a686c4ce95d59295b545b037d555db6d7e09ef3fc9ec6bbcf1de6967df9a2297

Analysis

user interaction
yes
max time kernel
390s
max time network
393s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Star Wars - The Force Unleashed II/60 FPS/SWTFU2.exe
Size 17.3MB
Sample260808-wslxpasdkc
SHA256 a686c4ce95d59295b545b037d555db6d7e09ef3fc9ec6bbcf1de6967df9a2297
MD5 72120798614fda11616f0ade755c6e6a
SHA1 a815e676cf47f7866309966bd9e3718c1f443420
SHA512 e6d7d0bdb4b4818c643e636a6efeea23add17177ec237be1a0968ae6cf03bc4e1e88ec0859d4df993a02124d3b3e9ec93fbc152f5a1cb95efb354a2ed7358341
SSDEEP 196608:mOR2KSCt6e8CS0A7VAePiemAJ2/jxcg0VnuYJn:mcnftn8N0A7yJAJ2/jqxZuO
TLSH
T181077C00F55E92B1D45A153C10AEF7EE932CAE350B147BC3B6D03A7AAD326E15D76283
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence ransomware

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
338	discord.com
339	discord.com
350	discord.com

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_2031695929\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_553206883\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_482362747\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_632695101\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_1302200517\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_482362747\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_632695101\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_482362747\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_553206883\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_553206883\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_2031695929\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_379800048\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_2033328310\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_1937473750\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_798616629\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_1937473750\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_2031695929\classification.js	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SWTFU2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SWTFU.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SWTFU.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2776	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306864713790812"	msedge.exe

Modifies registry class 12 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{E03E6AC7-162B-47A7-AE1E-338C01C6F8B3}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{66114FE6-E6D1-40BE-8BE5-6CB3C1E08524}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 59 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of FindShellTrayWindow 18 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of SendNotifyMessage 8 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1192 wrote to memory of 1536	1192	msedge.exe	93
PID 1192 wrote to memory of 2688	1192	msedge.exe	94
PID 1192 wrote to memory of 2776	1192	msedge.exe	95
PID 1192 wrote to memory of 2688	1192	msedge.exe	94
PID 1192 wrote to memory of 2688	1192	msedge.exe	94
PID 1192 wrote to memory of 5944	1192	msedge.exe	96
PID 1192 wrote to memory of 5944	1192	msedge.exe	96
PID 1192 wrote to memory of 2964	1192	msedge.exe	97
PID 1192 wrote to memory of 2964	1192	msedge.exe	97
PID 1192 wrote to memory of 2964	1192	msedge.exe	97
PID 1192 wrote to memory of 5988	1192	msedge.exe	98
PID 1192 wrote to memory of 5988	1192	msedge.exe	98
PID 1192 wrote to memory of 5988	1192	msedge.exe	98
PID 1192 wrote to memory of 2812	1192	msedge.exe	100
PID 1192 wrote to memory of 2812	1192	msedge.exe	100
PID 1192 wrote to memory of 2812	1192	msedge.exe	100
PID 1192 wrote to memory of 4132	1192	msedge.exe	101
PID 1192 wrote to memory of 4132	1192	msedge.exe	101
PID 1192 wrote to memory of 4132	1192	msedge.exe	101
PID 1192 wrote to memory of 4664	1192	msedge.exe	103
PID 1192 wrote to memory of 4664	1192	msedge.exe	103
PID 1192 wrote to memory of 1620	1192	msedge.exe	104
PID 1192 wrote to memory of 5760	1192	msedge.exe	105
PID 1192 wrote to memory of 1620	1192	msedge.exe	104
PID 1192 wrote to memory of 5760	1192	msedge.exe	105
PID 1192 wrote to memory of 2856	1192	msedge.exe	107
PID 1192 wrote to memory of 1164	1192	msedge.exe	108
PID 1192 wrote to memory of 1164	1192	msedge.exe	108
PID 1192 wrote to memory of 904	1192	msedge.exe	109
PID 1192 wrote to memory of 904	1192	msedge.exe	109
PID 1192 wrote to memory of 5576	1192	msedge.exe	112
PID 1192 wrote to memory of 5576	1192	msedge.exe	112
PID 1192 wrote to memory of 1928	1192	msedge.exe	113
PID 1192 wrote to memory of 1928	1192	msedge.exe	113
PID 1192 wrote to memory of 2964	1192	msedge.exe	115
PID 1192 wrote to memory of 2964	1192	msedge.exe	115
PID 1192 wrote to memory of 5024	1192	msedge.exe	116
PID 1192 wrote to memory of 4616	1192	msedge.exe	117
PID 1192 wrote to memory of 4248	1192	msedge.exe	118
PID 1192 wrote to memory of 2916	1192	msedge.exe	119
PID 1192 wrote to memory of 2916	1192	msedge.exe	119
PID 1192 wrote to memory of 1088	1192	msedge.exe	123
PID 1192 wrote to memory of 1088	1192	msedge.exe	123
PID 1192 wrote to memory of 3376	1192	msedge.exe	124
PID 1192 wrote to memory of 3376	1192	msedge.exe	124
PID 1192 wrote to memory of 3376	1192	msedge.exe	124
PID 1192 wrote to memory of 1596	1192	msedge.exe	125
PID 1192 wrote to memory of 1596	1192	msedge.exe	125
PID 1192 wrote to memory of 1596	1192	msedge.exe	125
PID 1192 wrote to memory of 5868	1192	msedge.exe	126
PID 1192 wrote to memory of 5868	1192	msedge.exe	126
PID 1192 wrote to memory of 5868	1192	msedge.exe	126
PID 1192 wrote to memory of 4312	1192	msedge.exe	127
PID 1192 wrote to memory of 4312	1192	msedge.exe	127
PID 1192 wrote to memory of 1220	1192	msedge.exe	128
PID 1192 wrote to memory of 1220	1192	msedge.exe	128
PID 1192 wrote to memory of 1220	1192	msedge.exe	128
PID 1192 wrote to memory of 1176	1192	msedge.exe	129
PID 1192 wrote to memory of 1176	1192	msedge.exe	129
PID 1192 wrote to memory of 5040	1192	msedge.exe	130
PID 1192 wrote to memory of 2920	1192	msedge.exe	131
PID 1192 wrote to memory of 2920	1192	msedge.exe	131
PID 1192 wrote to memory of 2920	1192	msedge.exe	131
PID 1192 wrote to memory of 996	1192	msedge.exe	132

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Star Wars - The Force Unleashed II\60 FPS\SWTFU2.exe
"C:\Users\Admin\AppData\Local\Temp\Star Wars - The Force Unleashed II\60 FPS\SWTFU2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5624

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x304,0x7ffdca65c188,0x7ffdca65c194,0x7ffdca65c1a0
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1864,i,18340037253365353086,5550341396929285691,262144 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2072,i,2821898000070718668,428663573849403597,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2768,i,1437873623196154170,5532744358431040196,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:13
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,6515589313977981696,16563708436937309966,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,3361635039286019958,17709183260971990036,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=3840 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,18170157953086026037,17375406497441285518,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:9
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,3741882675896902501,15203875075332046916,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,9320478110670197849,14393742301367191567,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,2400578419098393996,10363095773483995614,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,1963304740818610461,15612999652440349894,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,11654251447237021871,13421179644700589103,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,11654251447237021871,13421179644700589103,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,16279011939544126429,6404949530688173078,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,1840249341679723316,7888057115700588557,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,13828278956068077275,15128683153350512621,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:14
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,18218247809184626975,13399055347061524768,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:14
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,7825837063011840025,14184194683929490419,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1272,i,8446545144592023200,6899887594512200860,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=1404 /prefetch:14
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1284,i,16572554498629118014,13840291111341451820,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1276,i,2235876114576384446,10361884579770180115,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:14
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,14335869471491973849,13876400376797142107,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=3956 /prefetch:14
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,6818671063884898049,13724232272006631212,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5012,i,7047820723268004499,2556929041415020751,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6052,i,12709743529360041917,1691944095073778826,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=884 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=3880,i,10415243884955097417,543999907098915748,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,12712085439704531079,505698947101294440,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:14
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5692,i,16484098296173573129,1846715398263988993,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,10284999977244975415,2809211924398443582,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:14
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3900,i,1746773716336612476,16768088847157398492,262144 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=3860 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=1552,i,13512712208232580109,5766004805442670101,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4004,i,10368679688038167490,9988055290785929427,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:14
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6068,i,4798044034126831037,3048285970522945511,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=3988 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7292,i,17210392643177746267,15609556082267605641,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7312 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5668,i,11060490745503294851,15402197544237156154,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7436,i,92318972539172995,3040380190695854567,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7496,i,4986047500411646166,9925083669041413539,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4044,i,15735871275227635954,13518296239108358069,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4008,i,8482845240739192766,8134581070559930148,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:12
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7992,i,12618574603519757536,10327993569712795378,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8012 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7856,i,3756890531251804172,17452762425455109351,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8168,i,1844886271573195342,421411984584744674,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8260 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8208,i,17189986801787122721,3753826126701300458,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8224,i,6286270736407346843,931773905718693683,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8164,i,4618855643462037142,16675593293381479587,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8464 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7860,i,16753874534746089298,5727749055453113914,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8840 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8332,i,5529790130178149153,4252753997378404203,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8860 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8512,i,10461331374024711693,7067276471345665760,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7984,i,2497209835604538313,11643977830079184186,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8848 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7628,i,2227473153912090944,224177000162086571,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8460,i,14569750514181995579,9858817485754263086,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8456 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9760,i,1853409859643489617,9343474675584749079,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=9696 /prefetch:1
  2⤵
  PID:6284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8012,i,16029243989054366446,4268816963048386810,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8056 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9940,i,5007132136112787294,10434759442065806791,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=9956 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9988,i,5766659615254289716,7823537895709441520,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=9948 /prefetch:1
  2⤵
  PID:6544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10032,i,15185733485254630950,10312477307565071630,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10008 /prefetch:1
  2⤵
  PID:6604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10220,i,10553434651150394143,17165005051379103635,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:1
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9992,i,444787549662479065,10583012787607270049,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10136 /prefetch:1
  2⤵
  PID:6740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10480,i,13158265976305867680,283958189428617009,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10460 /prefetch:1
  2⤵
  PID:6804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10616,i,14253657353459717216,11301566969743468679,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10632 /prefetch:1
  2⤵
  PID:6812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10828,i,1722629929085589932,11862155975936978691,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10816 /prefetch:1
  2⤵
  PID:6916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10972,i,2729771581497388098,921355662866623155,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10808 /prefetch:1
  2⤵
  PID:6928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=10992,i,17140605552451529098,13583232166998468923,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11152 /prefetch:1
  2⤵
  PID:7032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=10964,i,2691969090787405525,4304666563882860637,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10156 /prefetch:1
  2⤵
  PID:7096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11436,i,3793558766523543474,16208881686005762060,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11416 /prefetch:1
  2⤵
  PID:7156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11596,i,8949665244855751388,5832083475525400475,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11012 /prefetch:1
  2⤵
  PID:6340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11704,i,12391299192694525717,1437748759216573990,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11456 /prefetch:1
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=11844,i,14842545106024549815,4569587599729133664,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11864 /prefetch:1
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=12012,i,9522741577262022721,12790605352080814222,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11996 /prefetch:1
  2⤵
  PID:6556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12064,i,11051127371468412800,2516473198722666898,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=12036 /prefetch:1
  2⤵
  PID:6796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=12368,i,8662373734224482488,1981326463609352234,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=12364 /prefetch:1
  2⤵
  PID:7256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=12528,i,11029243062124802540,15048017745526844257,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=12536 /prefetch:1
  2⤵
  PID:7336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=12472,i,2221280856426699037,15119103620523968963,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=12680 /prefetch:1
  2⤵
  PID:7396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=12860,i,2370044763782154708,10370617446487692946,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=12880 /prefetch:1
  2⤵
  PID:7456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=13048,i,650515300287852504,12053069270842949129,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=13064 /prefetch:1
  2⤵
  PID:7512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=12468,i,9522125730929396874,15249174209620706263,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=13196 /prefetch:1
  2⤵
  PID:7576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=13188,i,16923434039180195234,17090405547964147962,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=12700 /prefetch:1
  2⤵
  PID:7668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11456,i,12916306762555407887,15015718353422343772,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11672 /prefetch:14
  2⤵
  PID:6656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11776,i,18311459249463549176,7298638201064261073,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10200 /prefetch:14
  2⤵
  PID:6412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=8048,i,8099608755948131147,9926790406831858615,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11992 /prefetch:1
  2⤵
  PID:6984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11712,i,1571712848734702608,4417712868735210054,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8908 /prefetch:14
  2⤵
  PID:7216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8728,i,12933985187785028877,15798123586645257964,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11760 /prefetch:14
  2⤵
  PID:8012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13608,i,5529128571855192190,9505610343951951264,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=11808 /prefetch:14
  2⤵
  PID:8016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13652,i,18389212720590843188,5311645266847990664,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=12848 /prefetch:14
  2⤵
  PID:8112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3164,i,12454944464924132002,9480686120089711461,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=13600 /prefetch:14
  2⤵
  PID:6640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=12872,i,2109096333177719467,7023018619375930206,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=13328 /prefetch:1
  2⤵
  PID:7128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12864,i,14484540257671771553,9701663658798165672,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=13324 /prefetch:14
  2⤵
  PID:6632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=6104,i,13474618800634763196,2565185726284308509,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:6760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=6912,i,16013229236932649176,6140820351561062009,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=13072 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=8636,i,12736796395759939584,10307044080935472332,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8892 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=10560,i,9305546006125687619,2831078906683994224,2097152 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7860 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,16738021596889820364,8147341335997572136,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:14
  2⤵
  PID:7164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7624,i,11564097133421853285,15701873223274267488,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=7412 /prefetch:14
  2⤵
  PID:6684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,12998390896220771518,17372217284813933223,524288 --field-trial-handle=2288,i,13675547682435632316,10294904509876031345,262144 --variations-seed-version --mojo-platform-channel-handle=10556 /prefetch:14
  2⤵
  PID:7224

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4828

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1636

C:\Users\Admin\AppData\Local\Temp\1bed91c7-3683-43e2-a55f-bd17677c11db_SWTFU_1_2_FPS_FIX.7z.1db\Star Wars - The Force Unleashed\60 FPS\SWTFU.exe
"C:\Users\Admin\AppData\Local\Temp\1bed91c7-3683-43e2-a55f-bd17677c11db_SWTFU_1_2_FPS_FIX.7z.1db\Star Wars - The Force Unleashed\60 FPS\SWTFU.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5280

C:\Users\Admin\Downloads\SWTFU_1_2_FPS_FIX\Star Wars - The Force Unleashed\60 FPS\SWTFU.exe
"C:\Users\Admin\Downloads\SWTFU_1_2_FPS_FIX\Star Wars - The Force Unleashed\60 FPS\SWTFU.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 005894630a7fa2e9eff3532889fe65cf47da42f44d0adc3de3b90edece0f9e7f
MD5 c3ab9168feb119324121cf9831f7a67e
SHA1 db22f051e597a1456d28395b7fd726db83843fa3
SHA512 d81d9c9f815a4b8ba13cf3f7e181c01742572afade9c08740240f2ca4c3bda95642bad38b26f7341c9e31b832a6ad1853c9e142b4cabe147ee3554034fcc3064
TLSH
T12AE026C516CECA7EBA91748B527C530CC2C1BA4FAACCB91B2B00858D7403084B3D3BA1
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 38KB
SHA256 49e64d3ed6fa7cd75bd9e1d68a4a6db1667e4706f6354a97bf562dced5c78464
MD5 543599d2ca352c98f24b367fed1efe87
SHA1 a478e6c9c448b507158198b2b9936c8fab198cdc
SHA512 ad6705236eebff2e182a7dc1a1163741962ca6d87e485663843a4badece80424fec831260826f95890b1d4663026198ec5646cb5c7b9ed813374627ec2a96147
SSDEEP 768:GHRXACTGqn4j/ADPN0Qo7pPg0gbCy6E9pvZwcWx83rmnbhaRbRkhQl6:HeR4bA7CVjgbZpP3Wk6b8ruT
TLSH
T1DF03F1AF2B7D6A752F2A9394013F0AF4D48DE01E3465A158A26721F97D2C8D7748B0DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000154

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000154
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000175

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000175
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000177

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000177
Size 52KB
SHA256 0c72ee36fc8f17f1973a2d2cef4805a369b78e7f25cd8276543e59ddb1ad0457
MD5 293c8b9dd1ce5b12ae9cdb2730347f0c
SHA1 9bc0055cf4dd0371390739d151ae6ef5f66098ad
SHA512 eec52a1e161389e5336e604b2a97613a50038b11444c948b59052cbdd51fcc3c300aab7c659fafbe9eb7b223045a1cd43811c65b1df334792ef86baf0c421b49
SSDEEP 1536:jmDhqE+FYOqTbzsx7ehMeGAxHL18DnOBcLysp:j6qEiwTfsx7eh3FynhX
TLSH
T11933F1B5674174BA3AA7F87DADE9CB876F3F3D0F569810ADA056893F18C84C27182091
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000178

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000178
Size 27KB
SHA256 7755b27390678d2d72e4e20722e37d56386d8f01224e625d67bd4404f43600b8
MD5 a6b33ad5aa46835b424b9c9c89eb7287
SHA1 9e0134816dea0fbfa7e17b66b90e1b06f8fafe8a
SHA512 5a93c11dc91f6756a853e2ca1ba79ea99ec45e585187549a6c4d1b74dbfedf04f0e4003e826b6b0488decaf66b1a9b26287f8e544d0afa782b083f6640cbe2aa
SSDEEP 768:KTBE8PQqZELS1R3bRxcKYaePTqI3wnEDmtJiQn:KW0QwLR3bR2KYNmIwpiy
TLSH
T121C2E1765A17DA04AF859557BB47C07133297322160AFE401A08B8BEBFF8709371F65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16788e0008c085b0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\16788e0008c085b0_0
Size 3KB
SHA256 ff853925033be19d235ab8f292c8e9d16f42d47a8115a3708194007b78f15502
MD5 4dc27365eb8fbe821ee164039ca85e28
SHA1 088697db39ad7510c77c725ceaf60e0be16fbd5c
SHA512 682a064c11e86ad9353beb983348de0e5f065aeca443ae047ad9377d5f653b0c35a710df57e394f4416cc4575cbd9a8f6178e0211cb34a01d22b3f6ac08d1004
TLSH
T10371C6EAD7819609CF3253F912938626A33580092ED7A72360C1EB721DA42F769CDD4E
MD5 SHA1 SHA512 TLSH

Submit Download

c9494b45e551be58_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c9494b45e551be58_0
Size 292B
SHA256 827a5113adf3c1cbf10a17fe71b95d664a6ec8c2aca769816f206244e3d6812a
MD5 1a0b099b2fb8dac1012dd126c1577b66
SHA1 07c5842a22505cdabf86c4615277bf7d166db9b2
SHA512 45a91b6f0cae1c34eece0efcf1b4a10cad3eab529c0d80942ba7e0e4f6e7345dac05faa8760f6360a42db28374c7ff30a22aa1e396a936270f91a10b1d144b86
TLSH
T17DE02BEF90613D51E67E217193EE112FCB4B40E50568D45CF11113B162447783589B03
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 7e4ca602993b955a2847f27908c3a81820d062ac469466eebc390216be2f653d
MD5 fe9256b4910ae111c061dc4425639091
SHA1 918829adfc98efb5d7ca33d23eeff0c147011bb0
SHA512 6967b7b21081feb8a3f648fc19e36ac5a426a0c5c9b3d7d17ce0a9d83c8512ab82c103377e2c7319545a45635a1b4ee3cd03fd99478454a950d11850c793df8d
TLSH
T1E78196DD87F45ED5CFEA9EB190A16FCE32F2C89E89031B8214155DA42707F9981E2C23
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 174d5cdab5c9f38b6aceaddd6c1b56966bf5d5fa3a614713e1280df41c0d734b
MD5 e33de9b9141feac3dee767c36388d2c8
SHA1 cb6f83b11fe94e3f111be7397fa287f46bb32dcf
SHA512 91c2cb2c7c467a267e8276be17576433de750deacf8c93e4a5be84da27d3576f268b4b1dc4d37bd2e94f57e61f899cebdb997089465dc3ac4560b398385b1d41
TLSH
T19B41F8D40BE90AC2DBFC8EF560E1AADD37F0C4AE01176E8064422E700B0AF9791D2973
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 b9a950de77555a9e69abde835dc1ffdce85df029d12f6bc69806d8f32b82ab61
MD5 feec647867c7f82af5dc14f06735fbbe
SHA1 62f50f834ad040d0a44d477ecfcadfd9662eeac4
SHA512 fb8eb7d916054f3e69f01134eed70d6b63549eb7ffa4536fabfc4cd15be3f1519d6b2868edf280ca390607808656fbc8af6884fd7ca5ad9db300f6f389983225
SSDEEP 192:MPsRjq1T/KUXSSPOMdZGNg5A7N4lsWYhT0tmb:M0d4nPJdgU+1hT0y
TLSH
T1C842D989C6D41F82CFA96CF029D05EC935F2A69A44C35F6313155D7127EBBCD40E2A72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 e5939fc731cd4258df1b87e305e291d7ac95cce35eea91deea794e3091ae9a16
MD5 74c3c2606a079320cc2d9732ba5c4d40
SHA1 3bb4cf24b98d1387c58b01c9ab71d6f05c5cbe6e
SHA512 828c79c6bf59d6bbd60936e3a04a9a59b4c6b73e66c5a40e7a9254e0f2c5430a1adac85c9c4e168cb0d0e47c3c9f6014be4cea3b7edd537da2fe2d8be74997a4
SSDEEP 192:3Psdjq1T/KUXSSPOMdZGNg5s7N4lsWYhT0tm5:3054nPJdgU61hT0U
TLSH
T10E42DA89C6E41F82CFA96CF029D05EC939F2A69A44C35F6313155D7127EBBCD40E2A72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 2cc9f8521c780a5b58b79d5b3cadf5bd931552bb22c00c5ec01522c4f721e4f7
MD5 0413eb0edfbf0e8d6aa9203188bb785b
SHA1 b69c62703c55428e7307dfc9a00d527e1b321374
SHA512 51edd657c32e984b1c571b1e08c82b6c080fa4ad892859ce4406eb50c73ca71a09112227273a8528df6a06121d04bdcf11f4dcae1288c8a969063f7c70c11158
SSDEEP 192:CULwrGspuXmKVuttdZWNg5ukivXb2anoh:Cswsuvd8UdI2aa
TLSH
T1D5229389C6E41FD2CFAA6DB029E01E8939F2E58A44431F4353161DB517EBFCE40E2972
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5aa77c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5aa77c.TMP
Size 2KB
SHA256 c0dac6d70af8d0db600736c5a567305ab113be6d7564ae1e68f2ebba5a3ae242
MD5 91312f57ee2ae421452015b469ec52eb
SHA1 cd441900dad964844c0b25a22b7d93457070ad84
SHA512 1216d1b84d1b13500fff864ed074282be99ce65dfde172ad2418df9d7c9d129acfea44dfe22074d74fb7f9f377bf6604cc656fd38731a265440161ba25966310
TLSH
T1E641F8D40BE90AC2DBFC8EF660E16ADD33F0D4AE01176E8164422E701B0AF9791D2973
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 df61bcb1a05e7e1fc13eeb2bf6b296c412138c0262907156cd2114c001951f84
MD5 6d783d6705fb7d055d60a2c52199155c
SHA1 925147477491a64c7d1421875392c03d8ea0d0cb
SHA512 41115df9c6907fa2ed542914e06d06b75191f46d7b664c34b0e8ceadf2e1955d9eef17a80c494981f7db5bdba86c62837723a5d988bab3227e6425b5cab1f2ec
SSDEEP 96:DKOl82HaVZjh9czQQdzGO5cwBAP/PGHMk:D5l82HaVZjh9cEQdz75ckAP/PGsk
TLSH
T119A1BDF3C3E5822DDA1195F0AA146F1BCE2D0456436C3D5A89E4AF1BA3F2471E151B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 37KB
SHA256 b42270323e0d1520e54506a1666c466462a2f01faafde9ac7e5f4fb3d7a5ad27
MD5 08e2d8ab777a38bfb2067d637ada2817
SHA1 1594f16cd83689e00ceffee4cf7894769aac7974
SHA512 eacc56de38fa24dade7f0f63a115c4167c0db802b1cffa8027067819ea6265883641cd125a22c9abffb29fb84f1ee304eec27f4c452636ef68b1ddc848497b9d
SSDEEP 384:D5l82znF8Mv2MeZbeJz0or17xuZ45Dx+6evAJKiueE5cxqnzJ9r99C7oaVZXcEQA:fkMhY8/p9al8gtH4t
TLSH
T10B03CDF7C3F49D6F882265F56A15AE1BCD592A18033C3C99C9E87E0763E2860D215B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 6a6869fad635788e2c6d3ddd72d4be580e78cfe663b304badcd1691edf338853
MD5 40c140a67417cf41bf7623a886914e7d
SHA1 a5133cea5969f11a48dad21f4d62eef117e9ef6d
SHA512 5c6e5258f13329a289d2521b2a57000caf8bd29a96f90173e3b700a572784c836de988703d8e61efaade025fbe7f82735fc708b05c808de0f00cfe00662bf29f
SSDEEP 384:D5l82znF4aVZXcEQi75cAP/strLniEWvpkaRmlAyGQzj068a+D1zzVTkuIf/Krt/:ZukBzJ
TLSH
T1D462BCF7C3F4993E891155F4AA156E1BCE5D1A15436C3C5AC9E86E1BA3F28B0E200B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 9cf3a0fc09647e1165dc9146c49aaaef108df2f3b683b63422c1626525ed354f
MD5 e595702efbe2add31b51bf7e6632b5f3
SHA1 2381d0a88a868b1c8a5a1e0ec63ba53e38fd6238
SHA512 a3d690df7cbe75544027d3ad268c40fb6f396a7bae8d7f33400ba37547d221ae2bac870cfaf85c5cd757e5140bfa98e1b7ae601aae263abff57ba9507d69fe59
TLSH
T18FD022E3229130B9A59D3E9A886AFC8EC37A10A10803DED92BE0699D157246E9A07244
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 1cb031a3786be742724b2bdedafee531546a103a33ca12d3a13ee6fedaf76847
MD5 c2d6cc76770fc15ac28a2d6006cae65c
SHA1 307e71732a69f6cd018e6b42e1f2f1fe8f9dcba1
SHA512 610fce966ae93266956c297f66b9d1da41a4a9ceca1b3fa0ec0417673a509be8649359b59b90d915ae3c74de6241575e9466596199906615861edab0d2ea1a9f
TLSH
T169D0235322947075655C7E894477BC4FC76600510803DDDC36D0559D057145D1D07545
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 54ae1d67c4741e6047e1b0bf4113bc29c102d799bd97c988a01416c204db2840
MD5 713c3b2da595f0f32bcf80910c8c887d
SHA1 f6ff85ba859927fc3fe1756a45f02346289f5270
SHA512 1e4a76a942468b253ccb4f35e1112365e51536a242bed1f2720c759a4b4aa1c0727c54954e106cffa0b9594e945a831803e0c2fd2250a8dc841e4fa0e2d961e3
SSDEEP 192:sxRqRox2/f5sHTChTIZTdbgeVbBUoD8pJ6/g6+WNPOa4/YClyuOh+GpIgDelVqNm:sxRqM2/f5sH+hT2TdbzDmk/5T4/Ohvjm
TLSH
T1A262D6566924983B5CC7D608BE35BF52DBF9503398901F5CA7FCCA1C18EA6ED220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c785c768c2b0e5f4c57e762b725b0afa5638214c1525a2eb7158b4da9b048e56
MD5 83c12cbe1aa06058833c269e86ecc344
SHA1 d48a81b00979da85d4e79b47358db1a835214c5d
SHA512 963ae9aaac4bf827e3a182a555905444888562e72fb5095424a65a35deda6e0e39187f0888e1518ea7e3cdbd351c364135d58dc9aeeded847dded2b2a262e67e
SSDEEP 192:sxRBRox2/f5s2TUTIZTdbgDyoD8pi/g6+WNIYCnGuOh+GpIgVlVqJ:sxRBM2/f5s2QT2Tdbbi/5IYhvE
TLSH
T1A032C7166E28AC3B9CC7E20DBB65BF53D6F9503261D02F58E6FC961C14EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 27KB
SHA256 73899bdd949550f71db7cb5ad54bb79ec451ac70cc291be92abd374c228b62e3
MD5 27291fc61fba9512506138b8ae26ba24
SHA1 f125c15ba0e21093df49cdfcb2316385510eb48e
SHA512 1ee9108567327a378fbfd71a573a0bac23147d785a36d1dee20e09b30c12f19717a6f59739d09d00364aac644a4e5c7249453f46af38030c552d2370fac279d9
SSDEEP 768:sedm42/f8+F0bj/5pPlKUyIVcrvhL2/wv:ddm4V+F4pP3cr52Yv
TLSH
T16FC256A3B4304EBA0EDA9835F425FF39D695045699D04FA6ABECC81C14EB5FD6801C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 9e5544095fc20b72e38c4c22636d88bee746de5eabaa85860e965c3861b311de
MD5 7e5ae897cc21e98dd47556dd24ed5c69
SHA1 e3caad566cfa4ba057531d5ef69e0ce923dc235f
SHA512 b7b5e37c3c737c6743acc1371d3d5721ac643bebe8cc839459e83827afd02502ce3dce1228fbaf7dec06c9af488cc75a69253a1841fe7760dd64c40594accddb
SSDEEP 768:smXm42/f8+F0bA/5y5lKUyInJcrAhL2nGv:BXm4V+F3y5jcrI2Gv
TLSH
T1C3D255A3B4704EBA0EEA9435F425FE3DD69604169DD04FA6BBE8C81C14EB5FD6801C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 091a7c4fb5a6b9e83f58fc76a4e9228ff702df92070f9c24e79e5ac374d667f4
MD5 c55549c267706f263572e3c6a30451ad
SHA1 5ffaed90410860553a6469ec8917e45a34155c28
SHA512 9d05ca5b2fce9f7677fd77392d16b73f008e8d5fdb84311a68d6cd675f8976695aede2e56ae1ad7588598684ee6ec12937a58bb17afd8c7d217981dcdc4ecc8c
SSDEEP 384:sxRqdm12/f5sH+hT2TdbbDeg/5cI/fhvj2/FWv:sedm12/f8+F0bP/57fhL2/wv
TLSH
T1FD82C6666924C87B4CC7D908BE35BF62D7F9102399911F5CA7FCC51C18EE6ED220681B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 35545fec8eeed0cd49213d5a76c0af068a896cceae4c33d49953f2b8355d4268
MD5 55a3917561d5355e5ff771413dd08ba9
SHA1 fa660220e15dede8bae7f8d6da0f7909448f3fc9
SHA512 50e370dc3db23130266cc0b51288c66b8c50bff8b5bb979ca74fdd2f790a8044dd6ffcb1087ddee761d39ee3ccb4aee61c6432e9d2934a754b657c8432a70683
SSDEEP 192:sxRmRox2/f5sHTUTIZTdbgDyoD8pi/g6+WNIYCnGuOh+GpIgDslVqNm:sxRmM2/f5sHQT2Tdbbi/5IYhvlm
TLSH
T10752C6566A24D87B4CCAD60CAB35BF53D7F91032A5901F5CAAFCD61C04EE6ED220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 29KB
SHA256 c26a6a40c04378dc68bb328a3a415ff6604e966df71e2e20fe1eab1704e3227d
MD5 10fbd65804dc842be2b61a1b9724afb5
SHA1 5dce351fafa28ff1e8b0eab9300f58c20f21c5e4
SHA512 c761c3955a4cbac9003daa363abaa9b56aa99cfd4a94f2fc3f2987bd7d581c83ea7b38b3ceac7cc87d0032a71f19c3cee11df617cc3e02155b6141c2e4d321ce
SSDEEP 768:jC+veP7pLuLfDQWgQ+f4+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVVV0QqcNroZLa:jC+veJEfDQWgQ+f4+u1jaeV0VcmM
TLSH
T174D2EB7B640DCB7F4F804ADDAC197A9F6DA802CB9698CD4047FE941C02C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5ebed9bd-62b6-468e-b9d1-5ec7366fae92\index-dir\the-real-index
Size 3KB
SHA256 254c85c02fa3e9527282508c07a370db39b84f32023c9b8a8d3ae1b46aa8d910
MD5 d09caec5d4ed602da5d28b2e1e041549
SHA1 fe6d07178be4217c48cddd946b882a20a5a3abfd
SHA512 11c6bfe8ebdc8dcf6e123d3d617901e5be14388caa4366a7bea0c83d3da14ab60358567b62b4687ada57484d983de748d69bbfcd6de99f334ebeae71d9414817
TLSH
T18A51F88E4C476F65DD9D29B318F62842733534FE97859B079A9CDC343CC33291C6A619
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5ebed9bd-62b6-468e-b9d1-5ec7366fae92\index-dir\the-real-index
Size 336B
SHA256 4eb57ccb33e96a4b922f33fd127a4d4d5fdca5283264d94555baeaaf3939ef9a
MD5 ad99ed2dc2dfd7cd38c10e707f05abf8
SHA1 b118d3ef9aa36f6d71a30ccd75679d19e75c8b56
SHA512 b4abe3fd77a65e400165633b7886885c2b899a3c2c5207cb6765aaca0c4633e8ef19d8348d8e447b3ed659530501a8b303e5ef36bf4bae491ddbc294f7415fcd
TLSH
T1EEE02B8A9C914A17C5266D7606B3501A373A01FE25016F5A10BD14196514B3C4741105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aafe8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5ebed9bd-62b6-468e-b9d1-5ec7366fae92\index-dir\the-real-index~RFe5aafe8.TMP
Size 336B
SHA256 18d5c1dce245c36c36cdf10dbef45a7f4ed9fa29c63dbaaa8e6fb8f58f9e9616
MD5 b5b17371468e6924b73616a2f3866963
SHA1 898905e1d09afa375e99b1d8c8e97a3658c8c883
SHA512 112e8c018eb0f5ac98d9de8751266588538bebdb430b0275239e70ac27de2270621318982e6e2fa47f1cdbedbc8cdd615984abc6541979934961354425ce896b
TLSH
T1EDE097CB08906DB3CA275E7A2243A20A333F48753502AB2F10EE181F6930BBC4691206
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e7f4f520-5d4e-48d2-893b-413843fccfaa\index-dir\the-real-index
Size 72B
SHA256 91f7f18d1d4d165e0757783375c1f981df00615c398542e2fea67c1c344c7cf2
MD5 b82f6668999072339e4dc5181b381d9c
SHA1 15ad5cbee8de3f9ba089a83232593db30fc4aacd
SHA512 da466bcf488173ed6e33c0624192c64a07cde6ce221e4524eab0b630ef30f50039a7a1225d627517ed2fdadc2e1475f124a87149b632030b0a477ebe08a71f5f
TLSH
T1A0A0021C16C10C07C14312B525E606B136208D91A332270A96EC4744D9E0566454304C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b08f5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e7f4f520-5d4e-48d2-893b-413843fccfaa\index-dir\the-real-index~RFe5b08f5.TMP
Size 72B
SHA256 51216e3eba1d66fc467e1c387273ec5e03d2e82d02dc8f73ab5297fdb18631d9
MD5 d901c1929341561f51dad54e0f08c6f5
SHA1 5a4a879964147b3c57122706009ea4a031c4d727
SHA512 72234aaab0196f5be85e7cc0fc9f4aae141a4dd15e5c1753441e1575a77ad6178949160b847585053e584f7210e3de86a4f1a5041ec0687a23aa199ce040b074
TLSH
T152A0025147D18345C05757F21553C24632C0E85111101B0E60D50244DD908C0458101E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 fd4335f4a3b68e429cfc7a5655542ee81bd3477ad2de632e39e028283fd6984c
MD5 2ef52652e74a5d43d5c517ce2b184ecf
SHA1 8f30ab8e20c14835d61bc408408d554bcf99fc82
SHA512 99ea8fdd2e314da3fecd074f28e5320b9674b84b25d9ed841451b1ecab7e6fd760447ea10bdbc33244004bcbe9900fbf3fe3a476b2c8a921bf4769b3a6b2705d
TLSH
T146E0C0FB2CF70824F92B83CB1431607400497C54C542FCDF506A61D790F23112809E25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\75fd367f5f924ee7aa62f0705bc8e66d0a7b6dc2\68a33613-69b5-47c2-b11b-ad48ed073765\index-dir\the-real-index
Size 72B
SHA256 250e954ed80b2d51f876f4ebf844583c71562738c9465ef110d6c5bb465fd646
MD5 5a9f5114a261e52035623b75d29318a6
SHA1 f7cc31d62fe099199cc44f269e280ef78e4874d5
SHA512 1acbd751946730ea8686423a1f20eeaebd88d5f60eae5bac0526942e9b6aa8a5482a030c6bcfdc4aad74e96dce62ab7bd988bdb09ffdca957ef80288e3325798
TLSH
T104A00228C5914305D5C053F035C957D9E3648C9485820301D8A19755D994159D381834
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ccde6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\75fd367f5f924ee7aa62f0705bc8e66d0a7b6dc2\68a33613-69b5-47c2-b11b-ad48ed073765\index-dir\the-real-index~RFe5ccde6.TMP
Size 48B
SHA256 72a8cb6afb4434d1e8b761ef73b4a3eeb1e6563e3ba9f88c13b248bf86d21e6c
MD5 fd318dc82d96622838938b70f8baff66
SHA1 9180153270659705b4945472427e6cbc7da3493a
SHA512 639fc84c16c7746be1b7800d8c6f56d5df644385206f1a7c1175aaa3c6e4d85914790e770c42db82c72170f32e4156d184665122b2fb00d27102717c5ed2e9d3
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\75fd367f5f924ee7aa62f0705bc8e66d0a7b6dc2\index.txt
Size 247B
SHA256 70cae4986fc6c49c80935508e6a16ef1fce793ea810ed303dcf74b04c984f436
MD5 4540917bafd314d31b5839957bf51c76
SHA1 134c40174240d54fd649a7be26ae076fce9fdf47
SHA512 fad9df194b7b1e2c321b1ff0942de77e06f76a670f80fc77bb507090f829169507c1108b89a08ecd40b326e9e6ad4e9e17b837817e0f85c89cbbdcc0bab46f64
TLSH
T164D0A7F940BCE3665EB19245702D2CACAC171EC6B8EB085B39D405AC9326C368CD7DA7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5cce25.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\75fd367f5f924ee7aa62f0705bc8e66d0a7b6dc2\index.txt~RFe5cce25.TMP
Size 253B
SHA256 e038cb42e1ba5f5e9a52881bab06bf62da3ecbe2bf5ddb3f62ca84d6cd2e56bd
MD5 17c7a07db5caece0bdfb92c478e756ca
SHA1 c596cff377871f3d80a0753e691853b667e19973
SHA512 35cc72dd52d5a2a4e6e9ed63d47466cd36766bbbe55e09de41cd5b5c0f712f575abffe64f2ae85e9c5c6c19a34d9d6d1d1946fb32243d3155735895785921184
TLSH
T1AFD05BB901BC9366597191456029189CAC171E85B897045A3994256853358238DD6DA7
MD5 SHA1 SHA512 TLSH

Submit Download

67a473248953641b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
Size 169KB
SHA256 e61e30e861708539321a4a71e0efcae2696ff8885bdffab5ad27652598d0c7a6
MD5 5662fd46a733488e34c0134487234b80
SHA1 f4366e1de6173c5f57738f193cdc36f8f79bcc28
SHA512 b3c57ccfd05367fc9e13af36e612296e0a585e7d951efc6a2958b4f6224454ba1fa21e4185f1721ef4865c0dad2cd5dbae03d2fa09e629f1524692e38bb0923e
SSDEEP 3072:ALejzWM9SNxPCD1hFiY5KcukCQG1KUfC13sq:AkzWUF1KjjOdmq
TLSH
T154044457D1F899636F6B4443E8857E82B32C3047E619DAA1F987BFF0101EA2A70F5835
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67a473248953641b_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_1
Size 223KB
SHA256 cb5a7cabf3138e4e21449e27081ce3bf146a37a6ca174c5c647e8fb22e67b303
MD5 68e82e9b3224752a441d41b5a75bb51c
SHA1 b96f5673a417c7e16a19a5a6819be68828df3776
SHA512 8c3501a81643da38c71ecfa2ca3505b965c18b391c43743cf4cf7256fa9db80d554e5e2378e8a08be9ae11331a9d49fcfb7394f1cc0375ac2d3c1527bfbb96c3
SSDEEP 6144:jvWvJ8Nz+FD4vEe5b1wCR1A5UFewjImsVcpq:SCR1A58ewI3
TLSH
T17B24089A632617BFDF3943B95007BE1153210140EAD3C0C6374A579A242EAD7B6BEE3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8e6fadf257a74f8a160a0fb372d125b8a44a4236434deec130f343a2b9310475
MD5 8fcee59595160ec841b471740b57c293
SHA1 8d3bd4f78e348863817c72e3efa505dcef7b715a
SHA512 8f3a9a4aa9c96aa35f3f726f788b3d58a0671d67e9d029e1e9e85d6d1a3f5887176becfe521b1bdf3054ba3bd43beb463773a18f69f8e1efd218aafb45a84e77
TLSH
T178B012689C0F6601C5750130316310CC2358BE41650813368479D1D9E57B0905184001
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 1f3c61f76e389c61be3f5a850a1e06d1e2e97b42172090ae34646b9a8fe8050f
MD5 e573dc45e5b8ed20824b74736c257463
SHA1 d99c7705fbb7213965f4c5841f8732e5bf07be89
SHA512 40e9922c8651e8001fb2372e8fd56a37da201dd1db164a16eee297a17674406f66d6f663bce780a44446fc12763094bb11740dc486c6b156f2e77960bc549c72
TLSH
T1D3B012A4880BA902C400237020A010C47630DED44501312088654076C863150508C015
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 0d2df32cafb89d7ea8aa9661a1cc165d81d45a5f650e92b24dd09c130e7de0af
MD5 816462d7eab55b027f651f1f943d1f87
SHA1 93fbca99d89d6c2db4e382668f6032c418ad07ab
SHA512 3838a4d74938a203fe89fd7448fa402b82059957e51f9ae1b3fb05049887a312f39e402fdfc302a11ce22da603483e87e26004462d0b60b59445e8cff3ed43ca
TLSH
T1BDA00269DF8FD401C04117B02172068C6A10CF98C5557375C9E80086CDA314183C1120
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b0905.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b0905.TMP
Size 48B
SHA256 c9dd410ac33b73d25a7bc542530e56d4401127a71150e4bf22d2b928ee229c08
MD5 7aa7333d26fae227e656171176132b83
SHA1 970efb05bd523a145af5ebd07ae676393b057572
SHA512 bac4c458bcdf07bafe2f8abe7d30a0aee9053a32d92681479d825ee6eb2252e3c2177e9d81ba734a66043ebd84b31ef466a58ee4820ca747562c74991bf5ca77
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5e3c0c92b947107af8d983648805b5506fea93852cb721c73378324282961ad0
MD5 ca4854c1a5c3b33f305aaae1edba6bc4
SHA1 eaf005ec7836c2911af74f0efe474b2771d84914
SHA512 dcaee1becca25aad2d2a0fa8428ac356dff30796e7d9cdbcb40b459a42d332c3f5e7acacc99c40690316d5d6d2e0282c41a74a4b1ad26041eb533bd418a9b40c
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHFSr/VPTXWbAOgHXK42gZXc9lM4gK9GKiz:CbEBVj5JAdSp9/EgTK7j6dJOHFSr/VPn
TLSH
T11A915350347F43403C3E690C85F8CC6B528274B6342AA57B7BA885A61FA7E465EFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 156B
SHA256 6e55cb8f852ae5371dc36561096953101662f5cfddf6d39c865a6547fc831085
MD5 6d0896c2f0187296617ac764d3e24d6b
SHA1 4a52955f2c6842632b27a9c034b0180fc57ed8e0
SHA512 e2fb2500337e6198a091870c409c000119a9fea8fa78b5b68f6cafa669047864d094a37be5356e53d4de1f549bef286c752cc45d89968c23f43b43dba6675e92
TLSH
T147C08CD30C30E28A8F34EAC91034771DD617404888D4CCE8A824311922B86334042625
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5cd048.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5cd048.TMP
Size 163B
SHA256 14741aba481d5e3b49e22b5b1c9ec307b1ce1456eec7085806dc0ce6fb847388
MD5 7e96ec031e7f2ff87425536fc54e43ce
SHA1 fd2e300f48e2788f9b12627712dd1e53f6f0a2c5
SHA512 bd50053c54fa1f945380e3e55351a1e2ad25b80bdb5a6a28e2afd2f2e5ab48fa5d3326c9aa1386b052ba34eb1d808922eecc16546edebd7431e926a6c4d0374b
TLSH
T161C08CD30930E68A8F31A6C65034730DDA174C488CD4CCE8AC25312532B86334041625
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\f7ad868f-c94b-41e9-ace2-2db6106e6109\index-dir\temp-index
Size 72B
SHA256 dad5c449d98179063ac8c0b7a163cfb11290e2caa6382f5365fee31edc82eedc
MD5 e11a5cb958fab0afe3e0d7f336f13faa
SHA1 e96ed839dcafe7bac881612a50329173d5216f6d
SHA512 234388951a57b3c4c07c28403299fb0361b95087106aeeca82bf5e061fa7bdc1a44b613aba566e79f0ce95f3579f53dc97438133fa3c99fc4cfdc9202ed6c88c
TLSH
T110A0025143D61441D02001F470474BF52344E99405001F03EC90418CCC501D9596541A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 96B
SHA256 50d2c83d48127472a8cc2f99fc8abe7a5e1ab431340fca088c268ad7c6fc0106
MD5 0d82f1905dca4d815d95362e382ad5c3
SHA1 c3dfa20674937b5bcc13674958dfb8dc234d9f66
SHA512 4b4c457e0dc5505c2ae05b0d34f6a5990ae9fc48f2a2854dec86f6508de7e4bffc42cb3a8b5e81d1ddd0c3522275f5e568e4d91a00a134777afdfd85f4ebf1a0
TLSH
T166B002BF415696952E6574E7001975DDD86222C958D1EE9C98711478221097A1041939
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5cc0b7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5cc0b7.TMP
Size 183B
SHA256 b1128cf3e916a9a07623f83a92dedfa639eb3b676b0453d18755e7fb2b211227
MD5 ef6f90c81480bb29385ed23c73fd85e1
SHA1 316cd2afa6d379355aff967cb99d9601643f5111
SHA512 3b8fb54636de40306fb6451523cafe7b972a9c3da4e18c4b6ad2d0856105fe5c9b40e9723fda3d2e4eac62dc651b1ba34162cc8b760a5f5af49daad9de82d6fa
TLSH
T175C012BF41D5A1812E3569EF002B76E8DD663FCA4CC0DA4C486370683330C271141535
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5b42e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b42e1.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e3f0c66de12f929f87186ea7f51195c134c229b25b178a72ab4b2e44a2f4586d
MD5 2c9d13a44aa5f4eb876475e595a4626a
SHA1 c0979f8c5a84315aee27cd324edae5e0d48be7de
SHA512 c7fbba46abd8f1367cd72b8472e545083f0be57b647088761d3aefe53fd71f1b917f120afe00e0cb02cf712ee1098cccf73bb5c9e4fe02c794fa3eb9f54af4e4
SSDEEP 768:vA3aimRQVPbp8+p3bd66j+4BRv86aLIWQ2ewBKZOU:vA3aiv98+p3Z6n4ye2evZb
TLSH
T1BFF2AEB1ECA99D339CF9D208B64637836EF451A3E5C01E98D9EDAB0D149225D1B0BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 69164c733a250108c25ce03f6b24ccd86633c161a48a821e48b358b4d52de72a
MD5 e9e9c494aaa91d0cecc81597d1539286
SHA1 36b120599c5e403fe24ccdccc19deaf5e1508c78
SHA512 1374ee57b5ffc5e945b8d07f0f45a0dc54e52c9eb124ccfcf97d10190365daa50d9311e313c489f29ad432324bb251f0db3caae77d68737867bf2c45aac19182
SSDEEP 768:xFQm3mwgpiL2RVkp8+p3bd66j+4BRv86aLIWQ2ewBKZOU:Am3Iib8+p3Z6n4ye2evZb
TLSH
T106038CB2DCA8DE37ACF68784B74677839EE411A3C5C45DE8DADD6E08109319E170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ba4eb8113b290e5b20eacacd2e377f9b30a74dfc8c7563bd66ca387eea06f150
MD5 3005f95fb074d92817988d1735b83c58
SHA1 47e2ee2f80d35b283d19b9aacc916613613ca352
SHA512 153d674eaf46c00d24ea4669f282343bd6d625c4d18601e38656f58585b4d7639e3f7812d4c11a000c0013f020c5b076a43432007b93249920bb2383fc8fb078
SSDEEP 768:xFmh3WwgiiojRVLp8+p3bd66j+4BRv86aLIWQ2ewBKZOU:Wh3Ziu8+p3Z6n4ye2evZb
TLSH
T10B038D72ECA8DE77ACF68B84B75677839EE401A3C5C45DD8DAD96E0C009319E170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 885bf8662836283124a5e01161c7d82f568d55cd3a423a4e64b6243be033efba
MD5 d170d00a44eca2549c7df36eb8985a37
SHA1 517ca7d9abb70ba6091e73d30b152a0836ac33a9
SHA512 6744fc1e84529ad39c4aa722b1b16f0bd3336a0a734559fb9139869fe584987c56c4f0543ce0e476c560790662a54d8dff86b7b046940ced5c59ff03b246d11e
SSDEEP 768:xFHS3WwgiiQQRVTp8+p3bd66j+4BRv86aLIWQ2ewBKZOU:3S3Ziz8+p3Z6n4ye2evZb
TLSH
T12A039D72DCA8DE77ACFA8B84B75677839EE401A3C5C45DD8DAD96E0C009319E170BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e2c0fbbb7f101f955d60a5cb89bc90ff65af878c4df4c1aaa66b82e39731c1d7
MD5 61972124f2e33811c6f3d517fd724e41
SHA1 edda8b0fa467b3cb079a4108514e87f29bead693
SHA512 7f53b7af9e6cb3ec14d4c0b23394391d32687e9c9dbea70e06024cdcc1d9051d20ec555f7c7dbe388f428302964170a6b035ed2ec797a25375190d3b1906f2ee
SSDEEP 768:Irv+4UNbdD34cQVTNp8+p3bd66j+4BRv86aLIir2bwCl1:Ibsbp3GL8+p3Z6n4yx0ww
TLSH
T16E03BE33E9A899739CF6C648B2467B433FF851A396C10AD0D4DD2B4E419A19E230BC77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 8a2018c3ecd6f34fa7c52806e365f4455d94486eeaf7ae3854c27e5b1a238ce0
MD5 f8545f17118f6147cd5a1d331fb3bd98
SHA1 08c7f18bb62d7ce57b729d99baa3eee791a7a1ac
SHA512 b03e9f6f7cee14b40a805e5e4cd7d450f4ce3409408d7801ae14c1e7e3d6345c7afb47e6b13197492e10d473891f491d2928d0adf6c04d685461abf7aee196e9
SSDEEP 768:7rv+4UNbdD3EitRQVPbp8+p3bd66j+4BRv86aLIWQ2bwClP:7bsbp3EiW98+p3Z6n4ye0w6
TLSH
T15813BF72E9A89D339CFAC60472867B837FF811A395C10E94E5D96B4E409719E270FC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e110b32ca2110398db4be0e2f51d71579536122146444eb882ab03fa3fedd2dc
MD5 cb7129ce18ac5852a2e5eb2cc509e1c0
SHA1 79b4d75eaed16c3142016616d2a56dfacce107cd
SHA512 ebc30279dc44ce169e90951827ab1a4f19b66bb707c29a6bff648dd9b9dc3ed3c9a3b3ef9f3fc30613726b958bb8d4d807003c6d181e1bc477f0f3d2886fe877
SSDEEP 768:irv+4UNbdD3vrQVPNp8+p3bd66j+4BRv86aLITQ2bwCl1:ibsbp36L8+p3Z6n4yt0ww
TLSH
T18303BF72E5689D339CF6C60472867B837FF811A389C10E94E9D96B4E409B19E270F937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5678c35707bdc6129dcdb5a3328afc961d13dbf9c751cf454bcc2f761158805e
MD5 d90d64be9a49bf60e5cf5ccd945a114c
SHA1 388d82b0888d0a420b817670548cd89d98d36d59
SHA512 b6fff6f316f92c2ab370f667bd6a09dcb943682cccf1c5d34a05648368012d3c800bb0cec7f3f8274ff04a212bb8299889ac15758f97395a2aa257e3028a0579
TLSH
T197E00112D30951FDC0384330094B2F206AE790B002F2020A0E301ABE7C233402F31BE2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 20878180f49ee951e55ab7985d9cb98835aad60ac0529c1e705ae675bfd363ca
MD5 af94e594509648d3608cf056ac438127
SHA1 29f1413ada34e5999d1322aeda3c10666aaad4c5
SHA512 6473080eb7a88741b386e8e1c688b33c63fa939e6b36143b645a5e363efde7995630cfac6f0c2830c89177c88997e6d3733a67b96ab8633f7beb9129ef5af516
TLSH
T15CE00142E76A40EDC03953344A931B755BEBC07406B613069F2419A83C233052F65AD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c59a4ab282299a52761d0cd89b336f3860db52f0e53d26be11dc63b6b59fd8ee
MD5 05b60f893fd91a991119ec9aa9a22323
SHA1 11cb1b0ed8a3e68027b89200c415bef4c11ccb24
SHA512 4e4b3025ddd48d9a455b59b8fc072d34871e9f13591ed0aaf27c673481241a9ed67b7d4fa71481052a833323c6a0e8e1fc07ddb45a70045838c36e24c02b6d9a
TLSH
T154E04802D31900BDC038433009871B302EF7C0B006B2030A0E3009AD3C333403F31AC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 447b0897a8bfc37241eabc7aa7d8ccd8b671fbc593bfbddec6c7c2bee7dd60e2
MD5 e1b70b52f66af78e127e21f597d8177f
SHA1 929df5b6dcdc8b78c052d9ff1dd79a022057afdc
SHA512 cd7e19f9ac9bdc138bcb6b72336c4c7d2a7db20816a58a870d92c103c37ba2d9a370aa954c31aa1166520e8a36f51a0e2008caaa7269096ac88cfd0ca3927afc
TLSH
T111E00142A76A40E9C039533446931F645BE7C07406B503069F2419A82C223042E64AD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7adae000e775e2e3ef5d3cbf77022a91873160b87819650ba53b242d4ce021d5
MD5 8824c19cfd4f697f23e8c89c5307093e
SHA1 d020cd7edb988f10fb4987d5e44a2f29bf4ac3f8
SHA512 3e0d9d7cfb089838b9bd11534c7a8c57dd1395853b3ce0f236692e9edc7cf1b53772bb8563b6e73ea31a9292157736bebd263dba5bbf5d9e89f80539c3d7dac7
TLSH
T1EAE00952E36A51EEC03993304A875B656BEBC0B006BA130A5E250DAD7C22B452F66AD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 583ce0465aa0e638c359b2376aed7406a65eead934c4d11fe44d4c0dfb4d54b6
MD5 ab1aa88cbe8e2e0f215c5e7cba5b09da
SHA1 b68e6a93cf17daf29dbd6ae342dfb60dbd5e4d94
SHA512 e04a07b1f7c0109be8f18fc9e2ba83dbb97574d0ad02b6e3cb9bbcbab7c851debe6cc5d484301399b8b8963c98d6b1bc7243125102a785f7f693bc04474cb5ba
TLSH
T173E04812D30951BEC0384330094B1B306AF7D0B003B2030A0E3009BD7C233402F31AE2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3a094f5a6e8dcad7ffffc8fe538abe9f8eae56d51f59ff812782d0afe30c5e26
MD5 4f3deb4f1931bdb625f73ff8ca5dd39f
SHA1 644b46b7cdb63518cf52bbee39d9f29be584766d
SHA512 e197ec76c64f34a8639b5ace4c41729ee8c7e5197b86e3a04e108a4d94baa0187c47f38511828b310cf7c8b318c02e80eef7df61942815862fe1802c40a92046
TLSH
T147E00203A72900D9C029533445931F605BE7C07406B503069F2455A81C223042E74AD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 620169cadf6ce88ce49bdfd8adedc1059de2ab6b8e578ad17af2d111d5c817b0
MD5 e5814450ec9f62c53625a91159f833b6
SHA1 4d96eafe2b57a3f9908f93a160f19d01df87602f
SHA512 bd52b73c2131c95651b9de159e561ad628d816671bfb39e5a44fb1e99c535549bce9f6042f8f014a8e5cf7fb41730084f4c974f97a225279b7c129c1e63948e1
TLSH
T1F8E04802D31900BDC028423009871B202BE6C0A006B2030A0E2009A93C223402F21AC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c71bec383a3e7f484cad02b9406ac3bf465771917b8eba7efa08fb6b04c4c325
MD5 917e89178326471e92ad00abba646cd6
SHA1 007b593b4522aab97c947e6127b4ca1fd020347a
SHA512 56007ea74c6894fad533563225fb6c0212c9d403f3f71500cafa3627270651edc057ed33b5fbe76639d451983f4acc7abdc218ad2fe666ae8d63ed850dd62578
TLSH
T17BE00112E30951F9C03843300A872F24AEE790B102B3020A0F301AAE7C327882F71ED1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5bffc9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5bffc9.TMP
Size 392B
SHA256 214b558b53ac0e01e797a24e8987d33beee9fb75f526a16b39e7da772cd36c0c
MD5 414e9c7e95bade75481d996b803db3bf
SHA1 07e583e8e3eda53fdf460eb01b0e69a447424a81
SHA512 80ddaccb5ea8ecf5d95ccafabeb20d3639508666887f8b4db7263c6c81b9708d5199e5c8e563a188ad910dd7ed8b45516a1d713c9c9dabd448881c872550f6c3
TLSH
T195E00403F71D40D4C01D51304553175053D7C07405F40307DC0405C03C010040D74DC0
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
MD5 54b0cf5610d4cbeadf10f35941bea007
SHA1 8bcec79787775ec6c2625b88611eb0de385e393b
SHA512 3f6d82da490f1b52647d9f376be4aa3159f57072ad2b52a048895bf7f53255d860bc12cc4b5af53cf9d9ce8c76cfab722e47cef3b58fa776a8ffd7e991630253
TLSH
T1841184D00C7F1AC7C6BE0E6FA0872AED40C8A622F09830381CCCF964917901D3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4c86675a-8610-4357-9c5d-adaa02467664.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4c86675a-8610-4357-9c5d-adaa02467664.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

metadata.json~RFe5a7e97.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json~RFe5a7e97.TMP
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

e456728c-f8de-4eef-b13a-92ac66ea769f.tmp

Path C:\Users\Admin\AppData\Local\Temp\e456728c-f8de-4eef-b13a-92ac66ea769f.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1192_828053297\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SWTFU_1_2_FPS_FIX.7z.crdownload

Path C:\Users\Admin\Downloads\SWTFU_1_2_FPS_FIX.7z.crdownload
Size 15.2MB
SHA256 ec36d56980d2e793f87445f34a341b697020987c8a6cbae7d294e09ff78ebf8a
MD5 f16a4a3388c041e7c3137565c5f60dc2
SHA1 fad713e466d51fdff471120726c3dd0b80729c17
SHA512 692ec7cd23cf25123591ee214c58377c9d3c4a89a0f12d51f4ede71ce4b245bb4a4f931ac9ee5e8810aec4fbffc1dc30be517d761fbcbfd33fde8aa2d231156f
SSDEEP 393216:MN3ZepNn8GyUHyy8nUFGExhmfSk6KLqoQ6h5:+3ZepNnR5HyPCG316KGop
TLSH
T1BAF633D7F157EBB5D13AD23E12DF84347DCCAB1B9D534C1AB922A2958BC01226C1BC62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1192_482362747\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5280-2691-0x0000000000400000-0x0000000003A87000-memory.dmp

Download