866c1fc65c80d39750659146f1dac29e1e3ea898d27a8ada5388d34afcaaf1d6

Analysis

user interaction
yes
max time kernel
900s
max time network
800s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 11:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
another-wall-mystery.html
Size 17KB
Sample260807-nf3exafe45
SHA256 866c1fc65c80d39750659146f1dac29e1e3ea898d27a8ada5388d34afcaaf1d6
MD5 f7e1a362c4fc0ba31ad9bc463f0bdbe6
SHA1 2907c7f1398275d644b0546b0ce051ac8980d30d
SHA512 5f8210b50808ba5c5469beb7f65f91e24e4a2d64a4a4fecb163b6ec9b70c5b9f1cf8ec471afe20f4530b6ff9f7508db90ac071747ecb66c1b534ebce145d14c7
SSDEEP 384:3FV63Sqtx2i6T1lVYQ7riZQQa2giux6SGhjCFLMSosd1fTQ:1V69Aeu2I/iRCNGEfTQ
TLSH
T12282F9762142303DB537DADAB4B1A74FB291C407C8131689B6ECB37ACFDB4A60A75709
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1508	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305752990265434"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{EE3B1C47-2D98-4508-A1A5-72A892CD8A9D}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2392	msedge.exe
2392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 38 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe
4464	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4464 wrote to memory of 1900	4464	msedge.exe	86
PID 4464 wrote to memory of 1508	4464	msedge.exe	87
PID 4464 wrote to memory of 3020	4464	msedge.exe	88
PID 4464 wrote to memory of 3020	4464	msedge.exe	88
PID 4464 wrote to memory of 3020	4464	msedge.exe	88
PID 4464 wrote to memory of 4028	4464	msedge.exe	89
PID 4464 wrote to memory of 4028	4464	msedge.exe	89
PID 4464 wrote to memory of 4928	4464	msedge.exe	90
PID 4464 wrote to memory of 4928	4464	msedge.exe	90
PID 4464 wrote to memory of 2392	4464	msedge.exe	91
PID 4464 wrote to memory of 4928	4464	msedge.exe	90
PID 4464 wrote to memory of 2392	4464	msedge.exe	91
PID 4464 wrote to memory of 2392	4464	msedge.exe	91
PID 4464 wrote to memory of 3520	4464	msedge.exe	92
PID 4464 wrote to memory of 3100	4464	msedge.exe	93
PID 4464 wrote to memory of 3520	4464	msedge.exe	92
PID 4464 wrote to memory of 3520	4464	msedge.exe	92
PID 4464 wrote to memory of 3100	4464	msedge.exe	93
PID 4464 wrote to memory of 3100	4464	msedge.exe	93
PID 4464 wrote to memory of 884	4464	msedge.exe	98
PID 4464 wrote to memory of 1528	4464	msedge.exe	99
PID 4464 wrote to memory of 884	4464	msedge.exe	98
PID 4464 wrote to memory of 1528	4464	msedge.exe	99
PID 4464 wrote to memory of 1100	4464	msedge.exe	101
PID 4464 wrote to memory of 4648	4464	msedge.exe	104
PID 4464 wrote to memory of 4648	4464	msedge.exe	104
PID 4464 wrote to memory of 4648	4464	msedge.exe	104
PID 4464 wrote to memory of 2700	4464	msedge.exe	105
PID 4464 wrote to memory of 2700	4464	msedge.exe	105
PID 4464 wrote to memory of 2700	4464	msedge.exe	105
PID 4464 wrote to memory of 4004	4464	msedge.exe	106
PID 4464 wrote to memory of 4004	4464	msedge.exe	106
PID 4464 wrote to memory of 4004	4464	msedge.exe	106
PID 4464 wrote to memory of 4796	4464	msedge.exe	107
PID 4464 wrote to memory of 4796	4464	msedge.exe	107
PID 4464 wrote to memory of 4796	4464	msedge.exe	107
PID 4464 wrote to memory of 3796	4464	msedge.exe	108
PID 4464 wrote to memory of 3796	4464	msedge.exe	108
PID 4464 wrote to memory of 3796	4464	msedge.exe	108
PID 4464 wrote to memory of 4076	4464	msedge.exe	109
PID 4464 wrote to memory of 4076	4464	msedge.exe	109
PID 4464 wrote to memory of 4076	4464	msedge.exe	109
PID 4464 wrote to memory of 2836	4464	msedge.exe	110
PID 4464 wrote to memory of 2836	4464	msedge.exe	110
PID 4464 wrote to memory of 2836	4464	msedge.exe	110
PID 4464 wrote to memory of 2864	4464	msedge.exe	111
PID 4464 wrote to memory of 2864	4464	msedge.exe	111
PID 4464 wrote to memory of 2864	4464	msedge.exe	111
PID 4464 wrote to memory of 3276	4464	msedge.exe	112
PID 4464 wrote to memory of 3276	4464	msedge.exe	112
PID 4464 wrote to memory of 3276	4464	msedge.exe	112
PID 4464 wrote to memory of 1112	4464	msedge.exe	113
PID 4464 wrote to memory of 1112	4464	msedge.exe	113
PID 4464 wrote to memory of 1112	4464	msedge.exe	113
PID 4464 wrote to memory of 2688	4464	msedge.exe	114
PID 4464 wrote to memory of 2688	4464	msedge.exe	114
PID 4464 wrote to memory of 2688	4464	msedge.exe	114
PID 4464 wrote to memory of 2152	4464	msedge.exe	115
PID 4464 wrote to memory of 2152	4464	msedge.exe	115
PID 4464 wrote to memory of 2152	4464	msedge.exe	115
PID 4464 wrote to memory of 4696	4464	msedge.exe	116
PID 4464 wrote to memory of 4696	4464	msedge.exe	116
PID 4464 wrote to memory of 4696	4464	msedge.exe	116
PID 4464 wrote to memory of 1192	4464	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\another-wall-mystery.html
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffaa992c188,0x7ffaa992c194,0x7ffaa992c1a0
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,9566414980863801252,2400083220979586682,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,13678652223171636577,1477493543057112738,262144 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,13235282485806751289,1407326706018546062,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,7373292523053270734,11330446180252983788,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,14714630792246813163,16329733991528609407,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,2934416985331152794,5408074643029483559,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,147946776144465191,18053016851600423199,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,7340452240637100806,10288089799329843866,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,16747743053681598687,8273975053074827236,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,8019521691308815391,3688156709428448995,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,8019521691308815391,3688156709428448995,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6196,i,5398741904377819655,7080528645562992396,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4304,i,6491404033982262924,16680678191422964237,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4280,i,14096121466500853113,14249329870959113382,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4320,i,10322664261307544813,5506885180998530990,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6200,i,13120232732761776786,11576613739219480631,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6276,i,11029112874308950510,6923974898719946730,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4984,i,8785871340198039956,5410575159262913918,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6344,i,5818978214845462168,17183600917795411435,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6284,i,5532513894029729022,12341919255363975684,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4276,i,3385200933448194155,14700568421289006773,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3572,i,14782854636946844,10867426822827547901,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4984,i,7071759468034427783,18402551301395206733,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6464,i,18279607352456838096,850076039098296746,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4304,i,13140092999843009366,11552528207558275205,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6540,i,7045835853068926306,2057591189762551855,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6356,i,10353974386715415718,9429387689139919648,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5924,i,15075064947006779241,6842841490287138396,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6288,i,6606287401840274700,8910270129719635516,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6580,i,9227247309687786083,18303898007192990246,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6392,i,11516702383336886170,7990415871157527336,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6564,i,8658937347231800331,10255139170474975009,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6196,i,11574820267003067932,3866296792354141946,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6608,i,11915896389242729299,11220627396435505104,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6364,i,13342696905668292944,302968650088654540,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6844,i,18184836593369907079,1805708875611655890,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6852,i,4295714521376900768,17438460239707317470,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6660,i,13502034465480761890,4777689168280813494,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=6568,i,18018390484458656762,3192062197627963806,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,8181251833744067578,11075471242457703629,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6840,i,15747268476481086015,6960246607709051173,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6780,i,13643821330278278,7525578765061210270,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6932 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=6800,i,9641809701545889261,12578924910875874583,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,6317215173324317640,638592322186872718,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,10655794319702493264,3453023873640744018,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=3692,i,8223646871219177924,6046873791885714736,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=6872,i,13010706087145746669,14550445883013737598,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=4808,i,14697406845549259071,11326212379688761965,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=6916,i,17228897582838710009,9845355420781347223,2097152 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6792,i,13790298031029174452,9471657247717131503,262144 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,17611953402004532816,10419173332882023748,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,5240079239240404371,13390069508579578374,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,2053960286364954484,3529669067419357502,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7176,i,15993534244597783754,14179046237055723229,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,4899063538859581860,10654807214133570551,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,3373745315916686842,3600502798467586458,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2968,i,12616826873861306269,3633437596073498136,524288 --field-trial-handle=2316,i,2907685609401171559,16185621736194895907,262144 --variations-seed-version --mojo-platform-channel-handle=1344 /prefetch:8
  2⤵
  PID:396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 7682e9cb9186ee99bbbc13d931b9e9a95c06d70216bb79a76e03ca0ee320bd69
MD5 bb81b84e3253ec91e5b809593c3c1e32
SHA1 3f52ec0f3c20c653f4a687ea58263ef7a6cf871d
SHA512 9875affd8cc532dd14997ca7e3786efd16c6bb1732729722736d25e7a49bbfcfc3776a4330ab0283c49d6ae32088309e0b4f969ec65fcaa3a1ef80eb95a00c40
TLSH
T174E020C858DDC26D551075875178774CC7D1770AD6CCBAD517108984720386467C59A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 827dc3bbbb0922d932642fef3cab070cbcee4e2c4ee7c0dd7499f2959cde27fa
MD5 a9627aed84ecdebddeac131d076b9f2f
SHA1 871d6b83a590cb9d88d9889597a389fae93b5db3
SHA512 617b5260a2c575e356f305cceefc303a577af9a16b7f7598cf66830dec14f4d07e8d90251a39d77cbf3de9d319e5123998070f73f86605e834abc44ffec38ed3
TLSH
T172E020C495C4C39D57046447615CB70CC2C1764B97CCFE4EF70489447583590F691A74
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 28b6c3cb831d20075e92c1b9b2eeda9008383d0df892f7b6985310466b82cb01
MD5 de8d72a067676d554b6a54aafae7fcc7
SHA1 daa7e7f084d491876edae771806dd12d6737f227
SHA512 d35981debdafc27f9601e13aa96e5e83c48be957d93d9b8b1652a1ec5673f9e9ba600148ab4564a25882904da6c53c6c936949cfce9eac8475bd74015f4af61b
TLSH
T1CDE026CC94C9D23FB64874475178A30CDAD13E0F9BC8BF9B570088857303950B282BA4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
Size 37KB
SHA256 84186c94c202c6eaa8cdde14e8bcb82ae95f13413df2852b46bd013535425f4b
MD5 8abcb03d6ce0af82f0e2048c440e6cae
SHA1 b35be41ea1f9cf3fe270d01ce78b4b121f851ab0
SHA512 b6ea20bd67cd7fab5703a0e980ff2e338f195fb851cb6eb511c1e750e193d2887580fc998e5c7dad92839bf2ee6209498ac6f9a6aae81fa1f168784bc2085067
SSDEEP 768:frn6Vqe28sAmi/PwOzwOqHgPrzb0JW1bZwcP5TnHak8yIpxTkHDVChA28g:fOVidcwovb0JW1ySnBEHywhJ8g
TLSH
T1E703E173136772151FE5533BFA9B820D4208A78AC06F438D384965F96E7EDA9003FD68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 f1003d6374e6afc8cb30504e7d1b99eec3d4defc171eede310d4a69d35a2e02e
MD5 557325062504323ee4e8863d5ca7d484
SHA1 09f0b7699baa9458f51bd0135646024316b82330
SHA512 848fd5ec278d3fa5706ab149a1974e743944f4dcd1be01c2b4d38d5dfbf5c8221e9aba96a1568f17f9569b1e048b19d17dcaa56d1c41bd14beb5e9b4d862312f
SSDEEP 96:fh6uO4AzbXCZPxU2aJ3NqFKyQw9UqJZiPJ5Ql71DCC:YzmZyDdNxy75ZiwuC
TLSH
T1B0C14030CA4BF851C7A2B5B152EA8F2079BA43D7F9B75E8786081D30EE1B312C2581D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 f783bd6312bbf3ce892a1b5be7b370dc15a2b6a49198475574d4638855c69361
MD5 c0b5bab437c3a4ced9b9c2c96e115c9c
SHA1 05b696fc5965f7e0ef506c02ca7aa6147863924c
SHA512 f2e287762d5321b381981e0badb07492a8b1a654221cce7fea127ed453df6314561254fe1dd21b5946f767edfcd54155a0484b2d865dd63626a5453e75c864c1
SSDEEP 96:A6uO4AzbXCHPxU2aJ3NqFKyQw9UqJZiPJ5Ql71DC+:/zmHyDdNxy75Ziwu+
TLSH
T1A5C15030CA4BF851C7A2B5B152EA8E2079BB43D7F9B75E87C6081D30EE1B712C2581D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e3c03b2d7b5f8a90296984c84b90e9aebf926922f14bc4bd78b7b1b4318be90f
MD5 934be21335783e1d320212e75f3b6afe
SHA1 a6c89b8182c4802a11ebaf62d70d6aa8a1c572e8
SHA512 de32186339a9c9e771bfce5da41c9d8d71401ac31b92766ffad9c751a3661a2c271241ebf6c8f59d97fdfd9f9f6d60639bb4b35b78dbdd588950bddf9000176c
TLSH
T1D5618138C78309A1D76174B2A0FD0F24787587D8FAF32D85D85829346F1B351C3682C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5913fb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5913fb.TMP
Size 3KB
SHA256 5e60546943a58d8000bab42d75884e2d5d54ecc1a9d03438bd9be6624a39ff60
MD5 1401dbf1e061d071077bce3c8469e0d1
SHA1 42f29dcf67e2b3746345f33344f07d9b3066b7e7
SHA512 cf6231e0f79e530bd8e16024749a3a35dd9ba3e01fc56e4cb84e1650849dac960d3b96f4a088ed55cdd60386acba591ddd166dd7f73fdc6f7a75df4265a8dd4b
TLSH
T18E619138C78309A0D7A174B290FD0F24787687E8FAF32D85D8A829346F1B751C3682C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 04216fc3dff36ecb0e91dd3b6d0ec654cf82e5ea63d58ac2c36949c1940d7bab
MD5 4860a1b67ef686fbcd0c67d5c5a266c7
SHA1 5b31d665119654cd04ebd11aff1ca9e134c5e8f2
SHA512 93dc425cb66fe5a7145a87854275d495bf54f531f3efd1f4c1e7bc78fd278cd52079eec93570e3bbb6184a08ca046a445ebdb21fbb60639c7dde6120ac738037
SSDEEP 96:DYO4RaL56jEjLWZbz4KSwBE0D8vjrQjTBjhNjpjhUjFsGMzdl:DD4RaL56jEjKZbMKSktD8vjEjVjhNjpz
TLSH
T14791BDF6C3E5466DC91152F09A252F2BDE1D055A436C3C15C9E4EF4BA3F24B1E241A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1e35019298f3c3f5c6bdaa61885de27fad502cd8998f8670b836337ec1ad17e0
MD5 a10871e9ec7cffc4478063af59f48634
SHA1 c2c4e752cbab9a2a4750f25c4b8039ce3da13a4c
SHA512 953c9cc385d380b3744b55cc6a1720640e58e4ae35761661aae4824b8831d9b0f6c82a74ba055ca8cf60fd0d793d923d054a7702bfcfae8e78f6ccb2040c4135
TLSH
T18D71AFF743B0466EDA1192F0DA15AF2BDE2D005743AC786589E4AF17D3F20B1E181B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f428c827b3a74b7b6353a6765b684528f8ac92d275e07ee1faab59e84d977b25
MD5 7904f2dfd51a990c95aa8490e06eab74
SHA1 88b961dcb9efe0f1bc5ceac54c9173ed34929cb0
SHA512 78313068aee3c430a4223ca8d68c1d620e8e28bcd1290cba0704e82e7174c63d34f6bbb0eb7ba2deff7a460edfc1082bf37c33f9524c1e4fb9783ec715551ebe
TLSH
T110519AB7C7E5866EC91152F09A286F1ACE1C0946432C7C66C9E4EF5BA7F2070E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 cb30d4fc8b9350782b214701a8801571ece4045fef338301b80d335d33d5ef48
MD5 f1be2538870e05ea464d856cfedcd232
SHA1 b695ce493554adb8dfb021982eda2fc57b66e6f1
SHA512 633321f43c9f057aab895b582b7f63f55f08d6cbff04d1df2adf10b2cf3049766ba9ef4defebdf23847141065c6cc0c3ace9bd2604d34e1ef56b1409fc6ddd9f
TLSH
T1BAD022635201B0F9A95D7EC6906BFC8FC73700240843ADD921D0A89917714EC1927242
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 e451fc9fe56785470346d2440ad56a10860f71b45fcebe70042fa5ce3c66b0ac
MD5 a6dc98be39e8881c76feb5caa0407230
SHA1 517ccd7e6304457d908feef9d1812c04e93e3205
SHA512 8a39378f8a79b619c924d8f29a5b01f2e510bdfeee1cfe885ac8bcbc8d0ebddf56ba0ece58482b29e3c0c89271d9d0398e17011ccc8c1da062b041c08a5627c1
TLSH
T1F7D022639201B0F5B99EBED6C86BEC8EC33B00240803ADD6A6E0A8A81B324BD0517446
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe598023.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe598023.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7c08dd00a7893e3c32a0a12e394001b9800431a4b5eeb9b09fe0ee6ee723fbb6
MD5 d17fd684a7ed7e6a85ffa18ceef29938
SHA1 313b260c35bfb76cf038e30887bfd60147646313
SHA512 e3da5fdf91e32eb6385e28845302b0359f4260adca22b11a656d0560ed2131b7bc68ca2b700f55d2529147be8b8e92378119abf77aa6ac6657537b78a15f48fb
SSDEEP 192:sxZ2RD0cB19/ftXsw1beudp9MKaHW6+WNi/kXYzS37+wIg5CiDS/h:sxZ2Cm19/flsw1PqHbtXnz5Eh
TLSH
T15E52F9926924D4778CC7D609BE387F13D6F9403299910E9CAAFCD51C05EBAEE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 58697542a4a62b534ec574763be550cbc46ed8df20afbee92d123d03691cd910
MD5 3d76db689fdf98bb9cdbd8a1f2a45b1a
SHA1 c5d76f5c87c2dcf834dbdf3e2fb5bd4be8e3cf0a
SHA512 729f98a24509d8a503f6624bf78e6d81c720ed859693568e2a7877bf5d517ee68274b6874d377b376196860d1851789f4f8c2cb27a55087194489fe6455148d3
SSDEEP 192:sxZ2RD0cB19/ftXsw1b1udp90KyljHW6+WNiz/ZYzu37+wIg5CeS/h:sxZ2Cm19/flsw1oMHbaZXzbEh
TLSH
T1E252E8926924D8778CC7D909BE347F13D6F9503289950E9CAAFCD51C05EBAEE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c04ebbb42a526f5bf711c82cbc25dd0423add885d9f31aa00df8df7de407ce83
MD5 5752fb040fba2efb2528a58a57c83374
SHA1 9593c92d17ac52e7af4622f821d0790cd80ccc24
SHA512 23bde34cdfea41a406d2a68dd971648baaad8513f3b0aa010f7a73c0781e2df7493f24e69862d0a5652f75eb472906e3edb195ee6996857d0132817ca83cb112
SSDEEP 192:sxZ2RD0cB19/ftXsw17udpTMKaHW6+WNitmhm/YzNLUc+wIg5CJ:sxZ2Cm19/flsw1a8HbsQm/clzw
TLSH
T11D32D9526A38A97B8CCBD60DBB18BF13E6F5503291941E58B6FC961C05E7BCE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b9e0d4fea1daabf2064066ad3044d9ce1e7bbcad0f85e3c27c5b3d2bca5a3d5b
MD5 82b8914750d1a196863bcd3eee8bf4dd
SHA1 dd5a7b197fbd4767f6b3285f89790b6f5eee4a0e
SHA512 ce05cf1da28662c035545f0cb4c927f8824ff982b5dd2a18e136f47171de81a6e86fddd6c73f233fdd20a0dc13887487ad1ff02cb5e1557eafb8854f6c04d938
SSDEEP 192:sxZ2RDk9/ftXsdrHEIdpd3HW6+WNGYzQUc+wIgrJ:sxZ2y9/flsdr9RHbGlz9
TLSH
T1AB22D8526E38A93B8CCBD20DBB197F53D6F9503291941E58B6FC961C05E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 76b944b6dc92099b58929e1a69dd614084103ba36a552ddeb5e75a3dc4b43afd
MD5 841570ade868da44fa9661c5c0df28ab
SHA1 e614b5d4e523c42221b6ad510a543ad5a4c9b205
SHA512 ccfbc20eafa7781064c70f8c004e4341945aa80bfa02b5ece58799284be32c737523945dba17539990e9f2ef28313b8d6a364772fea021864c55540355062778
SSDEEP 384:sxZ2Cm19/flswv66s8qMpRiYnazAW8pZS15posJWeT+DoMHbjtZXYbEh:seCm19/fFv4Mnc7WeT+DrHbvXWO
TLSH
T175D21846A924C8778EC39D18693C7E33DAEC405256C5CEDE1AECCA1C019E5FDAB0B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f0b4dba42162d074cf579659cc4dc71923f9cf1aca324c9fa3b05e8b54d411a4
MD5 22550b93a12ce82c08c2cee832baf3f7
SHA1 de5941786c75b29c841fcdede8693533f0913bed
SHA512 1886cec0e398218bc423dde2fe13069a6b4b5e36998f51f6d2df95adf63038798e5476683fcfc6a6545935a2fb89fec6cf9b944503a58027949c9f516168aad1
SSDEEP 192:sxZ2RDk9/ftXswrHEIdpd3HW6+WNGYzQUc+wIg5QJ:sxZ2y9/flswr9RHbGlzy
TLSH
T1A522D9566E38A93B8CCBD20DBB197F53D6F9503291941E58B6FC961C05E7ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e33db48220fc7e8b9b70c38b444a5afbd49323f3a994bdbc72157bf3eb5eecbb
MD5 7d0236eb58baffbc4d1f4cc734e25c56
SHA1 7abb8145c3d14c5e97f45c5a8bc5869ea6a9b7c2
SHA512 1161eb3202e491bab19bfdf7d070687a66eb0d824c7bb9f1d630e17873b5cc39bb726741741dfd4543b3692a7ebf28e68d278b493db5077347980371a16d0e1f
SSDEEP 768:ugk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBtroySYK:ugk7u70WvqiEau1jai5LA3BGEK
TLSH
T1F3C2E93B740CCB7E4F801E9DAC566F977E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 ea36f57f3aa9853b00848d7fb9e6c3f9e586cf3c984916d59786db6ff2a3047d
MD5 b0e1bc3c39880ac75c1d683ea372f3d6
SHA1 e6223cd1f516c10ea897f2642e4bb20dc438adae
SHA512 d30cd25af38fb04ee6d8d89c4fb2dab418b206d4cef9147effd7788de6418880efcd3adcb0cc348ad185bb4d5d1edaf18a3827009d64077218f4e32c10f59a5a
TLSH
T1A3E068BB2DFB2C34AC7F97D138B064A081853818C904EC0F3427A28730F23922406C61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4bd0bb9427df904391553296773e639e6ecac83b81e35c783eb1848c6e35959f
MD5 b0e34ccaa88a5ba1aa7c7926c5d26460
SHA1 cde7c100c86c03ba206bbe3fd918af13fd2331cd
SHA512 ef3df722fbc4b6570b075a556131864447058cf49fe8a0d81c03f57b4a593ddf30cce6ddd3cfe3bb4e123ee4dae9e921aaf3d04d694743721be2f13a2a679ce5
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTTIIjK1Kc7y5CI/KT60XKIPKvKl:KIbCKcTIwK1K6aCgKT6wKMKvKl
TLSH
T13E91590A313A0E55387E294DB59795365F4232673018B4AF7F7804A21E6BE224EFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

c0738b85-9b4f-4cf9-894f-36870f1fa22a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c0738b85-9b4f-4cf9-894f-36870f1fa22a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0433cecb125677b17f5bc12fc8d6fe9c961e6780ae20341a799c5c4df48c1776
MD5 0a88f4ca4114242524251b3819f3cdd8
SHA1 70926864853baef63beb81fce4bb838358a5bb9f
SHA512 dc1b2adc73ebda462f371dd5dc95a4b5cb2030f660cc302866dd2cf5172c35539f7813d9a096a16a31cba608987a8f637270bd6cbeb0200a333332a0bb672d65
SSDEEP 192:uQLsNJU/QbxNHXBb2UQmiU1WR/4aGBPKK7+FdG29p9hFC1SJrNdNoq2D1k5:NsNJU/2NxbPkwMdtp5CEJrxoM
TLSH
T1B2423B756C74AC7B5DE2E541F54B36039FF8806BDA881F54B2EDBB1C02DA6AC131780A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 822490479d268f0e863dee54be75072dd8573ed66c8956bb763d3ef44fc384c5
MD5 fd6ae07baf1757ed18b1820daebe83bf
SHA1 ce3ffcfde22c9b1831de01aff0a508316b0cad4e
SHA512 27d03c42b2488aa6b5337f4bf1e3de4cc26c00d5023ecba4352d400a323abe92b6dd1f28fcbccfd9a838d6051ae9a711898782ec69fcd3a8c183905573a95470
SSDEEP 384:YiFiZcIvzsNq8TUNTUlIls2NxbF9wMdtp5CEJrYof5Urzo8:jFQLbwgRHVphYoSb
TLSH
T1BAD24AF218E7993AE99E9B43A77D2E034EBCC027F5845654B3D8AA1CCC561BFD302805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0720860a9adac50f0c4048fc4e611fc06c0c63a56f9c38017fa3b09f5c0d06e4
MD5 5b76087ebbc732751ea2a4861f2e25a0
SHA1 4bff850aef2a2fc1046b8f02d0149268d637acca
SHA512 6affb3ce196ba9c874069cbadac403ad6b3e0fd7b2b7f740791033b856afecef6c9ce9710bfcd18912b42e59a4890637d9c6dc53f62302f5fbb516de8de0d239
SSDEEP 384:wZcIhsNJUs2NxbF6wMdtp5CEJrxof5Urzo8:OhNkVphxoSb
TLSH
T183928E716C74AD3769D6E585F44A33074FF8C037E3C51B98B5EDBB2D01AA698170381A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e3c4fff9ba7f8273ec79b70c696194f410f1d9e3126de337442aa4ae3385717b
MD5 68392728a7dfff5b8aa4a8042dec651f
SHA1 f2d61567afb7b7035f5dc3ee0d0a822def115c25
SHA512 d25042e71c961017d09686590389b9209eef3d1595621fb3f61c2bf27b31a95ca3169c7afff31ebc13a08fabac9d77c16032a6806860d15af2ee7e6114b4addf
SSDEEP 192:AONj64BLQmiUyPew5GBPKK7+FdG29p9hFC1SJr2Wwoq2DU6:AONj6e9TwLdtp5CEJrUoU6
TLSH
T15612F935AC74AC3B5D92B541F48736035EE9413BEA896F50B6EC7B1C02EB66C2317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4912b13b63c28f271cb325d4f74e81a4a92bbdd70ba4548afda5e710ad966a24
MD5 615376b55856a0cc7d870fa4ea38c78e
SHA1 d760ea6f4d3dcc9e6a3975742d742e8f5493f155
SHA512 0241e35e26271134faf89a90c62b211d54ccdda34bc30396f324bdcfedb68ebbcee8258bbf2e250ea268f1124cf2b112b73a9ba4dfb992d3fd6fbe76ccc0d3ba
SSDEEP 192:MONY64BAQmiUy91eW5GBPKK7+FdG29poaDXUxU6:MONY6eA6AWLdtpRWU6
TLSH
T1CB0209386C786C7B9EB2AE45F58637175FE8103BE6845B54E6E85B1C01D764C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e8fad97308ca65ac45cc4c6e6d0e9c57baf0c5b4015933257c723931c32fd9e5
MD5 940f9b549fa76484a29da2637dd446d3
SHA1 9c2c424e14e72c73b69b0f80aea5edf5e47c6f5b
SHA512 76076b63b70aa36aa43596fdf25b44fb7e5da18756519a16cee1465646400713c75ace769996d0e74c7f88cc25eecb3412a69f8af092aa0b3586fbfbf53b9e28
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9a49cba9c8f229949eb13e0edb1d289b7a019d8939aba2233c5e8775f329d092
MD5 1fec299265ffbe6f0e198f079fb75870
SHA1 5d37cd3c9317d67d86908c18713c58c3612275e0
SHA512 32b09d9bf0eb72fb07f0a8cf5252952d7d59bffe95002402db8748782ff80c2395eb03099cc8e9329ae11fe6226e4f810aa11d5effa460848ac1570432ae7104
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe59fdaf.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59fdaf.TMP
Size 392B
SHA256 9c593026a3962fee0e98cd572f66928d0aadac6bdfcd1a07e47051184a7c0141
MD5 563fc7aa77bbaa3b6c82699c96327296
SHA1 00e77670fefeb8e93df0e36ad721ae8c8152ef7c
SHA512 98286a2354d4c0a62013093e1b1239d2bfc97b35bfd0f58abbb04ffff5fd0caf266a25b23c12fce1a3e2a56ad427b5f352967bd572ed5d0b39c79d50882f9b53
MD5 SHA1 SHA512

Submit Download

94c73c7d-0358-4e3c-93c9-efc75a738947.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\94c73c7d-0358-4e3c-93c9-efc75a738947.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 165ddf527e81212852dc980f5cca42046abbc4f714ea598f090d5ff18e446d17
MD5 ae1668c477f43ed7aac91360b6cdeb3b
SHA1 cf71e65ff9b03c4823437b29781266807d8ad961
SHA512 9ec5a19206b4da53e01fb628cc5c6ad66cf1c003105a239033256dd3831c9aa20fd38c62c0c8dfd2ceb6159a6daea306b712e70d3ef44db087cdb5c67724f266
TLSH
T128410558BBF91148B3B77E5AAFF2A86D487EB8772E06945D00110E4F4663E00C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download