTALL\sidebar.js
Size 225KB
SHA256 45298bf278a5000746ffd8311e9b098cbbed84fcd401e8f9e195a60881118871
MD5 40c0cbc34f618a1e8030bdac8d8c4061
SHA1 2e13cc913d24f206f70739ec14a07a1ac2a2ae93
SHA512 34f5286e03764f90118081e6a3929d951ecf35302ddc6326b3ed0df9a4dfce408e20ff7ac37086a7e73015fff3c30a35d481fe233b368b07b47074aaf20adfbe
SSDEEP 3072:waXfVMw5JxAkkr6IYr4wc3tnEen5oI8ITz9HF6rF6xJg1H8GH+VZ+NHj:waPVMw5Jxb45XNF6rAxO1H8GH+VZ+Jj
TLSH
T1C3342A89B2F715B26853917C2BBB47427336E003D40AC93D7FED12D98F46A889663778
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 23KB
SHA256 353a52789b649ebe124a90acfa0008fff126dd407ea5df8f9c1dbc48604f7898
MD5 095f4b108d3f7c8b0d8f1a5a2000657d
SHA1 a5cd86083490cc3f21b9f45e68a185f229f0be7b
SHA512 f459e1cf6f45f96dc8a7beae2a09cdb0930cf4839f0bc68e1fec231cd7fd9ffe714955879008dfbd39bc64a23bf8a9a5d8744c1ab132250449e12b8ad0143969
SSDEEP 384:DWdSytQjl5MPWO3jqwORwnTtO+W5w3sqogkstVaep6x/JNJve7JNGUV6dHCZqkZz:WgvHLdNowILTOS
TLSH
T137B2BBF7C7E8862DC81192F4EB15AE1FCE2A0518432C3C2AC9D5AE5BE3E2471E15574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 cf8aa654fdbcd5e1b4d8b85682457c8feed3efe3e15009c06216e0e00c47d773
MD5 f8d605d04d110641aeaa1eeff0de02d1
SHA1 7021b89b1c1126a539ae4d470e4d02fe4df31067
SHA512 b1bb7555372bde71787644832a3198e00a9f5b1167804ae19f401c0b121350309a29ac293ab3c080cd78896c9c63a627d3826738e924afdd355cdf527b95974c
SSDEEP 384:DWSytQjl5MPWO3jqwORwnTtX+WprCs6xoVsfNte16LJJyJSes2a5jCdKIa0ZqkZ0:soAILEe7iUhTBZ
TLSH
T1D892A8F793F4822DC91192F4EB05AE1FCE2A0528432C3C6AC9D4AE5BE3E2471E15575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 69322de5528e7dc36ce08affd368a2d5631e3a0703bec76950b77945dd72ab8e
MD5 839685fe7c294785517fbc971c180ff9
SHA1 053a4fe37a5214c22f1c8bfed0693d916181c292
SHA512 a5e858c95d3a705651421f937cd65f428e138ddc601ec4b0021988fe0814eb251013ce2815a388a4bdf8bb5906d723307cf83feadc846521ae33f2f73bc0861b
SSDEEP 384:DGLM5swvE2zSsA5pOiAnfs3RZqKNQNxA1GIGGNLsaYN+ooWL1WO8i7lm7e5vsJhj:oJV
TLSH
T165528BF7D7D9852DC84156F49B15AF1FCE2E0A18432C3C2AC8D4AE5BD3E2431E21965E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 52d1862209e7d6d2977ace9276fc5a5f4bfa57e09809908730bce6a36b32edf2
MD5 9b832127d3787b92862e11209f05faa0
SHA1 6067153c9657231d6e28f15de42a053034cfa231
SHA512 4be8834228a05cba094c2b811c7c6791c4a472265c555af735b25b7bfb60397805bcaa8b9c49ece49ca7804cf70b7656a87b967233c2791455f14d097bbc3572
SSDEEP 192:sxZpRVyM/jK1Ml8Mk4/fSscX/NoVFFIdpItzIoHW6+WN9aiQu7TAxYzO3j5Ig59L:sxZpjM4/fSscX/NoVUOHbDYxxrL
TLSH
T1D6720A526634597BCCDBD20DF980BF97E6F5246292944D58AAFCED1C04E2BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dd747d2722e47b556675fdc30046fe0c201209b20a71e63f895b890c41276c40
MD5 ade928c391ef6161b962b6ced038212e
SHA1 66b5bc2c222f59f62ae4f9687f94e66f9a4e7b1a
SHA512 0bb433194ffb7b21da0ea6bb77fc39bfab71bcfa71a5b52a0921602ca780ae9920df0ee25cbd9d04b45ba857a52c4e8de97f8b2a9873780418b67e6eb87b4598
SSDEEP 192:sxZeRVyM/jK1Ml8Mk4/fSsr65FIdp7kHW6+WNf7B/Yz/Uj5IgrJ:sxZeRM4/fSsr6goHbd/N9
TLSH
T18842F912AA34A977CCDBD209FA857F93D6F9147292940D48A9FCD91C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f1a358018db9360f1b6668c464a209096e592c6f1ff8c0a4f5085ce9bbcf2cc9
MD5 3d8fbf767700287177d1a7e6775a705c
SHA1 a3059f6729b8d6adad86480e803757171dac6832
SHA512 1406f1710b845cd4bc90d7d73d184d5a72d417ccffc690bc4349e05e7ea8d1bdda4a6cfd4e3d5873b8ead0cac8b88e229d7ede85ca2b7b65cb877a91f956eb89
SSDEEP 192:sxZIRVyM/jK1Ml8Mk4/fSscXPFIdpCtzQHW6+WNpnu7I/XYzkUj5Ig59BJ:sxZIjM4/fSscXeZHbM8X+rL
TLSH
T17452F9526A345977CCDFD209F980BF93E6F5546292944E58AAFCDE1C00E2BDD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 232faeaba0ccaeee90d79bafa35c02449f7d9610f8d4edc89b501bdaafb50bad
MD5 4d2c44ce1b785779e1a2580a2b34d477
SHA1 24fd0a5a1cfdb2c95c36830b2f5b7dfe3d1acead
SHA512 37becc0c76d5ff8f7d213791dc95c2dc2f7c26b00e43c70016b73a63832f43154c467067ac8a1f0d4b64d2bd9439b61daf7b54253748e4185d47280985c1f003
SSDEEP 192:sxZHRVyM/jK1Ml8Mk4/fSscX/NoVFFIdpCtzIoHW6+WN9aiQu7I/XYzkUj5Ig59L:sxZHjM4/fSscX/NoVUcHbD8X+rL
TLSH
T12D620A526A345D7BCCDBD209F940BF97E6F5646291844D58AAFCED1C04E2BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 52b6589ad876045faa21010d59eace7fa895231a93ee532fcce691211920f357
MD5 c7b34674cf766b6cfae66cbcb5c2a8df
SHA1 78982a3c3ad05e88e5cbe40116ba278042c5d5cc
SHA512 1cb04908be9956a51f9e672ce9edda1b676bdea72c1ca1fa3815dc8569f6d241a3749365dfc155004ec1702c20b9bd59677af387e874092156b86f377f8dd8bf
SSDEEP 192:sxZpRVyM/jK1Ml8UQ7k4/fSscX/NoV7FIdpItzIoHW6+WN9aiQu7TAxYzO3j5Ig3:sxZpjqQ4/fSscX/NoVyOHbDYxxrL
TLSH
T12D720A526A345977CCDBD20DF980BF97E6F5646292944D48AAFCED1C04E2BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 1KB
SHA256 910ac71d69a54005ee74a0a51ae446f0b2f30e8591fcbdc487be09a0e452608d
MD5 1cdec446f93340b84a8712955466bc2a
SHA1 fa836d0e3b0621de5b4497a2549d74617f528075
SHA512 f6164a787e3a95a4a210e8d3ca6e069536a369f3e683adafc2ea77ae3c797127443167c9d2f57a015924445cf4b94d9f8bd08c6661402b8e9ea0db578d36353e
TLSH
T15A31F0488E90CD9FE99881B225B7B5A4737186ED5321B3A3583C32312D167592A9B1DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cde52.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe5cde52.TMP
Size 1KB
SHA256 af32ebf7f2c967dcc4be02f77495c9d675b2a23f6970a80eaeacd9150b4a7f5e
MD5 f9feee3a88978b3762d2e6e50da307ce
SHA1 58c167f55dd1459f4e79ae1e97d7fce03d6828dd
SHA512 8d60df62058a60ef3fa2f126f8d806c4cbd7184667ed51c5ee47605c2b70a4bb74fc46ecc3a706b40acc1a29a7e0e1e4be2b57e1a218dc2f29503fa0a11b7496
TLSH
T1FE31354D4A918E0FF88441771963B4B8733548005321B3D3547C22355D21B8E1A4F0CD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 8580becbe56acab544eacc277513adc602a9b6f130e8703f0b95374d48d3c45c
MD5 e1a92f44447f2b34f3740399a2d5a8ad
SHA1 02193e516f554326587a2b2fa482ee82954cb838
SHA512 14305b6ac0b33b58a021ada0abb9c9d4d2de8e93b3e72c6374125f9ada81722358d33dde00296949f971065b614bed10536ad39ab7b3fa7d74dab004f74333e5
TLSH
T190E068BB2EFB1920AC6F87C138B154A08185391CC504FC0E3027A28730F2751240AC21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 c1cc22ff16a3e69c9545f1ef14586da15ee5643d908fec31aa705e67622bf69b
MD5 e5c4dea408537baedfd9ce069c7f9374
SHA1 cabe3985b19ee25295addf5d0d845ae294c21aaa
SHA512 747dd2d6ffbdcfcfa7a80ddd8826387e3fd2c1610256af8eae06d1d5f0fefa31b965f70481e2aec1cd5cb06914e6f95a9a2f017f1e1d6f34f1f12d240becb395
TLSH
T16BB022830800C083C02023F8C8B200E8332C0CCC0B0A332380BC00308C28302C00A30B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5934a3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5934a3.TMP
Size 72B
SHA256 f12bd29b6f2874918178c14ada90bfcbcbe1784c98014a9f204bb27f245a1481
MD5 4169f4da5803a31ecee9119a53be0dd9
SHA1 3dc5a290f52dc3368e861ae5882d1aa91249bbee
SHA512 96b6cfce970bae4a2bf68cb5b702aa95a7b61553a50517bfcce922cbe0f40796b29e2fe55d613ca7ceace0401fb2e565f5fcd581c911c232616724cbe0810ad0
TLSH
T18BA0026152740082D40003F494D2474536208C5102075213C4EA01B49F64270451601C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 dcd69d7bdd9bf8512c5a1aaf49258da6cb5843da976a9ada56ec96946a9a89d2
MD5 34e1b22cfe58769f0a71164d25632691
SHA1 a2c165b546eafee018230c356ad2180e08ae6f23
SHA512 5dbbb173ead02007680bce677a45cadc5dca833bd68eafcad1d397fe23200459244e3f08021f779676125e12a9b49e8205d167dea7eaf44bfd75033374eb14b4
TLSH
T1ADB022EC0C330C0BE00A03B0F8ECA88C30A28C300303A22202F00308C0A03AC2320C02
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e7d30f1c65622049ed03e0cfc2d98d158728c9ce6052633e66d3bd4d3a818eea
MD5 63d24ee576825fe9752b19eca2b06c1a
SHA1 25ddf4fae582bce97da7dd7ecd4e5bd13a9768cb
SHA512 1322bca66cd893af8aeaf4ba5f8903deae95697adc8fc84d367d4609986181981e1cf600e96bb90fbf103888f2f42ad189a1a7c4ff75fdead30a823dc4c67667
SSDEEP 96:KIbCKcXfGKAIG8pUtJvPv693CJrZ6KDPr76/JhqT9AwKZWt:s69f0K
TLSH
T190914102713F46413C7E285C93A59A364F8275A33818A4BF7BB848625D6AE610DFFCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64df9834-8f21-4b2a-ab35-278be61c1527.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\64df9834-8f21-4b2a-ab35-278be61c1527.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 30d1643537d76fbf1952dbf38ef1577a68101053f5517050d5212e052c0b1a94
MD5 91327281a2092df40b2abb07462ec080
SHA1 b1727ca2b52ae24dcca5fc9516510e1fad8481ee
SHA512 a43598c96067378456ee64231bd59d7d9e1718d563f9bd3e91112c0d2bb8823787697786bd7300446c7b99a0724a9bedb769f66d42e8f60f4da67f670c74334a
SSDEEP 384:EZcIhsNpEsoRbBgdxd5ml+2PRkWcBeRs9JKgqijUAtq:ihGcubgleWcTjKgqmUAY
TLSH
T133928D305875AD379DBAB641F5C637174FF98027E6C0AF94E1ECBF0C019A69C230A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f38eb0f43cb5d511e637831309bb3fe6b9ed490cdd625afd7f7468fafc3bfabb
MD5 da9dfda70799be2718ff99d4285f1122
SHA1 3bfae63c7e5cce3c0a6e0bd84caa06a6fbca69a5
SHA512 83c9f76b4ff34faaffca8dafd4c0c6dd0b5d810268032e1119d5e6b79cb19d575e3a8e51e03c16f9138642a396c2a1977b7a902052b6568e009b0bb26dfcdce5
SSDEEP 192:MONC64BAQmiUyP1CW5GBPKZX+FdGumWaDhTU6:MONC6eAskW+d5mzRU6
TLSH
T18002FB34AC787C7B9EB2BE45F58637175FD8102BE6842F44EAE82B1C009764C234782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ba6bef5b9fa07d5487a997eb091476725ca30b59fcd9e2cb1a06aef47bb6f8ca
MD5 b988d814a9436480616c3194121c2648
SHA1 6333616f85aa2614981c5968120f6e6d90adca16
SHA512 a3f1393e49a2a169e73d601ce503fb56b444b6fed8f3ced4b9a6cc58d490f11914bf03199e833816c69ac79c06540343e1752d170a382c54b0509fafdfc2e0a1
SSDEEP 384:xZcIysNpNsoRb8dG2xd5ml+2PRkWcBeRs9JKgqijUAtq:ZyjcKGGgleWcTjKgqmUAY
TLSH
T149928E305875A9379DBAB641F5C637174FF99027E6C09F94E1ECBF0C019A69C230A91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 2b2cc5f6d058fe326555381407b0582e54df8233fa79007934786672a481bf1e
MD5 b9609ba78d3358424839b7832f65487b
SHA1 5bc3899c5bd716f4b6660be9047b54f76db549e8
SHA512 f06f01f95fee18ced94bf88611a89ecf125c6ca6d668dfb9d24952a99e9755eca19187e2eed0c5448346af3689d6ceac7eaf112db2f80e14578a997f231df3c6
SSDEEP 384:xZcI4sNpNsoRbTURxd5ml+2PRkWcBeRs9JKgqijUAtq:Z4jcE/gleWcTjKgqmUAY
TLSH
T182928E305875A93B9DBAB641F5C637174FF98027E6C49F94E1ECBF0C019A69C230A91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dbfbe6800547d69b6bb5a6bea0ae971e5b3a37d561151cab2df13cfa65062466
MD5 736f149b038b66a5f6ef95edd650b34a
SHA1 dcf106e561e056d622ce4dabf88866f0b15f83b3
SHA512 4fd613d36824af894f2d919cde719ca30eafe0da4c81fa0bcaaaa6a272cc9b856d589fc2cc7b50a07f442354aa18c3508a43d5650652f2fdb9abf7c9ae923d48
SSDEEP 192:nRONs64B/1QmiUyCC/5GBPKZX+FdGumHqK+2PRkJWw7q7U6:RONs6eL8/+d5ml+2PRktcU6
TLSH
T1FC122B35AC74AC2B5DA2B541F48736075FE5412BEAC56F54E6EC3B1C01EF66C230A81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 203409bf4f01aed2bc1efc8a6d1d004cc6ffaf66e62964c3dad0dadd676034bc
MD5 e7356975d860028cdd2f7418891be045
SHA1 0e7b7b05f545e811b4ead3a8dddb123b44665e30
SHA512 ff6c8d9038a15911ba763e3cb5cb0a1bd3d0fd07525c005c9fe8ce528c8a58830555c11aa6b0ccefef33142f21f0c9f761dbd151185d0cc8dfea14bf3b040e9f
SSDEEP 384:DiFiZcIRKWsNL8TUNTUlIlNsoRbTZRxd5ml+2PRkvcBeRs9JKgqijUAtq:uFQRXqwg4cJ/glevcTjKgqmUAY
TLSH
T112D23BF148D7953AD9AE6743E77D2E034EBDC027B5809A54B3D86A0CCC461BFD30A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f43d84621e9e2c1ff8a3a31c1874cf476f819ef046db415a60c2ac65c1512715
MD5 1f8272f79b199a8ea3d1d274fa8efec1
SHA1 3c54e11db2dad88d96a8f593880fa252b8b8b992
SHA512 fe5439e96dc2a8731a75cde7ceb4a6791eba2928236d088076caae0d48b6a62dca9bb5ceefbf6d65d6d8d301e79b67ff5d699435b6b6678f927bad69fffcc12e
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 893f805266c34258da6da74c8d68b752cd75077df8d9904a42bc5990f8dfaa0c
MD5 ed39b1312d783ea3942f67a180f44167
SHA1 6db13f5feda853df29139e037580ef7c6f7d9eb1
SHA512 1ee3f7bd539f354022fd75966d3a0de7f76217064ba075101bbff5d540fa3e4e5ca996d942366e40cc87addcdfa7dac9cde4b964ccee24381f7aee1d25119d9f
TLSH
T1AFE00146E304818EE878633410871F342EF78130433212964E30056D3E637212F213C1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58dbc5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58dbc5.TMP
Size 392B
SHA256 182c785f0c98695d2fd8ca8162962de4f52feb492325f18059a439a34c1d69d7
MD5 2bf198d9793ac53fb62271f9416600c1
SHA1 d60a2736740e09541087807df777b35287be9489
SHA512 a920e4d7ceacabe44d170921dbb17e7fe6e1fd8f901a1d6c1e3725c934da42ca2b2e8e12b85951edfa967860a18e2002e1b44272c8a45f51dff11858a4228a02
MD5 SHA1 SHA512

Submit Download

759ecde6-d3c8-4ad0-8e51-299295de093d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\759ecde6-d3c8-4ad0-8e51-299295de093d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9f603b1b1bbb07ee9aa7e82bb25d170b58748c8a9d6662b210cb83675389d6e5
MD5 5bed28aeed245ece27028db1c9588698
SHA1 2a18279ccbe5df48ab1cda10e4bfb59ccc6e1a6c
SHA512 d579bce0bbfa40e19e67b1e868eaee827673d964c7e105a16964df93921c263b98348b8df7f040c494da78a57ca98885c0a60a23f92d0f0e9907b342d5adc964
TLSH
T1BF411A9DA6F91248B3B76F1BABF6A46D487BBC372E16D49D00110E4F0626B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir768_347996649\CRX_INSTALL\background.js
Size 2KB
SHA256 052e91e82b2d51c0e2fbe1e8ea45f525e2cb2fcb5731669eb87dbb33b9128dd6
MD5 73eb36dc2acd7b085454c656ec9b664c
SHA1 c9afa871074e4e62bae9b4232a28042d59fc9f98
SHA512 fdccdecbdd70e5167bb63af55cc470d8f2bd1dc439a3e610e655c703d6500cd049dc501faae28ead64cc47abc3a23e4efded7cbc723cd6989388671f9ed1041d
TLSH
T12351955D2BB8447E3A952F227C3521C2F72D92383810E0433A2DDCAA4E863C55C9FBD2
MD5 SHA1 SHA512 TLSH

Submit Download

sidebar.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir768_347996649\CRX_INSTALL\sidebar.html
Size 7KB
SHA256 c7f6c9708d0a8b202667264f03f787565e0e7046768f0a5d6526721f4de7e606
MD5 5ee9deb196610c63a3dc5c91728c9c41
SHA1 d7dd02eac5a9dd8f22cfba4d9308732c5c9f0fba
SHA512 c65bd69a708801cea74e2e36374aa3f657646eab8b3f0c99a9c055154cf26570a8abbca10b8bafd78b2b4ddaaa615eba97024f1fc6805fa34a0677526203dc78
SSDEEP 96:dbD+l20ez6irHQItFHwJkLWJnU6rkeAII1qMPD+qVcx/qtReHX0mNWNdvwk:dbD+l2gkS5U63dIMMPd8SWHX0yWN1
TLSH
T1D8F1A51983AC1E2CE433036ACF5975B5BD6EA2C332498174B51E1637CF6A98CDC277A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jfanmjbbnmijbkhgnkpbaclkfeliinob_28048.crx

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir768_347996649\jfanmjbbnmijbkhgnkpbaclkfeliinob_28048.crx
Size 269KB
SHA256 fd31e30c7d27b866010e247e1e0093d2914aa8e89fe2577ad063d21ac78b85f2
MD5 dbe4c2e2c2ce3927aba15d2a18988a65
SHA1 6443ceb3ce212d9369a6576f1f3734ff3953780b
SHA512 b9243935f5685221ffaa25012300a0fc16d0281648967c88c49c4d11ed0cd9243a6ec9cae9d1bab766e3bd9d967672584f9446aa8b6fbcef1df23c1c59696fae
SSDEEP 6144:j4rUKUKrZYhXsP48n0sK+ehkLCH83hlFK1W:krrUk69WksK8LCUlc0
TLSH
T18244021D6C99D227D61F70F5AA94708BD443CB8B914B286F360A4C161A72FAC07D2EDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download